PRIVACY POLICY — EXCELLIS TRAVEL

Effective Date: [●] Last Updated: [●]

This Privacy Policy (“Policy”) describes how Excellis Travel, having its registered office at:

Excellis Travel Private Limited, EcoStation Building, 15th Floor, Unit no 1504, Sector V, Salt Lake, Bidhannagar, Kolkata, West Bengal, India (Hereinafter referred to as “Excellis Travel”, “Company”, “we”, “our”, or “us”)

collects, uses, stores, processes, shares, and protects personal data when you access or use our website, portal, mobile application, APIs, and travel-related services (“Services”).

By using Excellis Travel’s Services, you agree to the collection and use of information in accordance with this Policy.

1. PURPOSE AND SCOPE

This Policy applies to:

  • Individual customers booking travel services
  • Travel agents, resellers, and channel partners
  • Corporate clients and their authorised employees
  • Visitors accessing our website or platform

This Policy governs all personal information collected through online or offline interactions.

2. DEFINITIONS

For the purpose of this Policy:

  • “Personal Data” means any information relating to an identified or identifiable individual.
  • “Sensitive Personal Data” includes financial information, identity documents, and other protected categories.
  • “Processing” includes collection, storage, usage, transfer, disclosure, or deletion.
  • “User” includes customers, partners, corporate travellers, and authorised representatives.
3. INFORMATION WE COLLECT

We may collect the following categories of information:

3.1 Personal Identification Data
  • Full name
  • Address
  • Phone number
  • Email address
  • Date of birth (where required for minors/travel compliance)
3.2 Booking and Travel Information
  • Passenger details
  • Passport and visa information
  • Frequent flyer details
  • Itinerary, booking history, travel preferences
3.3 Payment and Transaction Data
  • Billing details
  • Transaction references
  • Payment confirmations

Note: Card details are generally processed directly by secure payment gateways and not stored by Excellis Travel except where legally required.

3.4 Corporate and Partner Data
  • Company details
  • GST information
  • Partner login credentials
  • Wallet/account transaction history
3.5 Automatically Collected Technical Data

We automatically log “session data”, including:

  • IP address
  • Browser type
  • Device identifiers
  • Operating system
  • Access times and usage behaviour

This data helps improve platform security and performance.

4. HOW WE USE YOUR INFORMATION

We process personal data strictly for legitimate business purposes, including:

  • Processing bookings, reservations, and travel requests
  • Confirming tickets, hotels, and supplier services
  • Customer support and dispute resolution
  • Fraud detection, risk monitoring, and compliance
  • Corporate travel reporting and account management
  • Marketing communications (only where permitted)
  • Legal and regulatory compliance
5. DISCLOSURE AND SHARING OF INFORMATION

We do not sell or rent personal information.

However, we may share personal data with:

5.1 Travel Service Providers

Airlines, hotels, visa agencies, tour operators, insurance providers, and other suppliers strictly for booking fulfilment.

5.2 Payment Gateways and Banks

For secure transaction processing and fraud prevention.

5.3 Corporate Clients

Where bookings are made under corporate travel agreements.

5.4 Government and Law Enforcement Authorities

We may disclose information where required under:

  • Court orders
  • Statutory obligations
  • Immigration and security screening
  • Fraud investigations

We reserve the right to disclose information in good faith to protect Excellis Travel, its users, employees, directors, and business interests.

5.5 Business Transfers

In the event of merger, acquisition, restructuring, or sale of assets, user information may be transferred as part of the transaction.

6. DATA SECURITY AND SAFEGUARDS

Excellis Travel maintains commercially reasonable safeguards including:

  • SSL encryption
  • Access controls and authentication
  • Secure hosting infrastructure
  • Role-based access restrictions
  • Continuous monitoring against cyber threats

However, no system is completely immune from cyber risks. By using our Services, you acknowledge that Excellis Travel shall not be liable for unauthorised access beyond its reasonable control.

7. USER RESPONSIBILITIES

You are solely responsible for:

  • Maintaining confidentiality of login credentials
  • Ensuring accuracy of traveller data
  • Obtaining consent from third-party travellers before sharing their information
  • Preventing misuse of corporate/partner accounts

Excellis Travel shall not be liable for losses caused by negligence or unauthorised access arising from user failure.

8. DATA RETENTION

We retain personal data only as long as necessary for:

  • Booking fulfilment
  • Legal and taxation compliance
  • Dispute resolution
  • Fraud prevention

Data may be retained longer where required by law or regulatory authorities.

9. USER RIGHTS (DPDP ACT COMPLIANCE)

In accordance with India’s Digital Personal Data Protection Act, 2023, users may request:

  • Access to personal data
  • Correction of inaccurate data
  • Deletion of data (subject to legal obligations)
  • Withdrawal of consent for marketing

Requests may be submitted to our support team.

10. GOOGLE SYNC / THIRD-PARTY INTEGRATIONS

Where users connect Google accounts or third-party integrations:

  • Data is accessed only for service facilitation
  • Stored securely
  • Deleted upon request within 30 days. Inactive account data may be removed automatically.
11. THIRD-PARTY LINKS DISCLAIMER

Our platform may contain links to external websites. Excellis Travel is not responsible for the privacy practices, content, or security of third-party sites.

Users are advised to review external privacy policies independently.

12. LIMITATION OF LIABILITY

To the maximum extent permitted under applicable law:

  • Excellis Travel shall not be liable for indirect, incidental, or consequential damages arising from data misuse beyond reasonable control.
  • Excellis Travel’s obligations are limited strictly to compliance with applicable Indian laws.
13. CHANGES TO THIS POLICY

Excellis Travel reserves the right to amend this Policy at any time. Continued use after updates constitutes acceptance.

14. GOVERNING LAW AND JURISDICTION

This Policy shall be governed by the laws of India.

All disputes shall be subject to the exclusive jurisdiction of the courts at Bidhannagar, West Bengal only.

15. CONTACT INFORMATION

For privacy-related concerns, requests, or complaints:

Excellis Travel
Division of Excellis IT Private Limited
Salt Lake, Bidhannagar, Kolkata, West Bengal, India

Email: privacy@excellistravel.com