Last updated: 24 September 2026
Travel Devils ("we", "us") respects your privacy. This policy explains what personal data we collect through traveldevils.in and our trips, why, and the choices you have. It's written to meet India's Digital Personal Data Protection Act, 2023 and the IT Rules, 2011.
Travel Devils, 247, D Mall, Niti Khand, Indirapuram, Ghaziabad, Uttar Pradesh 201014, is responsible for your data (the "data fiduciary" under the DPDP Act).
What we collect
When you enquire or ask for a quotation: name, mobile number, email, destination, travel month or dates, number of travellers and rooms, hotel category, budget and any remarks you add.
When you create an account: name, email, mobile number and a password. We store the password only in scrambled (hashed) form, so nobody, including our team, can read it.
When you book: the names, ages and gender of every traveller, the lead traveller's contact details, the trip, date, package and price, and your payment status.
Payments: handled by Razorpay. We receive the payment status and reference; we never see or store your card, UPI PIN or bank login.
Technical data: your IP address, browser and device type in our hosting provider's logs, and the cookies described below.
We don't knowingly collect data from children except as a traveller's age and name on a booking made by their parent or guardian.
Why we use it
- To answer your enquiry and send you a quotation.
- To create and confirm your booking, collect payments and send trip details.
- To contact you before and during the trip, including WhatsApp groups for your departure.
- For safety on the trip (for example sharing traveller names with hotels, transport operators and permit offices).
- To send offers and new trips, only if you ticked the box to receive them. You can opt out anytime.
- To prevent fraud, and to meet legal, tax and accounting requirements.
Who we share it with
We share only what each partner needs:
- Hotels, transport operators, local guides and permit authorities running your trip.
- Razorpay for payments.
- Service providers that host our website and database (Vercel and Supabase) under their own security and privacy terms.
- Authorities when the law requires it.
We never sell your personal data.
Cookies
We use essential cookies only: one keeps you logged in to your account, and one keeps our team logged in to our admin area. We don't use advertising cookies.
How long we keep it
Enquiries: up to 2 years. Bookings and payment records: 8 years, as Indian tax and accounting laws require. Account data: until you ask us to delete your account.
Your rights
You can ask us to:
- show you the personal data we hold about you;
- correct or update it;
- delete it (unless we must keep it by law, for example invoices);
- stop sending you marketing messages;
- nominate someone to exercise these rights on your behalf.
Email info@traveldevils.in from the email linked to your account or booking. We reply within 30 days.
Security
Data is sent over HTTPS and stored with access limited to our team. Passwords are hashed, and accounts lock temporarily after repeated wrong passwords. No system is completely secure; if we become aware of a breach that affects you, we'll tell you and the authorities as the law requires.
Grievance Officer
- Name: Saif, Grievance Officer, Travel Devils
- Email: info@traveldevils.in (subject: "Grievance")
- Phone: +91 97118 75589
- Address: 247, D Mall, Niti Khand, Indirapuram, Ghaziabad, Uttar Pradesh 201014
We acknowledge complaints within 24 hours and resolve them within 15 days.
Changes
We'll update this page when our practices change and show the date at the top.