Effective Date: 15/10/2025

Company: Excellis IT Pvt. Ltd. (“Excellis”, “we”, “us”, “our”)

Website / Platform: Excellis Travels — [https://excellistravel.com] (“Platform”, “Service”)

We at Excellis respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, retain, and protect your information when you use our Platform, services, or APIs.

If you do not agree with the terms of this policy, please do not use our services.

1. Definitions & Scope

“Personal Information” means data that identifies or can identify a living individual (for example: name, email, phone number, address, payment details) and any other information we collect in association with it. This policy applies to all users of the Platform (travel agents, tour operators, individual customers, API users) and all modes of data collection (web, mobile, offline). It also covers data that Excellis collects via third parties or partners in connection with providing services.

2. Information We Collect

We collect Personal Information and other data in various ways, when you use our Platform or associated services. Key categories include:

2.1 Information You Provide to Us

• Registration / Account Information: name, email address, phone, company name, address, GST or tax details, identity proof if required.
• Booking & Travel Information: passenger names, travel itinerary, passport/visa details (if needed), hotel preferences, special requests, travel documents.
• Payment & Financial Data: credit / debit card data, bank account or payment method details, billing address, transaction history.
• Agent / Business Data: information about your business, agent hierarchy, commission structure, wallet/credit agreements.
• Communications & Support: messages you send us (via email, chat, support), feedback, complaints, queries.

2.2 Automatically Collected Information

• Usage & Analytics Data: pages visited, time stamps, device type, browser type, IP address, geolocation (approximate), referral source, clicks, interaction logs.
• Cookies, Web Beacons & Tracking Technologies: to enable essential site functions, remember preferences, analyze traffic, advertising, personalization.

2.3 Third-Party Sources

We may receive data about you from third parties:

• Payment gateways, fraud prevention services
• Identity verification / KYC partners
• Advertising / marketing partners
• Suppliers (airlines, hotels) sharing booking status, PNR, etc.

3. Use of Your Information

We use your Personal Information in the following ways:

• To facilitate booking, modification, cancellation, refunds and delivery of travel services.
• To validate your identity, perform KYC, prevent fraud, ensure security.
• To process payments, issue invoices, handle finances, and manage agent wallets.
• To communicate with you: service updates, confirmations, reminders, marketing (if opted in), support replies.
• To improve, test, optimize and personalize our Platform (UX, features, offers).
• To provide analytics, reporting, trend insights to you (business dashboards).
• To comply with applicable laws, regulations, tax & audit obligations.
• To share necessary data with third parties (suppliers, service providers) to deliver the services you request.

4. Disclosure of Your Information & Third Parties

We may disclose your Personal Information to:

• Suppliers / travel service providers: airlines, hotels, bus operators, visa agencies, etc., for booking fulfillment.
• Payment processors & banks for transaction processing, refunds, settlement.
• Third-party service providers / vendors: for hosting, data storage, analytics, marketing, customer communication, KYC, fraud detection.
• Business partners / agents / affiliates: with your consent or as needed to provide white-label, sub-agent services.
• Legal / regulatory / compliance entities: when required by law, subpoena, court order, government request.
• Merger / acquisition / business transfer: in the event of restructuring, sale, or merger of the business or assets, subject to confidentiality and users’ rights.

We will not sell or rent your Personal Information to marketers or third parties for their independent use, without your explicit consent.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for:

• Essential / Strictly Necessary Cookies: to enable core features and security (login, session, etc.)
• Functional Cookies: to remember preferences, language, settings
• Analytics Cookies: to analyze usage patterns, track performance, error logging
• Advertising Cookies: (if applicable) to deliver relevant promotional content and for retargeting

You can disable or block cookies via your browser settings—but doing so may impede full functionality of the Platform.

6. Your Rights & Choices

Depending on your jurisdiction, and subject to applicable laws, you may have:

• Access / Correction: request to see what Personal Information we hold about you and correct inaccuracies
• Deletion / Erasure: ask to remove or anonymize certain data, subject to legal or business retention obligations
• Restriction / Objection: restrict or object to certain processing (e.g. marketing)
• Consent Withdrawal: if you consented to certain processing (e.g. marketing), you may withdraw that consent
• Data Portability: request export of your data in structured, machine-readable format (as applicable)
• Opt-out of Marketing: you can opt-out of promotional emails, newsletters, offers

To exercise these rights, please contact us via the contact info given below. We may require identity verification before granting requests.

7. Data Retention & Deletion

We will retain your Personal Information as long as necessary to:

• Fulfill the purposes for which it was collected (booking life-cycle, accounting, audit)
• Comply with applicable laws, tax, regulatory, dispute resolution, archive requirements
• Maintain business records and to defend legal claims

Once the data is no longer needed, we will securely delete, anonymize or archive it so that it cannot be linked back to you.

8. Security & Data Protection

We implement reasonable technical, administrative and organizational safeguards to protect your Personal Information from accidental loss, unauthorised access, alteration, disclosure or destruction.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

If a data breach occurs, we will respond in accordance with applicable laws, inform you and take steps to mitigate harm.

9. Children’s Privacy

Our service is not intended for persons under the age of 18. We do not knowingly collect Personal Information from minors under 18. If you believe we have collected such information inadvertently, contact us and we will remove it.

10. Cross-Border Transfers

As our Platform may operate globally or involve suppliers / servers located in different countries, your data may be transferred, stored or processed outside your home jurisdiction. Where we make such transfers, we ensure adequate protections (standard contractual provisions, encryption, compliance with applicable law).

11. Changes to this Privacy Policy

We may update or revise this Privacy Policy from time to time. We will post the updated version on our Platform with a new “Effective Date.” Significant changes will be notified to Users through email or platform notice.

Your continued use after changes indicates your acceptance of the updated policy.

12. Contact Us / Grievance Officer

If you have any questions or requests related to this Privacy Policy or your data rights, please contact:

Excellis IT Pvt. Ltd.

Email: privacy@excellistravel.com / support@excellistravel.com

Address: Ecostation Business Tower CN-06, 15th Floor-Unit-1501 &, Unit-1504, Street Number 9, BP Block, Sector V, Bidhannagar, Kolkata, West Bengal 700091

Phone: +91 XXXXXXXXXX