Privacy Policy

1. Who we are

Nirbhay Holidays And Events OPC Pvt Ltd. Email: bookings@nirbhayholidays.com. Phone: 7506419555, 8104491460.

Registered office: Shop No 4, SNEH SADAN BUILDING, RG Gadkari Rd, near CKP HALL, Old Panvel, Panvel, Maharashtra 410206.

Requests and complaints about your personal data are handled by Aniket Shinde, Director. Contact: 8169677485 or bookings@nirbhayholidays.com.

2. What our forms collect

Our forms are the offer popup, the footer sign-up, Contact us, the tour enquiry, the booking request and Plan Your Own Trip. Depending on the form, we collect:

• Your name and mobile number (every form).
• Your email and city, if you fill them in.
• Travellers: the number of travellers by room type and the age of each child (booking request), or the number of adults and children and each child’s age (Plan Your Own Trip).
• Trip details: the tour and departure date you chose, destination, travel dates, budget range, payment preference, and any message or notes you write.
• Your answer on the marketing consent box (yes or no).
• Where you came from: UTM tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term), ad-click IDs from Google, Meta and Microsoft (gclid, gbraid, wbraid, fbclid, msclkid), the first page you opened on our site, the page where you sent the form, and the site language.

We do not ask for card, bank, Aadhaar or passport details on this website. Please do not type them in a message box.

3. Why we use it

• To reply to your enquiry by phone, WhatsApp, SMS or email, and to prepare the itinerary and price you asked for.
• To handle your booking request: check seats, confirm with you and share the official payment details.
• To see which ads and pages bring enquiries (UTM tags and ad-click IDs), so we can stop ads that do not work.
• To keep the forms free of spam and misuse.
• Only if you tick the consent box: to send you tour offers and itineraries.

When you send a form, you give us your details for that request, and we use them to answer it (DPDP Act, section 7(a)). We use your details only for the purposes above. We do not sell them.

4. Your consent for offers

The offer popup, footer and Contact us forms have a marketing consent box. It is never ticked in advance, and you can send the form without ticking it. It reads:

“Yes, send me tour offers and itineraries on WhatsApp, SMS and email. I can stop them any time.”

To stop offers at any time, reply STOP to any of our WhatsApp or SMS messages, click unsubscribe in any of our emails, or email bookings@nirbhayholidays.com. Stopping offers does not affect messages already sent, or replies about a trip you asked us about.

5. Where your data goes

Form details go from the website only to our own CRM (our customer records system). The website does not keep a copy in a database, and its server logs record only whether a form went through, never your name, phone, email or message. Your IP address is used only to limit repeated posts and is passed to the CRM for the same reason.

Our website and CRM run on Vercel, and our database is on Supabase. They store and process the data for us, and data may be processed outside India. Messages to you by email, WhatsApp or SMS may be sent through our service providers.

When you book, we share only what is needed for the trip with hotels, transport operators and Indian Railways: travellers’ names, age and gender. We share copies of ID only where a hotel or entry point requires them.

We may also share data when the law requires it.

6. Cookies and analytics

When you arrive from an ad or a tagged link, we save the UTM tags, ad-click IDs and the first page you opened in a cookie on your device called nh_attr. It holds no name, phone or email, and it expires after 90 days. It is sent with your form so we know which ad brought the enquiry.

We do not use any analytics tool on this website at present. We will use one only after we enable it and update this page.

We do not use advertising pixels at present.

7. How long we keep it

We keep enquiries for 2 years. We keep booking and accounts records for as long as the law requires. After that, we delete them.

The nh_attr cookie expires after 90 days.

8. Your rights

Under the DPDP Act you can ask us to:

• give you a summary of the personal data we hold about you and how we use it;
• correct, complete or update it;
• delete it, unless the law requires us to keep it;
• stop using it for offers (withdraw consent);
• answer a complaint (grievance) about how we handled it;
• let a person you nominate use these rights if you die or cannot act yourself.

To ask for any of these, including correction or deletion, contact Aniket Shinde, Director, on 8169677485 or at bookings@nirbhayholidays.com, with your name and the mobile number you used on the form. We may ask you to confirm it is you. We reply to access, correction and deletion requests within 15 days.

If you are not satisfied with our reply, you can complain to the Data Protection Board of India.

9. Children

Our forms are meant to be filled in by persons aged 18 years or older. A person booking for a family may give each child’s age; we do not ask for any other details of children on this website.

10. Keeping data safe

Forms are sent over an encrypted connection (HTTPS), and the key that connects the website to our CRM stays on our server. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires.

11. Changes to this policy

We may update this policy. The date at the top shows the latest version.