SKY EAGLE TRIP PRIVACY POLICY (DRAFT)

Effective Date: 3 July 2026.

1. Scope and Acceptance: Sky Eagle Trip India Pvt. Ltd. (“Sky Eagle Trip”, “we”, “us”) operates this website and services for booking travel experiences in India. This Privacy Policy describes how we collect, use, disclose and protect your personal data in compliance with India’s IT Act and the Digital Personal Data Protection (DPDP) Act, 2023. It applies to all visitors and customers (“you”) who book or inquire about tours through our website or mobile app. By accessing our services, you consent to the practices below. If you do not agree, please do not use our site.

2. Data We Collect: We collect Personal Data you provide directly, including when you register an account or make a booking. This includes:

• Identity & Contact Data: Name, email, mailing address, phone number, date of birth, gender, nationality, and profile picture.
• Travel & Booking Data: Itinerary details, destinations, dates, group size, travel preferences (e.g. dietary needs, seating preferences), passport/Visa numbers, PAN or Aadhaar (if required by RBI/LRS for foreign travel), travel insurance information, emergency contacts, and photographs or medical certificates for medical conditions.
• Account Credentials: Username, password, and security question/answer.
• Payment Data: Payment method details (credit/debit card, netbanking, UPI) and billing address. We use secure third-party payment gateways; we do not store your card or netbanking credentials.
• User-Generated Content: Reviews, ratings, photos, or comments you post on our platform.
• Device & Usage Data: Technical information automatically collected when you use the site, such as IP address, browser type, operating system, device ID, and usage statistics (pages visited, clickstream). Cookies and similar technologies (see section 7) also collect data about your preferences and site usage.

We do not collect sensitive biometric or health data beyond what is voluntarily provided for travel (e.g. medical conditions for trip arrangements). Any such information is used solely to ensure your safety or comply with regulations.

3. How We Use Your Data: We use your Personal Data for the following purposes:

• Booking and Services: To process your tour bookings, send confirmations and tickets, communicate itinerary changes, and facilitate all travel services you request. This includes sharing details with travel service providers (airlines, hotels, transport, guides) strictly to fulfil your booking. You authorize Sky Eagle Trip to share necessary traveler data with these third parties to complete your services.
• Customer Support: To address your inquiries, provide support, and manage payments/refunds. We may record phone calls and emails for quality and training purposes (without notice).
• Marketing & Communications: To send you updates about your bookings and, with your opt-in consent, promotional offers (e.g. new tours, partner discounts) via email, SMS or WhatsApp. You may opt-out of marketing at any time (see Your Rights). We will never market without consent.
• Personalization: To tailor content and recommendations to your travel interests and past bookings. For example, we may highlight relevant tours based on your preferences.
• Analytics & Improvement: To analyse usage patterns, website performance, and customer feedback, so we can improve our services and site functionality. This includes aggregated (non-identifiable) analysis provided to third-party analytics services.
• Security & Fraud Prevention: To secure our platform and prevent unauthorized activities. We maintain strict security protocols and may use your data to detect fraud (e.g. verifying identity during transactions).
• Legal & Compliance: To comply with legal obligations (e.g. tax/reporting, responding to court orders, cooperating with law enforcement if required) and to enforce our Terms of Service. We will disclose data when mandated by law.

We retain your Personal Data only as long as necessary to fulfill these purposes or as required by law. In practice, we keep booking and account data until your account is deleted or inactive, plus additional time for legal/tax obligations. When data is no longer needed, we will securely delete or anonymize it.

4. Legal Bases (Consent): By using our services and providing your information, you consent to this collection and processing. You may withdraw consent by contacting our privacy team (below); however, withdrawing consent may prevent us from fulfilling bookings or accessing our services. For instance, if you decline to provide required travel documents (passport, LRS information) or remove consent for processing, we may be unable to complete an international booking as per RBI/immigration rules.

5. Sharing Your Data: We do not rent or sell your Personal Information to third parties. We share your data only as follows:

• Travel Service Providers: Airlines, hotels, rail/bus operators, tour guides, insurance companies, or visa agencies involved in your booking. You authorize Sky Eagle Trip to share necessary details to these providers for trip fulfilment. They may process your data as independent controllers for their own purposes; you should review their privacy policies, as we are not responsible for their practices.
• Payment Processors: Secure third-party payment gateways will receive your payment details to process transactions. These vendors are PCI-compliant; they use your payment information only to complete your booking.
• Group Companies: Sky Eagle Trip may share data with our affiliates or parent company for improving services and personalization. We ensure these entities handle your data securely and per this policy.
• Business Partners: With your consent, we may share filtered data with partners (e.g. banks or insurance providers) for co-branded offers or rewards. If you engage with such offers, further processing will follow the partner’s privacy rules.
• Vendors & Service Providers: We engage third-party vendors (IT/hosting providers, email/SMS platforms, data analytics, CRM systems, etc.) to support our operations. We provide them only the data needed to perform their services, under strict confidentiality contracts.
• Legal Compliance: We will disclose information if required by law, regulation, subpoena or court order, or to protect our rights, customers, or others (e.g. in fraud investigations). Such disclosures may occur without your consent; we will not be liable for them.

6. Cookies & Tracking: We use cookies, web beacons, and similar technologies to recognise you and enhance your experience. Cookies fall into:

• Strictly Necessary: Enable core site functions (login, booking pages). These do not require consent; you may disable them, but core features may break.
• Performance & Analytics: Collect anonymous usage data (pages visited, clicks) to improve the website’s performance.
• Functional: Remember your preferences (language, login name) for convenience. They may store personal info you provided (username).
• Marketing/Targeting: Used to deliver relevant ads (including retargeting) and measure ad performance. These may share anonymous identifiers (e.g. pixel tags) with our advertisers or ad networks; they do not reveal your identity but may use your browsing to infer interests.

On first visit, we display a cookie consent banner where you can accept necessary cookies only or all cookies. You can manage or disable cookies via your browser settings at any time (see browser “Help”). Disabling certain cookies may degrade your experience. Our full Cookie Policy (linked below) provides details.

7. Your Rights: As a user, you have the following rights regarding your personal data (subject to applicable law):

• Access: You may request a copy of the personal data we hold about you. You can view and update much of your account data by contacting us.
• Correction: You can correct inaccurate or incomplete information via your account or by contacting us.
• Deletion: You can request deletion of your personal data (except data we must retain for legal reasons). For example, if you delete your account, we will delete your profile and booking data unless retention is needed for tax/regulatory purposes.
• Portability: Where technically feasible, you may request a copy of your data in a commonly used format.
• Object or Restrict Processing: You can object to processing for certain purposes (e.g. marketing). If you object to marketing, we will stop sending promotional messages. If you object to processing essential for service, we may not be able to continue.
• Withdraw Consent: If you have given consent for any processing (e.g. cookies or communications), you may withdraw it at any time. Note this may limit your ability to use certain features.

To exercise these rights or file a grievance, contact our Grievance Officer: privacy@skyeagletrip.com or write to: Sky Eagle Trip India Pvt. Ltd, Attn: Data Protection Officer, 401, PV Enclave, Before In The Lane Of ICICI Bank, Sindhu Bhavan Marg, near Bodakdev, Ahmedabad, Gujarat 380059

8. Security: We implement industry-standard technical and organizational measures to protect your data from unauthorized access, loss or alteration. All payments are processed over SSL-encrypted channels, and sensitive payment data is handled by certified gateways. We restrict access to personal data to employees with a business need. However, no Internet system is 100% secure; we cannot guarantee absolute protection.

9. International Transfers: Your data is primarily processed in India. We may also transfer it to service providers or Sky Eagle Trip affiliates in other countries (e.g. the USA or Singapore). By using our services, you consent to such transfers. We will ensure appropriate safeguards (e.g. standard contractual clauses) are in place to protect your data during transfer.

10. Children: Our services are not intended for children under 13 years. We do not knowingly collect personal data from children. If we learn that we have inadvertently done so, we will promptly delete it. If you are under 18, you may use the site only with parental approval and supervision.

11. Changes to Policy: We may update this Policy (e.g. after legal changes like the DPDP Act). We will notify you of material changes via email or a website notice. The latest effective date will be posted at the top. Continued use after changes means acceptance of the new policy.

12. Contact Information: For privacy queries or complaints, contact our Data Protection Officer at privacy@skyeagletrip.com or call +91-98988-00704. For general issues, you may also write to us at the address above. In case of unresolved disputes, you may approach the competent court in Delhi.