PRIVACY POLICY

Dreamz Tours & Travels

Effective date: 11/02/2026

1. Introduction

This Privacy Policy explains how [Legal name of business, e.g. Dreamz Tours & Travels / registered entity name] (“Dreamz Tours & Travels”, “we”, “us”, “our”) collects, uses, shares, stores and protects your personal information when you visit [website URL], contact us by phone, WhatsApp, email or social media, or book travel services through us.

We are a travel agency based at [registered office address], India. For the purposes of applicable Indian data protection law, we are the “Data Fiduciary” for the personal data you give us.

Please read this policy carefully. If you do not agree with it, please do not submit your personal information to us.

2. Information We Collect

2.1 Information you give us

When you fill in an enquiry or booking form, call us, message us, or subscribe to our newsletter, we may collect:

• Contact details: name, phone number, WhatsApp number, email address and city or address.
• Trip details: destination, travel dates, trip length, number of travellers, hotel, room, transport and activity preferences.
• Traveller details: names, dates of birth, nationality and gender of each person travelling, as needed for tickets, hotels and permits.
• Details of children travelling with you, including age (and name and date of birth where needed for bookings or visas).
• Your messages, feedback and special requests.
• Payment details such as the amount paid, payment date and transaction reference. Card, UPI and net-banking details are entered on our payment partner’s secure page; we do not store full card numbers, CVV or PINs.

2.2 Sensitive and identity documents

For visa, flight, hotel, permit or inner-line-permit processing, we may ask for passport details and copies, photographs, ID proofs, visa history, and supporting documents. Where relevant to your safety or comfort, you may also choose to tell us about medical conditions, mobility needs, allergies or dietary and religious requirements.

We collect these only with your clear consent, only when they are necessary for the service you asked for, and we ask you to send them only through the secure channels we tell you about (for example our official email or WhatsApp number of our visa/documentation team) [edit to match your actual process]. We do not ask for them for general enquiries.

2.3 Information about other people

If you give us details of family members, friends or colleagues travelling with you, you confirm that you have their permission (or, for a child, you are the parent or legal guardian) to share it and that they have been told how it will be used.

2.4 Information collected automatically

When you use our website we may automatically collect your IP address, device and browser type, operating system, referring page, pages viewed, time spent and approximate location. This is personal information because it can be linked to your device or visit, and we handle it accordingly. We use it to keep the site working, fix problems, understand how visitors use it and improve our services.

3. How and Why We Use Your Information

We use your personal information only for specific purposes, as set out below.

We do not sell or rent your personal information to anyone.

4. Your Consent

We ask for your consent before collecting your personal information for a specific purpose, through a form, tick-box, message or call. Consent is voluntary. Using the website alone does not mean you have agreed to marketing or to sharing your sensitive documents.

You can withdraw your consent at any time by writing to us at the contact details in Section 15. Withdrawal does not affect processing done before it, and we may be unable to provide a service (for example a visa application) that needs the information you withdraw. We may keep information we are legally required to retain.

5. Cookies and Similar Technologies

Cookies are small files stored on your device. We use:

• Essential cookies, which make the site work (for example security and form submission). These cannot be switched off.
• Analytics cookies, which help us understand how the site is used [e.g. Google Analytics – edit to match].
• Marketing cookies or pixels, which measure advertising or show relevant ads [e.g. Meta Pixel – delete if not used].

We ask for your permission before setting non-essential cookies. You can change your choice at any time using our cookie settings [link/banner], or block or delete cookies in your browser settings. Blocking some cookies may affect how the site works. We do not knowingly use cookies to track or target children.

6. Who We Share Your Information With

We share your information only where needed for the purposes above, and only the minimum required:

• Service providers who deliver your trip: hotels, resorts, homestays, drivers and transport operators, guides, activity operators, airlines and railways.
• Embassies, consulates, visa application centres and government or permit authorities, when we apply on your behalf.
• Payment gateways, banks and payment processors.
• Technology and business service providers, such as website hosting, email, messaging (including WhatsApp), CRM, analytics, accounting and IT support.
• Professional advisers such as auditors and lawyers.
• A buyer or successor, if our business is sold or restructured, subject to this policy continuing to protect your data.
• Courts, regulators, police or other authorities, when required by law or to protect rights and safety.

Where a provider processes data on our behalf, we use written agreements requiring them to protect it, use it only for our instructions, and keep it confidential. Once a hotel, airline, embassy or other independent party receives your data to deliver your trip, they also handle it under their own privacy policies.

7. Transfers Outside India

Your information may be sent to or stored in countries outside India where this is needed for your trip, for example when we book hotels, tours or visas abroad, or when our technology providers store data on overseas servers. We take reasonable steps to ensure it remains protected, and we transfer it only as permitted by Indian law.

8. Newsletter and Marketing

If you subscribe, we will send holiday deals and travel updates by email, SMS or WhatsApp. You can unsubscribe at any time using the link in our emails, by replying “STOP”, or by contacting us. Service messages about a booking you have made (such as confirmations and changes) are not marketing and will continue.

9. How Long We Keep Your Information

We keep personal information only for as long as needed for the purpose it was collected, and as required by law.

[Please confirm each period with your accountant or legal adviser before publishing.]

10. Security

We use reasonable security measures to protect your information from loss, misuse, unauthorised access, disclosure or alteration. These include [access controls so only authorised staff can see documents, password-protected devices and accounts, encrypted website connection (HTTPS), and secure deletion of documents] [edit to match your practice].

No method of transmission over the internet or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authority as required by law.

You can help by sharing documents only through our official channels, not sharing your payment OTPs or PINs with anyone, and contacting us immediately if you suspect misuse.

11. Your Rights

Subject to applicable law, you have the right to:

• Access a summary of the personal information we hold about you and how it is used and shared.
• Correct inaccurate or incomplete information, and update it.
• Request erasure of information we no longer need or are not legally required to keep.
• Withdraw consent at any time, including for marketing.
• Have your grievances addressed by us, and, if unresolved, complain to the Data Protection Board of India.
• Nominate another person to exercise your rights in the event of your death or incapacity.

To exercise these rights, email or call us using the details in Section 15. We may ask you to verify your identity first. We aim to respond within [30] days.

12. Children

Our website is intended for adults. We collect a child’s information (such as name, age, date of birth or passport details) only when a parent or legal guardian provides it for planning or booking a trip, and only with that parent’s or guardian’s consent. We do not knowingly collect information directly from children, track or monitor children’s behaviour online, or send them targeted advertising. If you believe a child has given us information without a parent’s consent, please contact us and we will delete it.

13. Links to Other Websites

Our website may link to or embed third-party sites and services, such as social media platforms, maps, payment pages and airline or hotel sites. We do not control them and this policy does not cover them. Please read their privacy policies before sharing information.

14. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or the law. The latest version will always be on this page with its “Last updated” date. If we make a significant change, we will notify you by email, WhatsApp or a notice on our website, and where the law requires, ask for your consent again.

15. Contact Us and Grievance Officer

If you have questions about this policy, want to exercise your rights, or wish to make a complaint, please contact our Grievance Officer / Data Protection Contact:

We will acknowledge your complaint within [48 hours] and aim to resolve it within [30 days] of receiving it.

16. Governing Law

This policy is governed by the laws of India, including the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023 and its Rules as they come into force. Subject to applicable law, the courts at [Guwahati, Assam] have jurisdiction over disputes relating to this policy.