Legal Document

Privacy Policy

We value the trust you place in us and recognize the importance of secure transactions and information privacy. This Privacy Policy describes how NTF Travel, a part of Nand Tourism and Finserv Limited (collectively referred to as "NTF", "us", "our" or "we"), its affiliates and group companies, who provide travel-related services and leisure activities ("Services") collect, use, share or otherwise process your personal information through the websites www.ntftravel.com and its sub-domains; mobile application and m-site (hereinafter, collectively referred to as "Web Platform").

By visiting the Web Platform, providing your information or availing of our Services, you expressly agree to be bound by the terms and conditions of this Privacy Policy, the Terms of Use and any applicable Services' terms and conditions. Your personal information will be primarily stored and processed in India.

If you receive an email or call from anyone claiming to be from NTF seeking sensitive information like debit/credit card PIN or net banking password — never provide such information. Report it immediately to an appropriate law enforcement agency.

Section 01

Collection of Information

We may collect your personal information directly from you when you visit our Web Platform; in the course of our relationship with you; when you make your personal information public on social media; or when you download, install, or use any of our Services. We may also receive information about you from third parties such as our travel partners.

Some of the information we may collect includes but is not limited to:

  • Account Information — username or login details, email ID, and contact numbers provided during sign-up or use of the Web Platform
  • Booking Information — information about your travel, Trip ID, PNR details, bookings, co-passengers, and travel preferences
  • Demographic Data — gender, nationality, age or date of birth
  • Location Data — precise geographic location of your device
  • Payment Information — records of purchases, invoice records, payment method, cardholder or account-holder name, payment amount and date
  • User-Generated Data — image files, documents, or other data you wish to store on our servers
  • Co-Passenger Data — information about other travellers for whom you make a booking, with their confirmed consent to share this information
  • Health Information — Covid-19 vaccination status or certificate when required by applicable local regulatory guidelines
  • Device & Technical Data — device type, IP address, ISP, browsing history, device identity, mobile operator, Wi-Fi connection, SSID, IMSI, and IMEI
  • Loyalty Program Data — name, contact details, date of birth, gender, zip code, lifestyle information, and transaction history across partner platforms

Section 02

Use of Information

We use your personal information to provide the Services you request. We will use your information strictly for legitimate, business, contractual, and lawful purposes only. Some of the purposes for which we use your information are:

  • Provide requested services — creating a user account, processing and confirming your reservation, and communicating about services requested
  • Analyze your travel or booking interests and provide promotional offers, special coupons, and personalized recommendations
  • Send communications about transactions, bookings, and updates via emails, SMS, WhatsApp, Telegram, and other messaging platforms
  • Send verification emails and messages to confirm your identity and secure your account
  • Send marketing communications about products and services relevant to your interests
  • Scan voice systems for quality, monitoring, and security improvement purposes
  • Conduct surveys and provide information about our Services; tailor and improve the Web Platform user experience
  • Manage IT systems — identify and mitigate fraudulent activity; ensure compliance with applicable law; and improve our Services
  • Exercise a right or obligation conferred or imposed by law, including responding to requests and legal demands

Section 03

Cookies

We may use data collection devices such as "cookies" on certain pages of the Web Platform to help analyze our web page flow, measure promotional effectiveness, and promote trust and safety. "Cookies" are small files placed on your hard drive that assist us in providing our services.

Most cookies are "session cookies" that are automatically deleted from your hard drive at the end of a session. You are always free to decline or delete our cookies if your browser permits, although in that case you may not be able to use certain features on the Web Platform.

Analytics Cookies

Used via Google Analytics to understand how users interact with our Web Platform and to improve our services.

Advertising Cookies

Used to serve relevant ads based on your browsing interests and travel behavior, with your consent.

Functional Cookies

Enable features like saved preferences, login sessions, and booking flow state across pages.

Opt-Out Options

You can opt out of Google Analytics at: tools.google.com/dlpage/gaoptout. Cookie preferences can also be managed at the browser level.

Section 04

Lawful Basis for Processing

We may process your personal information where:

Consent

You have given your express consent to the collection and processing of your personal information.

Contractual Necessity

Processing is necessary for a contract between you and us, or for our legitimate business interests.

Legal Obligation

Processing is required by applicable law or where we have a valid and legitimate legal interest in doing so.

Vital Interests

Processing is necessary for prompt action in events such as medical emergencies, disasters, or breakdowns of law and order.

Section 05

Sharing of Information

We may share or disclose your personal information internally with our group companies or with other third parties and affiliates. Some of the instances where we may share your personal information are:

  • Service Providers — airlines, hotels, activity providers, and other end-service operators required to fulfil your booking
  • Data Processors — cloud service providers, payment gateways, fraud detection systems, and customer service platforms acting on our behalf
  • Advertising Partners — third-party advertising service companies for online behavioural advertising, with your consent
  • Professional Advisors — accountants, auditors, or lawyers, subject to binding contractual obligations of confidentiality
  • Government Authorities — law enforcement agencies or regulatory bodies if required to do so by law or in good faith belief that such disclosure is necessary
  • Business Transfers — relevant third-party acquirers if we sell or transfer all or any portion of our business or assets, including in the event of a reorganization, dissolution or liquidation
  • International Partners — due to the global nature of our business, we may share information internationally with group companies and partners, with appropriate security measures in place

Section 06

Security Precautions

To protect your personal information from unauthorized access or disclosure, loss or misuse, we have adopted reasonable security practices and procedures in line with industry standards, including secure server use and industry-standard encryption measures.

However, internet transmission cannot be guaranteed to be 100% secure. Users are responsible for ensuring the protection of login and password records for their accounts.

Children's Privacy: Our Web Platform is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. We do not knowingly solicit or collect personal information from children under the age of 18 years. If you have shared any personal information of children under 18, you represent that you have the authority to do so.

Section 07

Data Retention

We retain your personal information for a period no longer than is required for the purpose for which it was collected or as required under any applicable law. We may continue to retain your data in anonymized form for analytical and research purposes.

Online data related to behavioural advertising is retained by NTF for a period of not more than 365 days.

Section 08

Your Rights & Choices

You may access, correct and update your personal information directly through the profile and settings sections on the Web Platform. You can also write to us at dpo@ntftravel.com to assist you with these requests.

Access & Correction

View and update your personal information at any time via your account profile and settings.

Withdraw Consent

Write to dpo@ntftravel.com mentioning "withdrawal of consent". Note this may restrict access to some Services.

Opt-Out of Marketing

Click the unsubscribe link in any promotional email or write to us at dpo@ntftravel.com.

Ad Personalization

Opt out using the "Opt out of Ads Personalization" settings in your device's settings application.

Section 09

Changes to This Policy

We may update this Privacy Policy periodically. We will alert you to significant changes by posting the date our Privacy Policy was last updated, placing a notice on our Web Platform, or sending you an email.

Your continued use of any of the Services shall be deemed your acceptance of the updated Privacy Policy. We encourage you to read this Policy carefully and to regularly check this page to review any changes we might make.

The scope of this Privacy Policy is limited to our Web Platform. Links to third-party websites on our Web Platform are provided for convenience only. Please refer to those third parties' respective privacy policies for information on how they handle your data.

Section 10

Contact Us & Grievance Officer

If you have a query, concern, or complaint about the collection or usage of your personal information, please contact our Data Protection Officer. Please mention your Trip ID when sending an email so we can assist you faster.

NTF Travel — Data Protection Officer

Nand Tourism and Finserv Limited  ·  Please include your Trip ID in all correspondence

dpo@ntftravel.com