Privacy Policy

1. Scope

This Privacy Policy applies to all Personal Data collected, received, processed, stored, used, shared, or otherwise handled by PalSafar in connection with your access to and use of the Platform and the Services. It governs the processing of Personal Data collected through the PalSafar website, mobile application, user registration, profile creation, trip planning and bookings, interactions with other users, customer support, feedback, promotional activities, and all other features or services offered by PalSafar that reference this Privacy Policy. This Privacy Policy applies irrespective of the device or technology used to access the Platform.

However, it does not apply to third-party websites, applications, payment gateways, social media platforms, or other external services that may be linked to or integrated with the Platform, as such services are governed by their respective privacy policies. Users are encouraged to review the privacy policies of such third parties before sharing their Personal Data.

2. Definitions

• Account means the registered account created by a User to access and use the services available on the Platform.
• Applicable Law means all laws, statutes, regulations, notifications, guidelines, governmental orders, judicial decisions, and regulatory requirements applicable to PalSafar, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
• Consent means a free, specific, informed, unconditional, and unambiguous indication of the User’s agreement to the processing of Personal Data for specified purposes.
• Device Information means information relating to the device used to access the Platform, including hardware identifiers, operating system, browser type, IP address, device model, language preferences, application version, and network information.
• Information means any data or content, whether personal or non-personal, provided by a User or otherwise collected by PalSafar in connection with the use of the Platform or the Services.
• Personal Data means any data about an individual who is identifiable by or in relation to such data and shall have the meaning assigned under the Digital Personal Data Protection Act, 2023.
• Platform means the PalSafar website, mobile application, and all related digital interfaces, features, functionalities, content, products, and services owned, operated, or made available by PalSafar.
• Processing includes the collection, recording, organization, storage, adaptation, retrieval, use, sharing, disclosure, transfer, deletion, or any other operation performed on Personal Data.
• Services means all features, functionalities, travel-related services, communication tools, booking services, community features, recommendations, and any other facilities made available through the Platform.
• Third Party means any individual, organization, service provider, business partner, government authority, or entity other than PalSafar and the User.
• User, “you”, or “your” means any individual accessing, browsing, registering on, or using the Platform.

3. Information We Collect

PalSafar may collect and process Personal Data necessary for providing, operating, and improving the Services. Information is collected during account registration, profile creation, trip bookings, communications, customer support interactions, payments, feedback, surveys, and other activities. Such information may include your name, contact details, date of birth, profile information, travel preferences, trip details, payment and billing information, reviews, ratings, and any other Information you choose to provide.

We may also automatically collect certain technical and usage-related Information, including your IP address, device and browser information, operating system, application version, log data, browsing activity, and approximate or precise location information. In addition to the above information, we may receive Information from third-party service providers, payment gateways, analytics providers, business partners, and social media platforms, where permitted by applicable law.

PalSafar may also retain communications exchanged with customer support, responses to surveys or promotional campaigns, complaints, feedback, and other correspondence for quality assurance, dispute resolution, regulatory compliance, and service improvement. Additionally, the Platform may utilise cookies, software development kits (SDKs), web beacons, pixels, local storage, and similar technologies to maintain user sessions, remember preferences, analyse Platform usage, enhance security, and provide a personalized user experience. Further details regarding such technologies are available in PalSafar’s Cookie Policy.

4. How We Collect Information

PalSafar collects Personal Data through lawful, fair, and transparent means. Information may be collected directly from Users when they register an account, use the Platform, complete the profile, book trips, communicate with other users, contact customer support, make payments, submit feedback, or otherwise interact with the Services. We also collect Information automatically through cookies, log files, and similar technologies, as well as through device permissions that you choose to grant.

All Information is collected and processed only to the extent necessary for providing the Services, improving the functionality and security of the Platform, complying with applicable legal obligations, and fulfilling the purposes set out in this Privacy Policy.

5. Purpose of Processing Personal Data

PalSafar processes your Personal Data only for lawful, specific, and legitimate purposes necessary to provide, operate, maintain, and improve the Platform and the Services. This includes creating, verifying, and managing your account; facilitating trip planning, bookings, travel companion matching, and related travel services; enabling communication between users; processing payments and refunds; providing customer support; sending service-related updates, notifications, and promotional communications, where permitted by applicable law; personalizing your experience; improving the functionality, security, and performance of the Platform; detecting and preventing fraud, misuse, and other unlawful activities; complying with applicable legal and regulatory requirements; enforcing our Terms of Use and other policies; and fulfilling any other purpose for which your Personal Data has been collected or as otherwise permitted or required under applicable law.

PalSafar shall not process Personal Data for any purpose that is inconsistent with this Privacy Policy unless such processing is expressly permitted under applicable law or carried out with the User’s prior consent.

6. Data Sharing & Disclosures

PalSafar does not sell or rent your Personal Data to third parties and ensures that recipients process such Personal Data only for authorized purposes and in accordance with applicable law.

PalSafar may share or disclose your Personal Data with its affiliates, service providers, business partners, payment gateways, technology providers, professional advisors, and competent governmental or regulatory authorities where necessary to provide the Services, comply with applicable laws, enforce its legal rights, or protect the security and integrity of the Platform. Where required, limited Personal Data may also be shared with other users to facilitate the Services.

7. Payment Gateway

PalSafar uses authorised and reputable third-party payment gateways and payment service providers to facilitate payments made by Users through the Platform. Depending upon the nature of the transaction, Users may be required to provide certain payment-related information, including information relating to debit cards, credit cards, UPI, internet banking, wallets, or other permitted payment methods.

Payment transactions are processed directly by the relevant payment gateway or payment service provider in accordance with its applicable terms of use, privacy policy, security practices, and applicable laws and regulations. PalSafar does not generally store complete payment credentials, including full debit or credit card credentials, or internet banking credentials, on its own systems.

Where payment-related information is processed by PalSafar for transaction reconciliation, refunds, settlement, fraud prevention, or customer support, such information shall be handled in accordance with applicable law and appropriate security safeguards.

PalSafar shall not be responsible for any unauthorised access, security incident, failure, interruption, or misuse occurring exclusively within the systems of a third-party payment service provider. Users are advised to review the applicable privacy policy and terms of the relevant payment gateway before completing a transaction.

Any refund, reversal, chargeback, failed transaction, or payment dispute may be subject to the policies and processing timelines of the relevant payment gateway, bank, card network, or other financial institution, in addition to PalSafar’s applicable refund and cancellation policies.

8. Data Retention

PalSafar shall retain Personal Data only for such period as is reasonably necessary to fulfil the purposes for which such Personal Data was collected or otherwise processed. The retention period may vary depending upon the nature and sensitivity of the Personal Data, the purpose of processing, the nature of the Services availed, the User’s relationship with PalSafar, and applicable legal and regulatory requirements.

PalSafar may retain Personal Data for purposes including providing and maintaining the Services, maintaining transaction and booking records, processing payments and refunds, resolving complaints and disputes, preventing fraud and misuse, enforcing contractual rights, maintaining business and financial records, complying with tax, accounting, regulatory and reporting obligations, and responding to lawful requests from governmental, judicial, or regulatory authorities.

Where Personal Data is no longer required for the purposes for which it was collected or where the applicable retention period has expired, PalSafar shall take reasonable steps to securely delete, anonymise, or otherwise dispose of such Personal Data in accordance with applicable law. Where deletion is not immediately possible due to technical, legal, regulatory, evidentiary, or backup-related requirements, PalSafar may retain the relevant information for such additional period as may be reasonably necessary, after which it shall be deleted in accordance with applicable law.

Further detail on typical retention periods after account deletion is set out on our Account & Data Deletion page.

9. Security Measures

PalSafar implements reasonable technical, organisational, and administrative safeguards designed to protect Personal Data against unauthorised access, acquisition, use, disclosure, alteration, loss, destruction, or other forms of misuse.

Depending upon the nature of the information and the risks associated with its processing, such safeguards may include access controls, authentication mechanisms, encryption or other appropriate security technologies, secure servers and infrastructure, network security measures, data backups, monitoring mechanisms, vulnerability assessments, periodic security reviews, incident management procedures, and confidentiality obligations applicable to employees, contractors, and authorised service providers.

Access to Personal Data shall be restricted to persons who require such access for legitimate business, operational, contractual, legal, or service-related purposes. PalSafar may periodically review and update its security practices to address technological developments, operational requirements, and identified security risks.

Notwithstanding the safeguards implemented by PalSafar, no electronic transmission, storage system, website, application, or method of communication can be guaranteed to be completely secure. Accordingly, PalSafar does not guarantee absolute security of Personal Data. Users are responsible for maintaining the confidentiality of their account credentials and should promptly notify PalSafar of any suspected unauthorised access or compromise of their account.

10. Cookies & Similar Technologies

PalSafar may use cookies, pixels, web beacons, software development kits (SDKs), local storage, and similar technologies when you access or use the Platform. These technologies help us operate and secure the Platform, remember your preferences, maintain your login session, understand how users interact with the Platform, monitor performance, improve functionality, and provide a more personalised user experience.

We may use different types of cookies, including essential cookies required for the operation of the Platform, functional cookies that remember your preferences, analytics cookies that help us understand Platform usage and improve our Services, and other cookies or similar technologies used for permitted marketing or advertising purposes. Some cookies may be placed or accessed by authorised third-party service providers, such as analytics or technology providers, in accordance with applicable law.

You may manage, block, or disable cookies through your browser or device settings. However, disabling or refusing certain cookies may affect the functionality, performance, or availability of certain features of the Platform. By continuing to use the Platform with cookies enabled, you acknowledge the use of cookies and similar technologies as described in this Privacy Policy, subject to any consent requirements under applicable law. Further details are available in our Cookie Policy.

11. Third-Party Service Providers

PalSafar engages trusted third-party service providers to support the operation of the Platform and the delivery of Services. These service providers may process Personal Data only to the extent necessary to perform services on PalSafar’s behalf and are contractually obligated to maintain appropriate confidentiality, security, and data protection standards.

PalSafar does not permit such service providers to use Personal Data for their own independent purposes unless expressly authorised by the user or required by law.

12. Third-Party Aggregator Platform

PalSafar provides a technology platform that facilitates trip planning, bookings, travel companion matching, finalizing itinerary, finding local vendors and related travel services. Users may be redirected to or interact with such third-party platforms for ride bookings or related services.

PalSafar neither owns nor controls these third-party platforms and is not responsible for their privacy practices, pricing, availability, service quality, or terms of use. Users are encouraged to review the respective privacy policies and terms of the applicable third-party service providers before availing their services.

13. Intellectual Property & Fare Comparison Disclosure

PalSafar respects the intellectual property rights of all third parties.

All trademarks, logos, trade names, designs, text, graphics, software, and other content available on the Platform are owned by or licensed to PalSafar or their respective owners and are protected under applicable intellectual property laws. The Platform may display, aggregate, or compare fares, prices, schedules, availability, and other travel-related information obtained from third-party service providers or publicly available sources solely to assist users in making informed decisions.

Such information remains the property of the respective third parties, and its display on the Platform does not imply any ownership, affiliation, sponsorship, or endorsement by PalSafar. PalSafar does not claim ownership of third-party intellectual property and will address valid infringement complaints in accordance with applicable law.

14. Data Security

PalSafar implements reasonable technical, organizational, and administrative measures to protect your Personal Data against unauthorized access, use, disclosure, alteration, loss, or destruction. While PalSafar endeavors to safeguard your Personal Data using appropriate security practices, no method of electronic transmission or storage is completely secure. Accordingly, PalSafar cannot guarantee absolute security of your Personal Data, and users are encouraged to take appropriate precautions to protect their account credentials.

15. Cross-Border Data Transfers

PalSafar may process or store Personal Data on servers located within or outside India where such transfer is necessary for providing the Services, maintaining infrastructure, or engaging authorised service providers.

Where Personal Data is transferred outside India, PalSafar shall take reasonable steps to ensure that such transfers are carried out in accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws, including by implementing appropriate contractual, organizational, and technical safeguards.

By using the Platform, users acknowledge and consent to such cross-border transfers where permitted under applicable law and necessary for the provision of the Services.

16. User Rights

Subject to the provisions of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable laws, Users, in their capacity as Data Principals, shall be entitled to exercise the following rights in relation to their Personal Data processed by PalSafar:

• Right to Access Information To obtain information relating to the Personal Data processed by PalSafar, including details regarding such processing, in accordance with applicable law.
• Right to Correction and Erasure To request the correction, completion, updating, or erasure of Personal Data that is inaccurate, incomplete, or no longer required, subject to applicable legal and regulatory requirements.
• Right to Withdraw Consent To withdraw previously granted consent for the processing of Personal Data at any time, without affecting the lawfulness of processing undertaken prior to such withdrawal and subject to any legal or contractual obligations.
• Right to Grievance Redressal To raise complaints or grievances concerning the processing of Personal Data or any alleged non-compliance with applicable data protection laws by contacting PalSafar’s designated Grievance Officer.
• Right to Nominate To nominate another individual to exercise the rights of the User in accordance with the provisions of the DPDP Act.

Users may exercise the aforesaid rights by submitting a request through the contact details specified in this Privacy Policy. PalSafar reserves the right to verify the identity and authority of the requester and may seek such additional information as may be reasonably necessary before processing any request. All requests shall be addressed in accordance with the provisions of the DPDP Act and other applicable laws.

Account & Data Deletion

To request deletion of your PalSafar account and the Personal Data associated with it, please use our dedicated public page: Account & Data Deletion. The page is public and requires no login. We will never ask you for your password. You may also submit a request by emailing support@palsafar.in with the subject line “Account & Data Deletion Request”, or by contacting the Grievance Officer using the details below. We verify account ownership before processing deletion. Some information may be retained as described in this Privacy Policy and on the Account & Data Deletion page for legal, accounting, security, fraud-prevention, audit, or dispute-resolution purposes.

17. Withdrawal of Consent

Where PalSafar processes your Personal Data based on your consent, you may withdraw such consent at any time by contacting us through the contact details provided in this Privacy Policy or by using any consent-management or other relevant options made available on the Platform. Upon receiving a valid request, PalSafar will cease the relevant processing within the period prescribed under applicable law, unless continued processing is permitted or required by law or is necessary for a lawful purpose independent of your consent.

Withdrawal of consent will not affect the lawfulness of any processing carried out before such withdrawal. However, withdrawing consent may affect or limit your ability to access or use certain features or Services where the relevant Personal Data is necessary for providing such Services. PalSafar will inform you of any material consequences of withdrawing consent, where applicable, and will process your request in accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws.

18. Children’s Policy

PalSafar respects the privacy of children and is committed to protecting their Personal Data. The Platform is not intended for children to independently provide Personal Data or access Services where such processing is restricted or prohibited under applicable law. For the purposes of the Digital Personal Data Protection Act, 2023, a Child means an individual who has not completed eighteen (18) years of age. PalSafar shall process the Personal Data of Children only in accordance with applicable laws and, where required, upon obtaining verifiable consent from the parent or lawful guardian.

PalSafar shall not knowingly undertake tracking, behavioural monitoring, or targeted advertising directed at Children where prohibited under applicable law. If a parent or lawful guardian believes that Personal Data of a Child has been collected or processed by PalSafar in violation of applicable law, they may contact PalSafar through the contact details provided in this Privacy Policy. Upon receiving a valid request, PalSafar shall take reasonable steps to review and address the matter in accordance with applicable law.

19. Marketing Communications

Subject to applicable law and, where required, the User’s consent, PalSafar may send promotional communications, offers, newsletters, updates, travel-related information, and other marketing communications relating to its Platform, Services, or partner offerings through email, SMS, calls, push notifications, or other permitted communication channels.

Users may opt out of receiving marketing communications at any time by using the unsubscribe or opt-out option provided in the relevant communication or by contacting PalSafar through the details provided in this Privacy Policy. Opting out of marketing communications shall not affect the User’s receipt of essential transactional, account-related, booking, payment, security, or service-related communications necessary for the provision and operation of the Services.

20. Grievance Redressal

In accordance with the Digital Personal Data Protection Act, 2023 and other applicable laws, PalSafar has designated a Grievance Officer to address concerns relating to the processing of Personal Data.

Grievance Officer

Monika Chelani

Email

chelanimonika@gmail.com

Phone

9340080033

Users may submit complaints, requests, or queries regarding this Privacy Policy or the processing of their Personal Data using the above contact details. PalSafar shall endeavour to acknowledge and resolve grievances within the timelines prescribed under applicable law.

For account and data deletion requests, you may also use our public Account & Data Deletion page, or email support@palsafar.in.

21. Amendment to This Policy

PalSafar reserves the right to amend, update, or modify this Privacy Policy from time to time to reflect changes in applicable laws, business practices, technological developments, or the Services offered through the Platform.

The revised Privacy Policy shall become effective upon its publication on the Platform unless otherwise specified. Users are encouraged to review this Privacy Policy periodically to remain informed of any changes. Continued use of the Platform following such updates constitutes acceptance of the revised Privacy Policy.

PalSafar — Explore · Experience · Memories.