Privacy Policy

1. Information we collect

• Contact details you provide — name, email, phone number.
• Enquiry details — destination, dates, travellers, meal preference and messages.
• Account & verification data — for operators/agents: business details, and one-time codes used to verify your email/phone.
• Transaction data — for credit purchases: order/invoice references and amounts. Card/UPI/bank details are entered on Razorpay's secure checkout and are never collected or stored by us.
• Usage data — pages viewed, and basic device/analytics information collected via cookies.

2. How we use your information

• To share your enquiry with relevant GST-verified operators so they can send quotes.
• To verify your email and phone for genuine leads and reduce spam.
• To process credit purchases by operators/agents and issue invoices.
• To provide support, operate and improve the platform, and send service updates.
• With your consent, to send deals and travel offers (you can unsubscribe anytime).
• To comply with legal obligations and prevent fraud or misuse.

3. Legal basis & consent

We process your data on the basis of your consent (which you give when you submit an enquiry, create an account or opt in to marketing) and, where applicable, to perform a service you requested or to meet a legal obligation. You may withdraw consent at any time by contacting us; withdrawal does not affect processing already carried out, and some features (such as receiving operator quotes) may not work without the necessary data.

4. Sharing & disclosure

We share enquiry details only with operators relevant to your request, and with service providers needed to operate the platform — including Razorpay, our payment processor for credit purchases. We share with Razorpay only the data required to process a payment (such as name, email, amount and order reference); your card/UPI details are entered on Razorpay's secure, PCI-DSS compliant checkout and never reach our servers. We may also disclose data where required by law, court order or a valid government request. We do not sell your personal data.

5. Data retention

We keep personal data only for as long as needed for the purposes above — typically for the life of your account and for a reasonable period afterwards to meet legal, tax, accounting and dispute- resolution requirements (tax invoices and transaction records are retained for at least 8 years as required by Indian law). When data is no longer needed, we delete or anonymise it.

6. Security

We use industry-standard encryption, access controls and secure hosting to protect your data. Payments are handled over Razorpay's PCI-DSS compliant gateway and we never store full card details. No method of transmission over the internet is 100% secure, but we work to protect your information and will notify you and the authorities of any breach as required by law.

7. Your rights

Subject to applicable law, including the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you and request a summary of its processing.
• Request correction, completion or updating of inaccurate or incomplete data.
• Request erasure of your data where it is no longer required.
• Withdraw consent and opt out of marketing communications.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Raise a grievance with our Grievance Officer (see below).

To exercise any of these, email support@tourbazaar.in. We may verify your identity before acting on a request.

8. Children's privacy

The platform is intended for users aged 18 and above. We do not knowingly collect personal data of children without verifiable parental/guardian consent. If you believe a child has provided us data, contact us and we will delete it.

9. Cookies

We use essential cookies to keep the site working and analytics cookies to understand usage and improve the platform. You can control cookies through your browser settings; disabling some may affect functionality.

10. Grievance Officer

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, 2023, the contact details of our Grievance Officer are below. We aim to acknowledge complaints within 24 hours and resolve them within 15 days.

• S Uma Sankar
• Keyakash Technologies Private Limited (operating the Graciax / Tour Bazaar platform)
• Rainmakers Coworking Space, JP Nagar 3rd Phase, Bangalore, Karnataka 560078
• Email: support@tourbazaar.in
• Phone: +91 89398 65026

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, notified to you.

12. Contact

For any privacy request or question, email support@tourbazaar.in or call +91 85480 50741.