Privacy Policy

1. Introduction

Palamu Tours ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at palamutours.in and our client portal. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our services.

2. Information We Collect

2.1 Client Account Information

When you register as a client or are registered by our team, we collect:

• Full name
• Email address
• Mobile number
• Client ID (assigned by Palamu Tours)
• Password (stored in encrypted/hashed form — we never store plain-text passwords)

2.2 Booking Information

When you make or enquire about a booking, we collect:

• Travel destination and dates
• Number of travellers and traveller details
• Service type (tour package, hotel, flight, transfers, etc.)
• Special requests and notes
• Booking status and payment information

2.3 Passport and Travel Documents

For international travel bookings, we may collect passport details, visa information, and other travel documents necessary to complete your booking with airlines, hotels, and destination management companies (DMCs).

2.4 Payment Information

Payments are processed through Razorpay, a PCI-DSS compliant payment gateway. We do not store your full card details on our servers. We retain transaction references, payment amounts, and payment status for booking records.

2.5 Usage and Technical Data

We may collect technical information such as IP address, browser type, pages visited, and session data to improve our services and for security purposes.

3. How We Use Your Information

• To process and manage your travel bookings
• To communicate booking confirmations, updates, and important travel information
• To send login verification codes (OTP) and account security emails
• To process payments and maintain financial records
• To provide customer support and respond to enquiries
• To comply with legal and regulatory obligations
• To improve our website and services

4. Sharing Your Information

We share your personal information only as necessary to complete your travel arrangements:

• Airlines and carriers — for flight bookings and ticketing
• Hotels and accommodation providers — for room reservations
• Destination Management Companies (DMCs) — for ground arrangements, transfers, and sightseeing
• Visa agencies and consulates — where visa assistance is provided
• Travel insurance providers — where insurance is arranged
• Razorpay — our payment gateway partner, for processing online payments
• Google services — analytics and maps where applicable

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Cookies and Analytics

Our website uses cookies to maintain your session and improve your experience. We may use Google Analytics to understand how visitors use our site. You can control cookie settings through your browser. Disabling cookies may affect certain features of the client portal.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted password storage, secure HTTPS connections, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Booking records and financial data are typically retained for a minimum of seven years in accordance with applicable tax and accounting regulations.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent where processing is based on consent
• Lodge a complaint with the relevant data protection authority

To exercise these rights, please contact us at [email protected].

9. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised date. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: