Privacy Policy

Plantenium Travels (“Plantenium”, “we”, “us”) is a travel planning and booking company based in India. We operate www.plantenium.com and are responsible for the personal data described in this policy (the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023).

Contact: info@plantenium.com · +91-9084682279.

• Contact details – your name, email address, mobile number and whether you'd like WhatsApp updates.
• Trip details – destinations, travel dates, number of travellers, budget, preferences and any message you send us.
• Booking details – what you booked, the amount, payment status and the payment reference returned by our payment provider.
• Traveller and visa documents – only when needed for your booking (for example passport copies, photos, bank statements or tickets for a visa). These are collected by our team after payment over email or WhatsApp, never through a public form.
• Account details – if you create an account, your email address and sign-in details (passwords are handled by our authentication provider and are never visible to us), or your basic Google profile if you sign in with Google.
• Technical data – IP address, browser and device type, and pages visited, collected automatically by our hosting provider for security and to keep the website working.

We do not collect or store your card, UPI or bank details. Payments are entered directly on our payment partner's secure page.

• To respond to your enquiries and plan your trip.
• To make and manage bookings with airlines, hotels, attraction operators, tour operators and visa authorities on your behalf.
• To process payments, issue vouchers and send confirmations and updates by email, SMS or WhatsApp.
• To provide customer support, handle changes, cancellations and refunds.
• To keep our website secure, prevent fraud and fix problems.
• To meet legal, tax and accounting obligations.
• To send you offers and travel news – only if you agree, and you can opt out at any time.

We use your data on the basis of your consent (for example when you submit an enquiry or booking) and for legitimate uses permitted by law, such as completing a service you asked for or meeting a legal obligation.

We share only what is needed for each purpose, with:

• Travel suppliers – airlines, hotels, attraction and tour operators, cruise lines and transport providers who deliver your booking.
• Visa authorities and authorised visa agents – when you book a visa with us.
• Payment partners – Razorpay and PayU (and PayPal for international payments) to process your payment securely.
• Service providers who run our website and communications – hosting (Vercel), database and sign-in (Supabase), email delivery (Resend, Zoho) and messaging (WhatsApp). They may only use your data to provide their service to us.
• Google – if you choose to sign in with Google, Google confirms your identity to us and we receive only your name, email address and profile picture. We do not get access to your Gmail, contacts, Drive or any other Google data. Signed-out visitors may see Google's sign-in prompt, which is loaded from Google.
• Hotel rate lookups – when you search for hotels, the destination and dates you typed (no personal details) are sent to a search provider (SerpApi) to fetch public reference rates from Google Hotels.
• Government or law-enforcement authorities – when required by law.

We never sell your personal data.

Some of these providers store data outside India. When data is transferred abroad, we use providers bound by contracts and security standards to protect it, and we follow any restrictions notified by the Government of India.

We use a small number of essential cookies and browser storage to keep you signed in, remember your currency choice and hold your cart during checkout. These are needed for the website to work.

Instagram posts on our website and Google's sign-in prompt are loaded from Instagram (Meta) and Google, which can set their own cookies; for visitors in Europe they are not loaded and only essential cookies are used. We don't use advertising or analytics cookies. You can block or delete cookies in your browser settings; our Cookie Policy lists everything we use.

• Enquiries – up to 3 years after our last contact, so we can help with follow-up trips, unless you ask us to delete them sooner.
• Bookings and payment records – for 8 years, as required by Indian tax and accounting law.
• Passport and visa documents – deleted within 90 days after your trip or visa decision, unless the law requires us to keep them longer.
• Account details – until you ask us to close your account.

Our website uses HTTPS encryption. Data is stored with providers that use encryption and access controls, and only authorised staff can see booking information, with two-step access to our admin systems. No system is completely secure, but we work to protect your data and will notify you and the authorities of any personal data breach as required by law.

Under the Digital Personal Data Protection Act, 2023 you can:

• Ask what personal data we hold about you and how it is used.
• Ask us to correct, complete or update your data.
• Ask us to delete your data, where we no longer need it for your booking or a legal obligation.
• Withdraw your consent at any time (this doesn't affect what we did before).
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Use the form on our “Your Data Rights” page (www.plantenium.com/data-request), or email info@plantenium.com with the subject “Privacy request”. We will reply within 30 days.

We book travel for families, but bookings and enquiries must be made by an adult (18 or over). We don't knowingly collect personal data directly from children. We process children's data – such as a child's age for a hotel search or a passport copy for a visa – only as needed for their travel and with the consent of the parent or guardian making the booking.

In line with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020 and the DPDP Act, 2023, you can contact our Grievance Officer at info@plantenium.com (subject: “Grievance”) or +91-9084682279. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

We may update this policy from time to time. The date at the top shows the latest version. Significant changes will be highlighted on our website.