Privacy Policy

Privacy Notice

By visiting ixigo platforms ("Website, Mobile site and Mobile Apps"), you are accepting and consenting to the practices described in this Privacy Notice. This document describes the privacy policy of Le Travenues Technology Limited ("ixigo" or "we" or "us" or "our") and is designed to explain users of the Website, Mobile site and Mobile Apps — including buyers of travel tickets, hotel booking customers, and other visitors — what data/information we collect, why we collect it, and what we do with it.

Your use of and access to the Website, Mobile site and Mobile Apps and the services provided through (i) the Website, Mobile site and Mobile Apps and (ii) mobile site, mobile app and other offline channels including call centers and offices ("Other Interfaces") are subject to this Privacy Notice and our Terms of Use. If you disagree with any provision contained in this Privacy Notice, then please do not use or access the platforms or avail any of the Services.

Data Fiduciary under DPDP Act

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Le Travenues Technology Limited acts as a "Data Fiduciary" with regard to the collection and processing of your personal data, and is committed to fulfilling all obligations therein, including obtaining valid consent, processing data for legitimate purposes, and enabling users to exercise their rights effectively.

Information We Collect

We collect and process your personal data solely for lawful purposes, with your consent where applicable, or in accordance with other valid grounds specified under the DPDP Act. The categories include:

• Registration and KYC data — name, gender, age, date of birth, contact details, passport details, profile picture, and identification documents.
• Transactional data — booking history, e-commerce activity, and buying behavior (excluding banking credentials).
• Payment data — handled by a third-party payment processor; we do not store card details on our servers.
• Usage and technical data — cookies, session data, device identifiers, OS information, IP address, and browsing metadata.
• User-submitted content — reviews, questions, answers, and other contributions posted publicly.
• Social media data — information from linked social media accounts as permitted by your settings.
• Traveler information — details of other travelers for whom you make bookings.

Legal Bases for Processing

• Consent — for marketing communications, promotional services, or optional features.
• Performance of Contract — processing necessary to fulfill bookings (flights, hotels, trains, buses).
• Legal Obligation — compliance with regulatory obligations (e.g., RBI, SEBI, immigration laws).
• Legitimate Use — security, fraud prevention, and analytics under Section 7 of the DPDP Act.

Your Rights under DPDP Act

As a Data Principal under the DPDP Act, you have the following rights:

• Right to Access — know what data we collect and how it is used.
• Right to Correction — request correction of inaccurate or outdated information.
• Right to Erasure — request deletion of your data (subject to legal requirements).
• Right of Grievance Redressal — file complaints related to unlawful processing.
• Right to Nominate — appoint a nominee in case of death or incapacitation.

Consent Withdrawal

You may withdraw consent for optional processing activities at any time under Section 5(5) of the DPDP Act. Essential services (e.g., completing a booking) may not be available if consent for required data processing is withdrawn. Contact us at: privacy@ixigo.com

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, or as required under applicable laws. Once data is no longer required, we ensure secure deletion or archiving in accordance with the law.

Security and Safeguards

Le Travenues Technology Limited adopts reasonable technical and organizational security measures — including encryption, TLS transmission, and role-based access controls — in accordance with DPDP and other regulatory mandates. We maintain compliance with IS/ISO/IEC 27001 for information security management.

Data Breach Response

In the event of any personal data breach that negatively impacts your rights, we will notify the Data Protection Board (once constituted under DPDP) and affected users, as required under the law.

Children's Data

Le Travenues Technology Limited does not knowingly collect personal information from children under the age of 18 without appropriate consent. We will obtain verifiable parental consent wherever necessary.

Cookies

We use cookies and similar tracking technologies to store session information, analyze traffic, measure promotional effectiveness, and customize your experience. You are free to decline cookies if your browser permits, although some features may not function properly. We do not control cookies placed by third parties.

Updates to Policy

This Privacy Policy may be updated periodically. Upon revision, we will update the "Last Updated" date and inform users via appropriate channels. Continued use of ixigo platforms after changes constitutes acceptance of the revised policy.

Grievance Officer

For the complete and unabridged privacy policy, please visit: wpbook.ixigo.com/about/privacy