Skip to content

Legal

Privacy policy

What we collect, why, who sees it, and how to have it corrected or deleted. We collect only what it takes to plan and run your trip.

Last updated 4 October 2026

Who we are

Asman Tourism Private Limited ("we", "us") runs this website and the trips booked through it, and decides how the personal data described here is used. This policy explains how we handle that data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

When you send an inquiry

Your name, mobile number and email address, plus anything you choose to tell us: the destination or package you are interested in, your travel date and your message. We also note which page you sent it from.

When you sign in with Google

Google shares your name, email address and profile picture with us. We never receive your Google password. You can add a mobile number and city to your profile.

When you book

Your travel date, the number of adults and children, a contact mobile number and any special requests. Special requests may include dietary or medical needs - share only what we need to look after you on the trip. For some destinations we will also ask for travellers' identity details to obtain permits.

When you pay

Payments are handled by Razorpay. We receive the amount, the date and Razorpay's order and payment references - never your full card number, CVV, UPI PIN or bank login.

When you write a review

Your rating, review text and the name and location you choose to show. Published reviews are public.

Automatically

Like any website, our servers log technical details of each request - IP address, browser type, the page requested and the time - to keep the site secure and working. We do not use advertising or analytics trackers.

How we use it

  • to answer your inquiries and prepare quotes;
  • to confirm, arrange and run your trip, and to contact you before and during it;
  • to take payments, issue refunds and keep the accounting and tax records the law requires;
  • to send you emails about your inquiries, bookings, payments and reviews;
  • to publish reviews you submit;
  • to keep the website secure and to prevent fraud.

We use your data with your consent, which you give when you submit a form or sign in, or where it is needed to provide a service you asked for or to meet a legal obligation. We do not send marketing messages without your separate consent, and we never sell your data.

Who we share it with

Only with those who need it to deliver your trip or run the website:

  • Travel suppliers - hotels, transport operators, drivers, guides and activity providers - receive the names, contact numbers and details needed to serve you.
  • Government authorities issuing permits or registrations receive the identity details they require.
  • Razorpay processes your payments.
  • Google provides sign-in, and serves the fonts this website uses.
  • Our hosting and email providers store the website's data and deliver our emails on our behalf.
  • Law enforcement or regulators, where Indian law requires us to disclose information.

Some of these providers may process data outside India. Where they do, we rely on their contractual commitments to protect it.

Cookies

We use only the cookies the website needs to work: a session cookie that keeps you signed in, and a security cookie that protects forms against forgery. Your light or dark theme choice is saved in your own browser and never sent to us. We set no advertising or analytics cookies, so there is nothing to opt out of.

How long we keep it

  • Booking and payment records are kept for eight years, as Indian company and tax law requires.
  • Inquiries that do not lead to a booking are kept for up to two years, so we can pick up the conversation if you come back.
  • Your account and profile are kept until you ask us to delete them.
  • Server logs are kept for a short period for security, normally no more than 90 days.

Security

The website is served only over encrypted HTTPS connections, access to customer data is limited to staff who need it, and payments are processed on Razorpay's PCI DSS-compliant systems. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

  • ask for a summary of the personal data we hold about you and how we use it;
  • correct or update it - most of it you can edit yourself on your profile;
  • withdraw your consent and ask us to delete your data, except what we must keep by law, such as booking and payment records;
  • nominate someone to exercise these rights for you in the event of death or incapacity;
  • raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

To exercise any of these, email inquiry@asmantourism.com from the address on your account. We will respond within 30 days.

Children

Accounts and bookings are for adults aged 18 or over. Children's details - such as their names and ages for a family booking - are provided by the parent or guardian who books, and are used only to arrange the trip.

Grievances

If you have a concern about how we handle your data, write to our Grievance Officer at inquiry@asmantourism.com with the subject "Privacy grievance". We will acknowledge it within 48 hours and resolve it within 30 days.

Changes to this policy

We will update this policy when our practices change, and revise the date at the top. If a change materially affects how we use data you have already given us, we will tell you by email.

Contact us

Questions about this policy, or anything else, go to Asman Tourism Private Limited: