Privacy Policy

OzeTrips ("we", "us", "our") operates ozetrips.in, a travel-services platform for Kashi (Varanasi), Uttar Pradesh, India, run as a sole proprietorship based in Varanasi. We arrange boat rides, hotel and homestay stays, cabs, licensed guides, puja services, jyotish consultations and multi-day packages. This policy explains what personal data we collect when you use the site or book with us, why we collect it, and the choices you have. It should be read together with our Terms of Service and Refund & Cancellation Policy.

1. Information we collect

We only ask for what a booking genuinely needs. Depending on the service, this includes:

• Contact and identity details — your name, mobile number and email address, collected when you book, enquire, log in with an email OTP, or message us on WhatsApp.
• Booking details — travel dates, time slots, number of guests, pickup and drop points, hotel check-in and check-out dates, and any special requests you add.
• Service-specific details — for jyotish consultations: date, time and place of birth, which are needed to prepare your kundli; for puja bookings: sankalp names and gotra of the participants, which the pandit needs to perform the sankalp. We treat birth details and sankalp information as sensitive, share them only with the astrologer or pandit serving your booking, and never use them for marketing.
• Payment information — handled entirely by Razorpay (see section 4). We receive only the payment status, method type (for example UPI or card) and a transaction reference — never your card number, CVV, UPI PIN or banking credentials.
• Technical data — pages visited, approximate location, device and browser type, collected through cookies and Google Analytics 4 (see section 5).
• Communications — the content of emails, contact-form messages and WhatsApp chats with our team, kept so we can serve your booking and resolve disputes.

2. How we use your information

• To confirm, deliver and support your bookings, including sending confirmations, boarding details, driver and boatman contacts, and GST invoices.
• To coordinate with the local vendors who serve your booking — boatmen, drivers, guides, hotel partners, pandits and astrologers — sharing only the minimum they need (typically your first name, phone number, party size and timing).
• To operate your account: email OTP login codes, your booking history and invoice downloads.
• To respond to enquiries and leads you send by form, phone or WhatsApp.
• To meet legal obligations, including GST invoicing, accounting and record-keeping under Indian tax law.
• To understand how the site is used and improve it (aggregated analytics only).
• To send you offers or festival updates only if you have opted in; every such message includes a way to opt out.

3. WhatsApp communications

WhatsApp is how most of Kashi talks, and it is our primary support channel. When you book with us or message us first on WhatsApp, you consent to receiving transactional messages there — booking confirmations, meeting-point pins, vendor contact details, schedule changes and payment reminders. We will not add you to promotional broadcast lists without separate consent. You can withdraw consent at any time by replying STOP or emailing bookings@ozetrips.in; we will then use email and phone calls for essential booking communication instead.

4. Payments are handled by Razorpay

All online payments on OzeTrips are processed by Razorpay Software Private Limited, an RBI-authorised payment aggregator. Your card, UPI or netbanking details are entered directly into Razorpay's secure, PCI-DSS-compliant checkout — they never touch our servers and we never store them. Razorpay's handling of your payment data is governed by its own privacy policy, available at razorpay.com. Refunds are likewise issued through Razorpay back to your original payment method, as described in our Refund & Cancellation Policy.

5. Cookies, sessions and analytics

• Essential cookies — we set a session cookie when you log in with your email OTP so your bookings stay attached to your account, and a similar cookie for admin staff. These are required for the site to work and are not used for tracking.
• Analytics — we use Google Analytics 4 to see, in aggregate, which pages and services interest visitors. GA4 sets its own cookies; IP addresses are processed by Google under its terms. You can block analytics cookies in your browser without affecting bookings.
• We do not run third-party advertising networks or sell browsing data to anyone.

6. Who we share data with

We never sell your personal data. We share it only with:

• the specific vendors delivering your booking (minimum details, as described above);
• Razorpay, for payment processing and refunds;
• our infrastructure providers — website hosting, database and transactional email services — who process data on our instructions;
• Google, for analytics as described above;
• government authorities, courts or police where Indian law requires it (for example tax records, or guest details that hotels must report under local rules).

7. How long we keep your data

• Bookings, invoices and payment records — retained for 8 years to satisfy Indian tax and accounting law.
• Jyotish birth details and puja sankalp details — retained while your booking is active and for a short period after in case of follow-up questions; deleted earlier on request once the consultation or puja is complete.
• Enquiries and leads — retained up to 24 months, then deleted or anonymised.
• Login OTP codes — stored only in hashed form and expire within minutes.
• Analytics data — per GA4 retention settings, currently 14 months.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you have the right to:

• access a summary of the personal data we hold about you;
• have inaccurate or incomplete data corrected or updated;
• request erasure of data we no longer need to keep by law;
• withdraw consent for optional processing (such as promotional messages) at any time;
• nominate a person to exercise these rights on your behalf; and
• raise a grievance and receive a response within a reasonable time.

To exercise any of these rights, write to bookings@ozetrips.in with the subject line "Privacy request" and the email or phone number your booking was made with. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

9. Security

The site is served over HTTPS; login codes and passwords are stored only as cryptographic hashes; access to booking data is limited to the proprietor and authorised staff who need it to serve customers. No system is perfectly secure, but if we ever become aware of a breach affecting your personal data we will notify you and the authorities as the law requires.

10. Children

Our services are booked by adults. We do not knowingly collect personal data from children under 18; where children travel with you (for example on a boat or in a cab), a parent or guardian makes the booking and provides any details needed.

11. Changes to this policy

We may update this policy as our services or the law change. The "Last updated" date above will change accordingly, and material changes will be highlighted on this page. Continued use of the site after a change means you accept the updated policy.

12. Contact us

OzeTrips (sole proprietorship), Varanasi, Uttar Pradesh, India. Grievance and privacy contact: bookings@ozetrips.in · +91 00000 00000. This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.