1 Introduction
This Privacy Policy describes how
Mehta Travels Himachal
("we", "us", "our") collects, uses, stores, and protects the personal information of
visitors to our website and customers who book our cab, tour, and travel services.
By using our website or services, you consent to the practices described in this
policy. If you do not agree, please do not use the website or services.
2 Data We Collect
We collect only the information necessary to provide our services. This includes:
- Identity & contact data: name, phone number, email address, and (for some tours) ID proof details.
- Booking data: pickup / drop locations, travel dates, passenger count, and vehicle preferences.
- Payment data: transaction references, payment method, and billing details. Full card numbers are never stored on our servers.
- Communication data: messages sent via our contact form, email, or WhatsApp.
- Technical data: IP address, browser type, device, and pages viewed (collected via cookies and analytics).
3 How We Use Data
Your personal information is used strictly for the following purposes:
| Purpose |
Data Used |
| Processing & confirming bookings |
Name, contact, booking details |
| Sharing trip updates & driver details |
Phone number, email |
| Issuing invoices & processing refunds |
Payment & billing info |
| Customer support & dispute resolution |
Communication history |
| Marketing (only with consent) |
Email, phone (opt-in) |
| Site security & fraud prevention |
Technical data, IP address |
4 Legal Basis
We process your personal data on the following legal grounds:
- Performance of a contract — to fulfil your booking.
- Consent — for marketing communications, optional cookies, and any sensitive data you voluntarily provide.
- Legal obligation — to comply with tax, accounting, and statutory requirements.
- Legitimate interest — for security, fraud prevention, and service improvement.
You may withdraw consent at any time by contacting our Grievance Officer (Section 11).
Withdrawal does not affect processing carried out before the withdrawal.
5 Data Sharing
We do not sell your personal information. We share data only in the
following limited circumstances:
- With drivers & tour operators — only the minimum needed to operate your trip (name, pickup point, contact).
- With payment gateways — to securely process your transaction.
- With IT & hosting providers — under strict confidentiality agreements.
- With law enforcement — when legally required to comply with a valid court order or statutory request.
6 Data Retention
We retain personal data only as long as necessary for the purpose it was collected,
or as required by law:
- Booking records: up to 8 years (for tax and legal compliance).
- Marketing data: until you unsubscribe or withdraw consent.
- Site analytics: typically 26 months.
- Support communications: up to 3 years after the last interaction.
7 Security
We implement reasonable technical and organisational safeguards to protect your data,
including encrypted connections (HTTPS), access controls, and secure payment
processing through PCI‑compliant gateways.
We never store full card details
Card information is captured directly by our payment gateway. We only receive a
masked reference, so even in the unlikely event of a data breach, your full
card number is not exposed.
8 Cookies
Our website uses cookies and similar technologies to remember your preferences,
keep sessions secure, and analyse traffic. You can control cookies through your
browser settings; disabling them may affect site functionality.
- Essential cookies — required for the site to function.
- Analytics cookies — help us understand how visitors use the site.
- Preference cookies — remember your settings (e.g. language).
9 Your Rights
Under the Digital Personal Data Protection Act, 2023 (India), and comparable laws in
other jurisdictions, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Correction
Ask us to correct or update inaccurate data.
Right to Erasure
Request deletion of your data, subject to legal retention rules.
Right to Withdraw Consent
Withdraw consent for marketing at any time.
Right to Grievance Redressal
Lodge a complaint with our Grievance Officer (Section 11).
Right to Nominate
Nominate someone to exercise your rights in case of death or incapacity.
10 Children's Privacy
Our services are not directed at children under 18. We do not knowingly collect
personal data from children. If you believe a child has provided us with personal
information, please contact us so we can delete it.
11 Grievance Officer
In accordance with the DPDP Act 2023 and applicable rules, we have appointed a
Grievance Officer to address any concerns regarding your personal data.
Grievance Officer
Mr. Rajesh Mehta
Response timeline
We acknowledge every grievance within 48 hours and aim to
resolve it within 30 days of receipt.
12 Updates to This Policy
We may update this Privacy Policy from time to time. Any material changes will be
posted on this page with a revised "Last updated" date. Continued use of the website
after such updates implies acceptance of the revised policy.
Questions about your data?
Our team is happy to help — reach out anytime.