Privacy Policy

Last updated: 12 October 2026

1. Who We Are and What This Policy Covers

Travel Plan Raj ("we", "us", "our") is a travel company based in Jaipur, Rajasthan, India. We plan and operate private tours, chauffeur-driven journeys, hotel stays and sightseeing in India. For the purposes of data protection law, we are the "controller" of the personal information described in this policy.

This policy explains what personal information we collect when you visit https://www.travelplanraj.com/, make an enquiry, book a trip, communicate with us or travel with us. It also explains how we use that information, who we share it with and what rights you have. It is written for all of our customers, with specific information for travellers in the United Kingdom, the European Economic Area, the United States and India in sections 11 and 12.

Please read this policy together with our Terms & Conditions and Cancellation & Refund Policy. If you have a question about your privacy, our contact details are in section 16.

2. Information We Collect

Information you give us.

Contact details: your name, email address, telephone or WhatsApp number, postal address and country of residence.
Trip details: travel dates, destinations, hotel preferences, budget, the number and ages of travellers, and flight or arrival details.
Traveller identity details: names exactly as shown in passports, nationality, date of birth, and passport and visa details. Hotels, domestic flights, trains, permits and some monuments and safaris need these to confirm a booking.
Payment records: the amount, date, method, payer name and transaction reference of payments. Card payments are handled by our payment providers, and we do not store your full card number.
Preferences and requirements: dietary needs, mobility or accessibility needs, medical information you choose to share, and an emergency contact (see section 3).
Communications: emails, messages, feedback, reviews and any photographs you send us.

Information we collect automatically. When you use our website, we collect your IP address, browser and device type, the pages you view, the website you came from and your approximate location (such as country or city). We collect this through cookies and similar technologies, explained in section 9.

Information from other people. We may receive your details from the person who booked on your behalf, from our suppliers about your trip, and from payment providers confirming a payment.

If you give us information about other people, such as travel companions or children, please make sure you have their permission or authority to do so and that they have seen this policy.

3. Sensitive Information

Some of the information you share with us is more sensitive. This includes health-related details such as medical conditions, allergies and mobility needs, dietary requirements that may reveal religious beliefs, and passport or other identity numbers.

We ask for this only when it is needed to keep you safe and to arrange suitable services, such as an accessible room or a particular diet. We use it only with your explicit consent, or because you have given it to us for that purpose, and we share it only with suppliers who need it to look after you. We never use it for marketing.

You can withdraw your consent at any time by contacting us. This may mean we can no longer arrange certain services for you. We ask for passport details only when a booking requires them, and we delete scans of identity documents after your trip, as set out in section 7.

4. How and Why We Use Your Information

We use personal information only where we have a lawful reason to do so. For customers in the UK and the EEA, the reasons we rely on are set out below.

Responding to enquiries, preparing quotations, and making, managing and delivering your booking. Legal basis: performing a contract with you, or taking steps you ask for before a contract is made.
Taking payments, issuing invoices and handling refunds. Legal basis: performing a contract, and meeting our legal obligations for tax and accounting records.
Coordinating with hotels, drivers, guides and transport providers, and meeting legal requirements such as the registration of foreign guests. Legal basis: performing a contract, and meeting our legal obligations.
Looking after you during your trip, including contacting you, adjusting plans and responding to emergencies. Legal basis: performing a contract, and protecting your vital interests in an emergency.
Handling complaints, resolving disputes and protecting our legal rights. Legal basis: our legitimate interests, and establishing, exercising or defending legal claims.
Keeping our website secure, preventing fraud and improving our services. Legal basis: our legitimate interests, and your consent for non-essential cookies.
Sending you marketing. Legal basis: your consent or, for existing customers where the law allows it, our legitimate interest in telling you about similar services. You can opt out at any time.
Using sensitive information such as health or dietary details. Legal basis: your explicit consent.

Where we rely on legitimate interests, we have considered the impact on you and will explain our assessment if you ask. We do not make decisions about you based solely on automated processing, and we do not sell your personal information.

5. Who We Share Your Information With

We share only what is needed, and only with the following groups.

Hotels, resorts, homestays and camps: your name, passport and visa details where required, arrival times and relevant special requirements.
Drivers, guides, local partners, and safari and activity operators: your name, contact details, itinerary and any requirement they need to know about.
Airlines, railway and ticketing providers: names and identity details exactly as they must appear on tickets.
Payment providers and banks: the information needed to process payments and refunds.
Service providers: companies that provide website hosting, email and messaging, booking and customer-management software, cloud storage, analytics, accounting and professional advice. They may use your information only to provide services to us.
Authorities: where the law requires it. For example, Indian law requires accommodation providers to report foreign guests' passport and visa details to the immigration authorities. We may also disclose information to the police, courts and tax authorities where legally required.
A buyer or successor: if our business is sold or merged, your information may pass to the new owner, who must continue to protect it under this policy.
Anyone else you ask us to share with, such as your travel agent or insurer, or with your consent.

We require our service providers to protect your information. Some suppliers, such as hotels, are independent organisations that use your information under their own privacy policies. We do not sell your personal information, and we do not allow anyone to use it for their own marketing.

6. Transfers of Your Information Outside Your Country

We are based in India, so your information is collected, stored and used in India. It may also be handled by our suppliers and service providers in India and in other countries, for example where email, cloud or website services are hosted in the United States or Europe.

At the date of this policy, India does not benefit from a UK or EU decision recognising its data protection laws as adequate. Where UK or EEA law requires safeguards for a transfer, we rely on one of the following:

The transfer is necessary to carry out the contract you have with us, or to take steps you have asked for before booking.
You have given your explicit consent after being told of the risks.
Approved safeguards, such as standard contractual clauses, the UK International Data Transfer Agreement or the UK Addendum to the EU standard clauses.

You can contact us for more information about the safeguards we use.

We also handle personal information in line with India's Digital Personal Data Protection Act, 2023, as its provisions come into force.

7. How Long We Keep Your Information

We keep personal information only for as long as we need it for the purposes in this policy.

Enquiries that do not become bookings: up to 12 months after our last contact with you.
Booking, payment and invoice records: for as long as Indian tax and company law require, normally up to eight years.
Passport and other identity document scans: deleted within 90 days after your trip ends, unless the law requires us to keep them longer.
Health and dietary information: deleted within 90 days after your trip ends.
Complaints and disputes: until the matter is resolved and for the period in which a legal claim could still be brought.
Marketing preferences and contact details for marketing: until you unsubscribe, or three years after your last interaction with us.
Website and cookie data: for the periods described in our cookie information, section 9.

When we no longer need information, we delete it securely or anonymise it.

8. Keeping Your Information Secure

We use reasonable technical and organisational measures to protect your information, including limiting access to the people and suppliers who need it, using secure payment channels, protecting our accounts and devices with passwords, and deleting information securely. We never ask for full card details by email, chat or WhatsApp.

No system is completely secure. If a personal data breach is likely to put your rights at risk, we will tell you and the relevant authority as the law requires. Please do not send passport copies or other sensitive documents through unsecured channels. Ask us for a secure way to send them.

9. Cookies and Similar Technologies

Cookies are small files that a website stores on your device. We use them in the following ways.

Essential cookies make the website work and keep it secure. They are always on.
Analytics cookies help us understand how visitors use the website so that we can improve it.
Marketing cookies, if we use them, help us measure or show relevant advertising.

Where the law requires your consent for non-essential cookies, we ask for it through a cookie banner, and we set those cookies only if you agree. You can change your choice at any time using the cookie settings on our website, or by adjusting your browser settings. Details of the cookies we use and how long they last are in the cookie settings.

Some browsers send "Do Not Track" or Global Privacy Control signals. Our website does not currently respond to Do Not Track signals, but you can control non-essential cookies through our cookie banner and your browser.

10. Marketing Communications

With your consent, or where the law otherwise allows, we may email or message you about tours, offers and travel tips. We send text or WhatsApp marketing only with your prior consent. You can opt out at any time by using the unsubscribe link in our emails or by contacting us. Opting out does not stop service messages that we must send you about your booking, such as confirmations, itinerary changes and safety information.

Our marketing emails identify us, include our contact details and an unsubscribe option, and we act on opt-outs promptly, in line with the UK Privacy and Electronic Communications Regulations and the US CAN-SPAM Act. We never sell or rent your contact details.

11. Your Rights

Depending on where you live, you have rights over your personal information. To use any of them, please contact us using the details in section 16. We will reply within one month (UK and EEA) or 45 days (US states), and we may extend that period where the law allows and your request is complex. We may need to confirm your identity first. We do not normally charge a fee.

If you live in the United Kingdom or the European Economic Area, you have the right to:

Be told how your information is used, which this policy is designed to do.
Access the personal information we hold about you.
Have inaccurate information corrected.
Have your information erased in certain circumstances.
Restrict how we use your information in certain circumstances.
Receive the information you gave us in a portable format.
Object to processing based on our legitimate interests, and object to direct marketing at any time.
Withdraw your consent at any time, where we rely on consent.
Not be subject to decisions based solely on automated processing that significantly affect you.
Complain to your data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to put things right first.

If you live in the United States, your rights depend on your state of residence and are described in section 12.

If you live in India, under the Digital Personal Data Protection Act, 2023, as its provisions come into force, you may ask for a summary of your personal data and how it is processed, ask for correction or erasure, nominate another person to exercise your rights, and use our grievance process. If we do not resolve a grievance, you may complain to the Data Protection Board of India.

12. Notice for US Residents

This section applies to residents of California and other US states with consumer privacy laws.

Information we have collected in the past 12 months.

Identifiers: name, email address, telephone number, postal address and IP address.
Customer and travel records: nationality, date of birth, passport and visa details, travel dates and preferences.
Commercial information: bookings and payment records.
Internet and network activity: how you use our website.
Sensitive personal information: passport numbers and any health or dietary information you choose to give us.

We collect this information from you, from our suppliers and automatically through our website. We use it for the purposes in section 4 and disclose it to the categories of recipients in section 5, for business purposes only.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use sensitive personal information only to provide the services you request and as the law permits, and not to infer other characteristics about you. We keep information for the periods in section 7.

Your rights. Depending on your state, you may have the right to:

Know what personal information we collect, use and disclose, and ask for a copy of it.
Delete personal information we hold about you.
Correct inaccurate personal information.
Opt out of the sale or sharing of your information and of targeted advertising. We do neither.
Not be treated unfairly for using your rights.

To make a request, contact us using the details in section 16. We will verify your identity before acting on a request, and we will reply within 45 days, extending that period where the law allows. You may use an authorised agent, and we may ask for proof of their authority. If we refuse a request, you may appeal by replying to our decision and asking us to reconsider, and if you are still not satisfied you may contact your state attorney general.

California residents may also ask which personal information we have disclosed to third parties for their direct marketing. We make no such disclosures.

13. Children

Our website and services are meant for adults. We do not knowingly collect personal information from children under 16 through our website. We collect details of children who will travel only from a parent or guardian making the booking, and only what is needed to arrange the trip. Under Indian law, anyone under 18 is a child for data protection purposes, so we ask for a parent or guardian's consent in those cases. If we learn that we have collected a child's information without proper authority, we will delete it.

14. Links to Other Websites

Our website may link to other websites, such as review platforms, payment pages and social media. We are not responsible for their privacy practices, so please read their privacy policies before sharing your information with them.

15. Changes to This Policy

We may update this policy to reflect changes in our services, practices or the law. The latest version, with its revision date, is always published on our website. If we make a significant change, we will tell customers with active bookings by email or a clear notice on our website, and we will ask for your consent where the law requires it.

16. Contact Us and Complaints

For any privacy question or request, or to raise a concern about how we handle your information, please contact:

Travel Plan Raj

Privacy and Grievance Officer: [Insert name or role]

Email: [Insert official business email]

Telephone / WhatsApp: [Insert official business contact number]

Address: [Insert full business address], Jaipur, Rajasthan, India

Please put "Privacy request" in the subject line of your email. We will acknowledge your message within five business days and respond fully within one month.

You also have the right to complain to a data protection authority. In the UK, this is the Information Commissioner's Office (ico.org.uk, telephone 0303 123 1113). If you live in the EEA, you can contact the authority in your country. If you live in the US, you can contact your state attorney general. If you live in India, you can contact the Data Protection Board of India once its complaint process is in force and you have first used our grievance process.