Privacy Policy & Personal Data Notice

1. Categories of Personal Data Collected

To facilitate safe outdoor expeditions, we collect only the minimal necessary personal information directly provided by you during inquiry, booking, or on-trail registration:

• Identity & Communication Details: Full Name, WhatsApp phone number, email address, and residential city.
• Expedition & Safety Logistics: Selected pickup boarding point, dietary preference (Vegetarian / Jain), and emergency contact name and phone number.
• Medical Self-Declarations: Voluntary disclosure of pre-existing health conditions (asthma, heart ailments, knee injuries) to allow trek leaders to tailor wilderness first-aid readiness.
• Payment Reference Verification: 12-digit UPI transaction reference (UTR) number or payment screenshot provided to confirm seat reservation. We never request or store bank account passwords, debit/credit card CVVs, or UPI MPINs.
• Expedition Photography & Media: Group photographs and summit videos recorded during tours for community memories, safety documentation, and social media channels.

2. Lawful Grounds & Purpose Limitation

In accordance with Section 4 and Section 6 of the DPDP Act 2023, data is collected exclusively for specific, explicit, and legitimate adventure tourism operations:

• Generating verified booking passes with unique PNR confirmation codes.
• Creating dedicated temporary WhatsApp broadcast/coordination groups 24 to 48 hours prior to departure for bus pickup schedules and live coordinator contact.
• Submitting mandatory traveler lists to Maharashtra Forest Department checkpoints, sanctuary entry gates, local village Gram Panchayats, or police posts where required by law.
• Executing wilderness first-aid or coordinating with local primary health centers and rescue teams in medical emergencies.
• Responding promptly to customer inquiries, customized corporate outing requests, and refund processing.

3. Zero Data Sale & Information Sharing Restrictions

TraWell Amigos maintains a strict anti-monetization policy: We never sell, lease, rent, or trade your personal data, mobile numbers, or email addresses to third-party telemarketers, credit card issuers, insurance agents, or lead brokers.

Data is shared strictly on a need-to-know basis with:

• Designated TraWell Amigos certified trek captains and tour leads assigned to your specific batch.
• Authorized transport partners (private bus/tempo traveler drivers) solely for passenger headcounts and pickup verification.
• Government and statutory authorities only when formally mandated by official orders, forest permits, or disaster management directives.

4. Direct Peer-to-Peer UPI Payment Security

To provide maximum financial privacy, TraWell Amigos utilizes direct UPI (Unified Payments Interface) transactions verified via Bank UTR. When you book, payments occur directly from your native bank-authorized UPI app (Google Pay, PhonePe, Paytm, or BHIM) to our official account. We do not store sensitive payment credentials, preventing payment gateway intercept risks.

5. Traveler Rights under DPDP Act 2023

As a Data Principal, you are entitled to the following statutory rights regarding your personal digital data:

• Right to Access: You may request a complete summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction & Updating: You may request immediate correction of inaccurate or outdated contact or emergency details.
• Right to Erasure (Right to be Forgotten): Upon completion of your trek and resolution of any billing or safety audit requirements, you may request permanent deletion of your booking record and inquiry contact details from our active database.
• Right of Grievance Redressal: You have the right to register complaints regarding data processing with our designated Grievance Officer and receive time-bound resolution.
• Right to Nominate: You may designate a representative who shall exercise your privacy rights in the event of unforeseen death or incapacitation.
• Media Opt-Out: If you prefer not to appear in group photos published on social media, notify the trek leader at the base camp briefing, and our media team will respect your privacy.

6. Data Retention Schedule

Personal booking data is retained strictly for the duration required to deliver the booked service, fulfill financial accounting obligations under the Income Tax Act, and maintain wilderness safety logs. Booking records older than the statutory requirement are routinely purged or anonymized.

7. Technical & Storage Safeguards

Our platform operates on secure server infrastructure with SSL/TLS encryption, parameterized database queries to prevent injection attacks, and strict role-based admin authentication. We do not deploy intrusive third-party cross-site advertising trackers or analytics cookies.

8. Designated Grievance Redressal Officer

In adherence to the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, TraWell Amigos has designated a dedicated Grievance Officer: