Privacy Policy

Ishanvaya Travels (“we”, “us”) is a travel company based in Bengaluru, Karnataka, India. We decide how and why the personal data described here is used, which makes us the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

This policy covers ishanvaya.com, our inquiry forms, and conversations with us by phone, WhatsApp and email.

When you send an inquiry

• Your name and phone / WhatsApp number (required).
• Your email address, if you choose to give it.
• Trip details: destination, preferred month, number of travellers, travel style, starting city or pickup preference and any message you write.
• A record of your consent: the wording you agreed to and when.

Collected automatically with an inquiry

• The page you sent it from and the tour or destination you were viewing.
• Campaign tags in the link that brought you to the website (for example “utm_source”) and the website that referred you, if any.
• Your browser type, and a one-way scrambled code (a salted hash) made from your IP address. We use these only to stop spam and repeated automated submissions. Your IP address itself is not stored.

When you call, WhatsApp or email us

Your phone number or email address and whatever you choose to tell us. When you book, we may also need the names, ages and ID details of travellers where a hotel, transport operator, temple or permit office requires them.

Please don’t share sensitive information we haven’t asked for, such as ID numbers or health details, in the inquiry form. If a trip needs them, we will explain why and how to share them.

• To reply to your inquiry and plan your trip: itineraries, quotes and follow-up by phone, WhatsApp or email.
• To make and manage bookings you ask for, and to support you before and during your trip.
• To keep the website secure and prevent spam or abuse.
• With your separate consent only: to understand how the website is used (see “Cookies and analytics”).

We use your details on the basis of the consent you give when you send an inquiry, and for purposes you would reasonably expect when you contact us yourself. We do not sell your personal data, and we don’t use your inquiry for unrelated marketing without asking you first.

• Service providers who help us run the website and receive inquiries, such as our hosting provider and the email, spreadsheet or CRM service that delivers inquiries to our team. They may use the data only to provide that service to us.
• Travel suppliers—hotels, transport operators, guides, activity operators, and temple or permit booking systems—only the details needed to deliver the trip you have booked.
• Messaging platforms: if you contact us on WhatsApp, your messages are handled by WhatsApp (Meta) under its own terms.
• Authorities, where the law requires it.

Some service providers may store or process data outside India. We choose providers that protect data appropriately and will follow any restrictions on transfers notified under Indian law.

The website stores a few small, non-personal settings in your browser so it works the way you expect:

• Whether you have closed the “Plan your trip” pop-up or already sent an inquiry, so it doesn’t keep reappearing.
• Your analytics choice, if we ask for one.
• For the current browser tab only: campaign tags and the referring website from your first page, attached to an inquiry if you send one.

If analytics is switched on, we ask first. Only if you accept do we load Google Analytics 4, which sets cookies to measure visits. It is set up with IP anonymisation and without advertising features, and the events we record never include what you type into forms. You can change your choice here at any time:

Analytics is currently switched off on this website, so no analytics cookies are set.

We keep inquiry details for as long as we need them to respond to you and plan your trip. If you don’t travel with us, we delete them once they are no longer needed for that purpose, unless the law requires us to keep them longer. Booking and payment records are kept for the periods required by tax and accounting laws.

Under the DPDP Act you can ask us to:

• Give you a summary of the personal data we hold about you and how we use it.
• Correct, complete or update your data, or erase it when it’s no longer needed.
• Stop using your data by withdrawing your consent—withdrawing is as easy as giving it, and doesn’t affect what was done before.
• Resolve a grievance about how your data was handled.
• Accept requests from a person you nominate, if you are unable to make them yourself.

Email support@ishanvaya.com with the subject “Privacy request”, or call +91 89191 82363. We may need to confirm your identity before acting on a request. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Trips for families with children are welcome, but inquiries and bookings should be made by a parent or guardian. We don’t knowingly accept inquiries directly from anyone under 18.

The website is served over HTTPS with strict security headers, forms are protected against spam and automated abuse, and access to inquiries is limited to the people who handle your trip. No system is completely secure; if a data breach affects you, we will inform you and the authorities as the law requires.

If we change how we handle personal data, we will update this page and the “Last updated” date above.

Questions about privacy: support@ishanvaya.com or +91 89191 82363. For trip planning, visit our contact page. See also our terms & conditions.