Privacy policy

This Privacy Policy explains how H&K Holidays LLP (GSTIN 22AARFH2911A1ZY), which runs Travel Tailor and its retreats brand Trailsmith ("we", "us"), collects, uses, shares and protects personal data when you use traveltailor.in, write to us, call us or chat with us on WhatsApp.

We are the Data Fiduciary for this data under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). Our address is Telibandha, Raipur, Chhattisgarh 492001, India, and you can reach us at hi@traveltailor.in or +91 91650 70409.

There are no user accounts, logins or payments on this website.

When you send an enquiry or hold a seat on a trip: your name, phone or WhatsApp number, email address, where you want to go, rough dates, number of travellers, anything you write about the trip and the experiences you tick. We also save the page you sent it from and how you reached the site (for example a Google search, an Instagram link or an ad, including ad references such as utm tags, gclid or fbclid), plus your cookie choice at the time.

When you contact us directly: what you share in WhatsApp chats, calls and emails.

When you book a trip: the details our partners need to confirm it, such as the names, ages or dates of birth of travellers, passport or ID details for flights, visas and hotels, and any dietary, health or accessibility needs you choose to tell us so we can plan around them. Payments are made to us outside this website; the website does not see or store card or bank details.

When you browse: pages viewed, the site or ad that brought you, whether you are on a phone or a computer, and whether you have visited before. Our host, Cloudflare, processes your IP address to deliver the site and protect it from attacks, and tells us your country so we can show the right cookie choices. To stop spam we keep a scrambled (hashed) form of the connection address for one hour; we never keep it in plain form.

• To answer your enquiry and plan, quote and book your trip.
• To share the booking details your trip needs with the partners who deliver it.
• To keep you informed before, during and after your trip.
• With your consent, to send you trip ideas and offers on WhatsApp or email. You can stop these at any time by replying STOP or writing to us.
• To understand which pages, sources and ads bring enquiries, and to improve the site and our advertising.
• To keep the site secure, prevent spam and fraud, and meet our legal, tax and accounting duties.

We process your data on the basis of the consent you give (for example by sending the enquiry form or accepting cookies) and, where the DPDP Act allows, for legitimate uses such as completing a booking you asked for or meeting a legal obligation.

On your first visit a cookie banner lets you accept all, decline or choose each kind of cookie, and "Cookie settings" at the foot of every page lets you change your mind at any time. In India we ask first by default; in Europe, the UK and Switzerland we always ask first.

Always on (needed for the site to work):

• tt_consent: remembers your cookie choice, for 180 days.
• tt_v: notes that this browser has visited before, without any ID, for about 13 months.
• tt_src and tt_cmp: remember for the current visit where you came from and which ad campaign, so an enquiry can be credited to it.
• Your browser's session storage also holds, for the current visit only, the ad references in your landing link and the experiences you ticked on a destination page.

Analytics (only if you allow them): Google Analytics 4 (for example _ga) and Microsoft Clarity (for example _clck and _clsk), which show us how people use the site, including recordings of clicks and scrolling with typed text hidden. If you decline, Google Analytics runs without cookies and sends only anonymous counts.

Advertising (only if you allow them): the Meta Pixel (for example _fbp and _fbc) and Google Ads, which tell Meta and Google when an ad visit leads to an enquiry or a WhatsApp, call or email tap, so we can measure our ads and show them to people likely to be interested.

These tools are loaded through Google Tag Manager, which follows your choice using Google Consent Mode. You can also block or delete cookies in your browser settings.

If you allowed advertising cookies, then when you send an enquiry or tap WhatsApp, call or email, our server also tells Meta about it directly, so the event is still counted when a browser blocks the Pixel. What we send: your email address, phone number and first name, each scrambled one way (hashed) before it leaves our server, plus your IP address, browser type, Meta's browser and click references, and the page. If a trip you enquired about is later booked, we may send Meta the booking value the same way. Meta uses this to match the event to its users and measure our ads; it does not get your message or trip details. Nothing is sent to Meta if you declined advertising cookies.

• Travel partners, only as your trip needs: hotels and homestays, airlines and transport companies, local ground operators and guides, Trailsmith hosts (the "Smiths") for their retreats, and visa and insurance providers. They use your data under their own privacy policies.
• Technology providers who work for us: Cloudflare (website hosting, database and photo storage), Google (Tag Manager, Analytics, Ads, email), Microsoft (Clarity), Meta (Pixel, Conversions API, WhatsApp) and the WhatsApp app we use to talk to you.
• Authorities, when the law, a court or a government body requires it, or to protect our rights, our travellers or the public.
• A buyer or successor, if our business is merged or sold, under the same protections.

We do not sell or rent your personal data.

Some of these providers store or process data on servers outside India. We use well-known providers with strong security, and we follow any restrictions the Government of India places on transfers to particular countries.

• Enquiries that do not lead to a trip: up to 3 years, so we can pick up the conversation if you come back, then deleted.
• Booking records: as long as Indian tax, accounting and other laws require.
• Visit and page counts are kept only as daily totals with no personal details.
• If you withdraw consent or ask us to erase your data, we delete it unless the law requires us to keep it.

The site is served only over an encrypted connection (HTTPS). Enquiries sit in a private database that only our team can open, through individual password-protected logins with access limited to what each person needs. No method is perfectly secure, but if a breach ever affects your data we will tell you and the Data Protection Board of India as the DPDP Act requires.

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and who we have shared it with;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law;
• withdraw your consent at any time, as easily as you gave it (withdrawal does not affect what was done before);
• nominate another person to exercise these rights if you die or are unable to;
• raise a complaint with our Grievance Officer, below.

To use any of these rights, write to hi@traveltailor.in with the subject line "Privacy request". We may ask you to confirm who you are before acting on it.

Himanshu Agrawal, H&K Holidays LLP, Telibandha, Raipur, Chhattisgarh 492001, India. Email: hi@traveltailor.in (subject "Privacy grievance"). Phone or WhatsApp: +91 91650 70409.

We acknowledge every grievance within 7 working days and aim to resolve it within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Our services are for adults. We do not knowingly collect data directly from anyone under 18. When a parent or guardian books for a child, they give us the child's details and consent on the child's behalf.

Our pages link to other sites, such as Instagram, WhatsApp and Google Maps. Their own privacy policies apply when you use them.

We will update this page when our practices change and show the new date at the top. If a change is significant, we will say so clearly on the site.

Questions about this policy or your data: hi@traveltailor.in (subject "Privacy Policy Inquiry") or +91 91650 70409.