Privacy policy

[Registered company name] (“Tripthrillers”, “we”) runs tripthrillers.com. We decide how your personal data is used for the purposes below, and we are responsible for it under the Digital Personal Data Protection Act, 2023.

When you create an account

Your name, email address and mobile number, and your password, which we store only as a one-way hash that cannot be turned back into the password. If you sign in with Google, we receive your Google account's name, email address and profile picture.

When you book

Each traveller's name, age and gender, the seats or rooms chosen, and, where a travel provider requires it, an ID document type and number. ID numbers are encrypted before they are stored.

When you pay

Our payment partner handles your card or UPI details. We receive a payment reference and its status, never your full card number.

When you contact us

What you write to us, and the email address to reply to.

When you use the site

Your IP address and browser type, which we use to protect accounts, for example by limiting repeated sign-in attempts, and to diagnose problems.

• to make, change and cancel your bookings;
• to send your tickets, trip updates and account and security emails;
• to keep the service secure and prevent fraud;
• to answer your questions;
• to meet our legal duties, such as keeping tax records.

We don't sell your personal data. We send marketing only if you ask us to, and you can stop it at any time.

• Travel providers and booking partners, such as bus operators, airlines, hotels and the suppliers that connect us to them, receive what they need to issue your ticket or reservation.
• Our payment partner, to take payments and make refunds.
• Our email provider, to deliver the emails we send you.
• Our hosting and database providers, who store data for us.
• Authorities, when the law requires it.

We use one essential cookie to keep you signed in, which scripts on the page cannot read, and short-lived cookies during sign-in that protect against forged requests. Your light or dark mode choice is saved in your browser.

We don't use advertising cookies or third-party tracking.

• Account details: while your account is open, and [N] days after you close it.
• Booking and payment records: [N] years, as tax and accounting law requires.
• Messages to support: [N] months after the conversation ends.

• Every page is served over an encrypted connection.
• Passwords are hashed and ID numbers are encrypted at rest.
• Only staff who need personal data for their work can see it.
• You can end every session on every device from Sign-in & security.

You can ask us to:

• tell you what personal data we hold about you;
• correct or complete it;
• erase it, unless we must keep it by law;
• nominate someone to act for you if you can't;
• withdraw a consent you have given.

Write to privacy@tripthrillers.com. We will reply within [N] days.

Accounts are for adults. A parent or guardian booking for a child provides the child's details, and we use them only for that booking.

Your data is stored on servers in [region].

We will post any changes here and update the date at the top. If a change affects how we use data you have already given us, we will tell you by email first.

Questions about privacy: privacy@tripthrillers.com. Complaints go to our Grievance Officer, [Grievance Officer name], at grievance@tripthrillers.com. See also our Terms of service.