Privacy & Data Protection Policy

01. Commitment to Traveler Privacy

The Travel Vogue ("we", "us", "our"), operating from Mandi (Himachal Pradesh) with registered ground base camps in Manali, Banlekhi, Dehradun, and Leh, values the trust you place in us when sharing your personal and trip details.

This Privacy Policy outlines the categories of data we collect, why we collect it, how it is processed for mountain permits and bookings, and your rights as a traveler under the Digital Personal Data Protection Act, 2023 (DPDP) and Information Technology Act, 2000.

02. Information We Collect

We collect only the essential personal information required to execute your mountain expeditions safely and legally:

• Identity & Contact Details: Full name, email address, mobile/WhatsApp number, residential address, emergency contact person, and blood group.
• Government-Mandated Permits & Registrations: Aadhaar Card / Passport details required exclusively for Uttarakhand Tourism Development Board (UTDB) Char Dham biometric yatra tokens, Ladakh Inner Line Permits (ILP), Spiti border passes, and forest camping permits.
• High-Altitude Medical Disclosure: Pre-existing medical conditions (asthma, hypertension, cardiac history, vertigo, or medication requirements) necessary for our expedition directors to manage emergency medical oxygen protocols.
• Payment Transaction Data: Tokenized payment transaction IDs. Please note: The Travel Vogue never stores credit card numbers, debit card PINs, CVVs, or Net Banking credentials on our servers. All transactions are securely processed directly by Razorpay (PCI-DSS Level 1 Certified).
• Device & Analytics Data: IP address, browser type, device identifiers, and anonymized page view statistics through Google Analytics 4 (GA4) to improve website usability.

03. Purpose of Data Processing

Your personal information is strictly used for:

04. Sharing & Third-Party Disclosure

The Travel Vogue does not sell, rent, or trade your personal information to any third-party marketing companies.

Information is only shared under strict data confidentiality with:

• Verified Ground Partners: Assigned commercial drivers, certified NIM mountain leaders, and booked partner cottages for check-in verification.
• Government Authorities: When legally mandated for border check-posts, yatra registration tokens, or search-and-rescue operations.
• Payment Gateways: Razorpay for SSL encrypted, multi-factor payment authentication.

05. Cookies & Analytics

We use essential cookies and anonymized tracking tools (Google Analytics 4) to monitor website performance, remember your search preferences, and analyze how visitors engage with our interactive tools (such as the Himalayan Altitude Calculator).

You can disable non-essential cookies at any time through your browser settings without affecting your ability to browse packages or request trip itineraries.

06. Security & Data Retention

All traveler records stored in our Firebase database are protected by 256-bit SSL encryption, enterprise-grade access control rules, and strict authentication barriers.

We retain permit documents only for the statutory period required by Indian tourism and tax regulations (typically 12 months post-travel), after which permit scans are securely purged from active servers.

07. Grievance Officer & Contact Details

Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you may contact our designated Grievance Officer regarding data corrections or deletion requests: