1. Who is responsible for your data
Chardham Yatri (Near ISBT, Dehradun, Uttarakhand 248001, India) decides how your personal data is used and is responsible for it under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. This policy covers chardhamyatri.com, our booking forms, and bookings made by phone, WhatsApp or email.
2. What we collect
Information you give us
- Contact details: name, phone number, WhatsApp number and email address.
- Trip details: travel dates, starting city, number of adults and children, preferred hotel and vehicle, and any special requests.
- Traveller details for check-in: names, ages and photo ID details, which hotels in India are required to record at check-in.
- Health or mobility needs that you choose to tell us, so we can plan suitable stays, ponies, palkis or rest days.
- Account details: if you create an account (for example as a hotel owner), your login email, phone number and a securely hashed password.
- Payment records: amount, date, method and transaction reference. We do not collect or store card numbers, UPI PINs or bank passwords.
Information collected automatically
With your consent, we use Google Analytics to understand which pages are visited and how the site performs. This includes your approximate location, device and browser type, and pages viewed. You can accept or decline this in our cookie banner. See our Cookie Policy.
3. Why we use it
- To reply to enquiries and prepare itineraries and quotes
- To book hotels and vehicles and share pick-up details with drivers
- To contact you before and during the trip about changes, weather or delays
- To keep payment and booking records required by law
- To handle complaints and protect against fraud
- To send offers or seasonal updates, only if you have agreed. You can opt out at any time.
4. Who we share it with
We share only what each party needs to provide your service:
- Hotels, homestays and drivers that are part of your booking
- Technology providers that run this website and our forms: website hosting, cloud database, file storage, email delivery, Google Sheets for booking requests, and Google Analytics
- Government authorities, police or emergency services when the law requires it or in an emergency affecting your safety
We do not sell, rent or trade your personal data. Some of our technology providers may store data on servers outside India, under their own security safeguards.
5. How long we keep it
We keep enquiry details for up to 12 months so we can help with repeat or follow-up trips. Booking and payment records are kept for as long as Indian tax and accounting laws require. After that, we delete or anonymise them. You can ask us to delete your data earlier unless the law requires us to keep it.
6. How we protect it
The website uses HTTPS encryption, passwords are stored in hashed form, and access to booking data is limited to team members who need it. No online system is completely secure. If a breach affects your data, we will inform you and the authorities as the law requires.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- Ask for a summary of the personal data we hold about you
- Ask us to correct, complete or update it
- Withdraw consent and ask us to delete it
- Nominate another person to act for you in case of death or incapacity
- Raise a grievance with us and, if unresolved, with the Data Protection Board of India
To use these rights, email connectchardhamyatri@gmail.com with the subject "Privacy request". We may ask you to confirm your identity before acting on a request.
8. Children
Our services are booked by adults. We hold details of children only when a parent or guardian includes them in a family booking.
9. Privacy complaints
Privacy complaints are handled by our Grievance Officer, Shivam Bisht (Founder & Grievance Officer), at connectchardhamyatri@gmail.com or +91 93893 64421. See our Grievance Redressal Policy for timelines.
10. Changes to this policy
If we change how we use personal data, we will update this page and the "Last updated" date above.