This policy explains what personal information Vannu Tours collects, why, and what we do with it. We are the data fiduciary: Vannu Tours, an annexure of CareStop India, SG Highway, Ahmedabad, Gujarat 382470, India.
The short version
- We collect what we need to plan and operate your trip, and nothing else
- We never sell your data, and we do not share it with anyone outside the suppliers running your trip
- Everything you type into our planner stays in your own browser until you press submit
- You can ask us to show you, correct, or delete what we hold
What we collect
When you use the trip planner
Destination, travel dates, number of travellers and their ages, departure city, travel style and preferences. Plus, when you generate a brochure: the primary guest's name, mobile number and email address.
Until you submit an enquiry, all of this stays in your browser. The planner and the pricing engine run entirely on your device; we do not receive your search unless you send it to us.
When you make an enquiry or booking
Names as they appear on government identification, ages, contact details, and where the trip requires it: identification numbers for hotel registration or permits, and company name and GSTIN for business bookings. For some destinations, permit applications require additional identification details, which we collect only when that destination is involved.
Automatically
Standard web server logs (IP address, browser type, pages visited, timestamps), retained for security and diagnostics. We use browser local storage to remember your last search and your enquiry drafts so you do not lose work; this stays on your device and we cannot read it.
Why we use it
| Purpose | Basis |
|---|---|
| Preparing quotations and itineraries you asked for | Your request |
| Booking hotels, transport, tickets and permits in your name | Performing our contract with you |
| Contacting you about your booking before and during travel | Performing our contract with you |
| Issuing GST-compliant invoices and keeping accounting records | Legal obligation |
| Responding to your enquiries | Your consent |
| Handling complaints, claims and disputes | Our legitimate interest |
| Occasional offers, only if you opted in | Your consent, withdrawable at any time |
Who we share it with
Only the parties who need it to deliver your trip:
- Hotels and resorts, for reservation and mandatory guest registration
- Airlines and Indian Railways, for ticketing in your name
- Transport operators and drivers assigned to your trip
- Guides, activity operators and permit-issuing authorities where the itinerary requires it
- Our payment processor and our accountants
- Government authorities where the law requires disclosure
We do not sell, rent or trade personal information. We do not pass your details to other travel companies. We do not run advertising networks on this site.
WhatsApp and email
Our enquiry forms hand your message to WhatsApp or your email client so you send it yourself. When you do, that message travels through Meta's or your email provider's systems under their own privacy policies. Once it reaches us, this policy governs it.
How long we keep it
- Enquiries that do not become bookings: 12 months, then deleted
- Booking and travel records: 3 years after travel, for complaints and claims
- Invoices and accounting records: 8 years, as required by Indian tax law
- Marketing consent records: until you withdraw consent, plus 12 months
Security
This site is served over HTTPS. Access to booking records is limited to staff who need it. We do not store card numbers — payments are handled by the payment provider, and we see only the outcome. No system is perfectly secure; if a breach affects you we will tell you and the relevant authority promptly.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us to:
- Tell you what personal data we hold about you and who we have shared it with
- Correct anything inaccurate or incomplete
- Erase data we no longer need for a lawful purpose
- Withdraw consent for anything you consented to, including marketing
- Nominate someone to exercise these rights if you cannot
Write to reachus@carestopindia.com with the subject line “Data request”. We respond within 30 days. If you are not satisfied with our response you may complain to the Data Protection Board of India.
Children
We do not knowingly collect personal data directly from children. Where children travel with you, the booking adult provides their details and confirms they are authorised to do so.
Cookies and third-party services
We use browser local storage for functional purposes only — remembering your last search and your form drafts. We do not use advertising or cross-site tracking cookies.
We load web fonts from Google Fonts, which means your browser makes a request to Google's servers when you visit. Google's own privacy terms apply to that request. Nothing else on this site calls a third-party service.
Changes
If we change this policy we will update the date at the top. Material changes affecting existing bookings will be notified to you directly.
Contact
Vannu Tours, an annexure of CareStop India
SG Highway, Ahmedabad, Gujarat 382470, India
reachus@carestopindia.com ·
+91 87960 43538