travlneu
Policies

Privacy Policy

What personal data travlneu collects, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

Effective from 30 July 2026. Last updated 30 July 2026.

1. Who is responsible for your data

TRAVLNEU PRIVATE LIMITED operates travlneu and is the data fiduciary for personal data processed through the Platform. Our registered office is at 2B, Nina Apartment, P-169, Block B, Lake Town, Kolkata, West Bengal, 700089, India.

This policy explains how we handle personal data under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it.

2. What we collect

We collect only what we need to run the marketplace.

  • Account data — name, email address, mobile number and password credentials.
  • Booking data — traveller names, travel dates, destinations, the services you booked and any requirements you tell the partner.
  • Payment data — the transaction reference, amount, status and the last four digits and instrument type returned by our payment gateway. We do not collect or store full card numbers, CVV or UPI credentials.
  • Partner data — for businesses applying to list: business name, registration and tax identifiers, licences, credentials, bank settlement details and the identity documents needed for verification.
  • Content you submit — reviews, ratings, enquiry messages and support correspondence.
  • Technical data — IP address, device and browser type, and pages viewed, used to keep the Platform secure and to diagnose faults.

We do not knowingly collect data from children under 18. If you believe a child has given us data, write to us and we will delete it.

3. Why we use it

  • To create and administer your account and authenticate you.
  • To process bookings and payments, issue confirmations and administer cancellations and refunds.
  • To pass the details a partner needs in order to deliver the service you booked.
  • To verify partners before they list, and to keep verification current.
  • To provide support, and to investigate and resolve disputes between travellers and partners.
  • To detect, prevent and investigate fraud, abuse and security incidents.
  • To meet legal, tax and accounting obligations.
  • To send service messages about your bookings. Marketing messages are sent only where you have consented, and you can withdraw consent at any time.

4. Who we share it with

We do not sell personal data. We share it only as set out below.

  • The partner you booked with — the details they need to deliver the service, and no more.
  • Razorpay, our payment gateway — to process payments, refunds and partner settlements.
  • Infrastructure and communication providers — hosting, storage, email and SMS delivery, acting on our instructions under contract.
  • Professional advisers and auditors, where they are bound by confidentiality.
  • Authorities, where we are required to disclose by law or by a valid legal request.
  • A successor entity, if the business is reorganised, merged or acquired, subject to this policy continuing to apply.

5. Where we store it and for how long

Data is stored on servers located in India. Where a processor operates outside India, we transfer data only to jurisdictions permitted under applicable law and under contractual safeguards.

  • Account data is kept while your account is active, and for 90 days after closure to allow reactivation and dispute resolution.
  • Booking and payment records are kept for 8 years, as required for tax and accounting purposes in India.
  • Partner verification documents are kept for as long as the partner is listed, and for 8 years after delisting.
  • Support correspondence is kept for 3 years.
  • Technical logs are kept for 180 days.

6. How we protect it

  • Traffic between your device and the Platform is encrypted in transit using TLS.
  • Access to personal data is restricted to staff who need it, under role-based controls in our admin systems.
  • Card and UPI credentials are handled by our PCI-DSS compliant payment gateway and never reach our servers.
  • We review access, patch dependencies and scan for exposed credentials as part of our release process.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required by law.

7. Your rights

Subject to applicable law, you may:

  • ask for a copy of the personal data we hold about you, and a summary of how it is processed
  • ask us to correct data that is inaccurate, or complete data that is incomplete
  • ask us to erase data we no longer need for the purpose it was collected for, or for a legal obligation
  • withdraw consent you previously gave, without affecting processing already carried out
  • nominate another person to exercise your rights if you are unable to
  • complain to us, and then to the Data Protection Board of India if you are not satisfied

To exercise any of these, write to contact@travlneu.com. We respond within 30 days, and may ask you to verify your identity first so we do not disclose data to the wrong person.

8. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember preferences, and understand which pages are used so we can improve them. Strictly necessary cookies are required for the Platform to work. You can clear or block cookies in your browser, but parts of the Platform may then not function.

9. Changes to this policy

We update this policy when our processing changes or the law requires it. The current version and its effective date are always published here, and material changes are notified through the Platform or by email.

10. Contact

  • Grievance Officer: Prabhat Chandalia
  • Email: contact@travlneu.com
  • Post: TRAVLNEU PRIVATE LIMITED, 2B, Nina Apartment, P-169, Block B, Lake Town, Kolkata, West Bengal, 700089, India