Privacy Policy

1Who We Are

Holiday Vibez ("we", "us", "our") is a travel services company operating at www.holidayvibez.com, providing holiday packages, travel planning, and related services to customers primarily based in India and travelling internationally.

This Privacy Policy applies to all services offered through our website, our mobile application (if applicable), our WhatsApp business account (+91 96451 23446), and any other channels through which you interact with Holiday Vibez.

Scope of This Policy

This Privacy Policy covers:

• Visitors to our website www.holidayvibez.com
• Customers who submit travel enquiries or bookings through our website, phone, WhatsApp, or email
• Travellers whose trip details we process as part of delivering our services
• Any other individual whose personal data we process in the course of our business operations

2Information We Collect

We collect personal information in the following categories, depending on how you interact with us:

2.1 Information You Provide Directly

2.2 Information We Collect Automatically

When you visit our website, we automatically collect certain technical information:

• Device and browser information: IP address, browser type and version, operating system, device type
• Usage data: Pages visited, time spent on pages, links clicked, referring URLs, search terms used on our site
• Location data: Approximate geographic location derived from IP address (country/city level only)
• Cookie data: Session identifiers and preference data (see Section 5 for full cookie policy)

2.3 Information From Third Parties

We may receive information about you from:

• Travel partners, airlines, hotels, and tour operators when you travel on a Holiday Vibez booking
• Payment gateways confirming transaction status
• Visa processing agencies in connection with visa applications we submit on your behalf
• Referrals from other customers (name and contact only, with your consent to be contacted)

3How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Delivery

• Processing your travel enquiries and providing holiday quotations
• Booking flights, hotels, transfers, tours, and experiences on your behalf
• Submitting visa applications and related immigration documentation
• Issuing travel itineraries, vouchers, and booking confirmations
• Communicating with you throughout your travel planning and during your trip
• Managing changes, cancellations, and refunds to your bookings

3.2 Communication and Customer Support

• Responding to your enquiries and support requests via phone, WhatsApp, or email
• Sending booking confirmations, itinerary updates, and travel reminders
• Notifying you of changes to your bookings or relevant travel advisories
• Collecting feedback and reviews after your trip

3.3 Marketing and Promotions

• Sending promotional emails, WhatsApp messages, or SMS about our holiday packages and offers — only with your prior consent
• Personalising our website content and package recommendations based on your stated destination preferences
• Retargeting advertisements on third-party platforms (see Section 5)

3.4 Business Operations and Legal Compliance

• Maintaining financial and accounting records as required by Indian law
• Fraud prevention and security monitoring
• Compliance with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities or courts
• Enforcing our Terms and Conditions and other agreements
• Business analytics, improving our services, and training our team

4Legal Basis for Processing

We process your personal data on the following legal grounds:

Under the Digital Personal Data Protection Act, 2023, we are committed to processing your data only for specified, lawful purposes, retaining it only as long as necessary, and maintaining appropriate security safeguards.

5Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how our site is used.

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us remember your preferences, maintain your session, and collect analytics data.

5.2 Types of Cookies We Use

5.3 Managing Cookies

When you first visit our website, a cookie consent banner will allow you to accept or decline non-essential cookies. You can also manage cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

Major browser cookie management guides:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and Site Permissions

5.4 Third-Party Analytics and Advertising

We use Google Analytics 4 (GA4) to analyse website usage. Google’s privacy policy is available at policies.google.com/privacy. We may also use Facebook/Meta Pixel for retargeting purposes. You can opt out of personalised advertising via youronlinechoices.com.

6How We Share Your Information

We do not sell your personal data. We share it only in the following circumstances:

6.1 Service Providers and Travel Partners

To fulfil your booking, we necessarily share relevant personal information with:

• Airlines: Full name, passport details, date of birth, and contact information for ticketing
• Hotels and resorts: Name, contact details, check-in/check-out dates, and special requests
• Visa processing agencies: Full personal and passport details required for visa applications
• Ground transfer operators: Name, flight details, and contact number
• Tour operators and activity providers: Names and contact details of all travellers
• Travel insurance providers: Personal and health information as required by the policy

6.2 Technology and Platform Providers

• Payment gateways (Razorpay or equivalent) — process payment transactions securely. We do not store full card details.
• Email and messaging platforms — used to deliver booking confirmations and communications
• CRM system — manages our customer relationships and enquiry tracking
• Cloud hosting providers — our website and data are hosted on secured servers

6.3 Legal and Regulatory Disclosure

We may disclose your information when legally required to do so by:

• Courts, tribunals, or law enforcement agencies pursuant to lawful orders
• Indian government ministries or regulatory bodies under applicable law
• Immigration and customs authorities in relevant jurisdictions

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of our business, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website if such a transfer affects the handling of your personal data.

7Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

7.1 Security Measures

• Encryption: Our website uses SSL/TLS encryption (HTTPS). Data transmitted between your browser and our servers is encrypted in transit.
• Access controls: Personal data is accessible only to Holiday Vibez staff and service providers who require it to perform their duties, governed by role-based access permissions.
• Payment security: Payment card data is processed exclusively through PCI-DSS compliant payment gateways. We do not store full card numbers, CVVs, or PINs on our systems.
• Password protection: Customer account passwords are stored in hashed form and are never stored or transmitted in plain text.
• Regular security reviews: We periodically review our security practices and update them in line with evolving threats and industry best practices.

7.2 Your Responsibility

You are responsible for maintaining the confidentiality of any account password and for restricting access to your devices. If you believe your account has been compromised, please contact us immediately at holidays@holidayvibez.com.

8Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with our legal obligations.

When data is no longer required, we securely delete or anonymise it. Physical documents are destroyed by shredding. Digital data is permanently deleted from active systems and backup storage.

9Your Rights and Choices

Under the Digital Personal Data Protection Act, 2023 and applicable privacy laws, you have the following rights regarding your personal data:

9.1 Your Rights

9.2 How to Exercise Your Rights

To exercise any of the above rights, contact our Grievance Officer:

• Email: holidays@holidayvibez.com
• Phone: +91 96451 23446
• Response time: We will acknowledge your request within 3 business days and respond substantively within 30 days (or as required by applicable law).

We may require you to verify your identity before processing a request. We will not charge a fee for reasonable requests, though we may charge a reasonable fee for repetitive or manifestly unfounded requests.

9.3 Right to Complain

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data Protection Board of India (once operational under the DPDP Act, 2023) or seek other legal remedies. We encourage you to contact us first so we can address your concerns directly.

10International Data Transfers

As a travel services company, we necessarily transfer your personal data to service providers, airlines, and hotels in countries outside India as part of booking your travel. This is inherent to providing international travel services.

Countries to which your data may be transferred include — but are not limited to — the United Arab Emirates, Singapore, Thailand, Maldives, Japan, Greece, France, Germany, Switzerland, and other countries where your booked travel takes place.

Where we transfer data to third-party processors (such as cloud hosting or CRM providers) operating outside India, we implement appropriate contractual data protection clauses and verify that adequate protections are in place.

11Children's Privacy

Our website and services are not directed to children under 18 years of age. We do not knowingly collect personal data directly from children.

When children travel as part of a Holiday Vibez booking, their personal data (name, passport details, date of birth) is provided by the accompanying parent or legal guardian who has parental responsibility for the child. By providing a child's personal data, the parent or guardian represents that they have the legal authority to do so and consent to the processing of the child's data as described in this Privacy Policy for the purpose of delivering the booked travel services.

If we become aware that we have inadvertently collected personal data from a child under 18 without appropriate parental consent, we will promptly delete that information. Please contact holidays@holidayvibez.com if you believe this has occurred.

12Third-Party Links

Our website may contain links to third-party websites, including airline booking portals, hotel websites, tourism boards, and review platforms. These websites are operated independently and have their own privacy policies.

Holiday Vibez has no control over and accepts no responsibility for the privacy practices of third-party websites. We encourage you to review the privacy policy of any third-party website you visit via a link on our platform before submitting any personal information.

The presence of a link to a third-party website on holidayvibez.com does not imply our endorsement of that website or its privacy practices.

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the Last Updated date at the top of this policy
• Notify registered customers via email where the change significantly affects how we use their data
• Display a prominent notice on our website for a period following the change

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after changes become effective constitutes your acceptance of the revised policy.

For material changes that require renewed consent (such as changes to our use of data for marketing purposes), we will seek fresh consent from you before applying the new practices.

Version History