Privacy Policy
Effective date: 18 June 2026
This Privacy Policy explains how Ivory Arc Travels (“Ivory Arc”, “we”, “us” or “our”), a registered Indian tour operator (GST 09AYIPT0745R2ZH), collects, uses, discloses and safeguards personal information when you visit our website, request an estimate, or book a journey. We serve travellers worldwide; by using our website or services you acknowledge this Policy and, to the extent permitted by applicable law, consent to the practices described here. If you do not agree, please do not use our website or services.
1. Information we collect
Information you provide. When you enquire, request an estimate or book, you may give us your name, email, phone number, country of residence and nationality, passport details where required for bookings or nationality-based monument entry, the size and composition of your party (including the ages of any children), travel dates, interests and preferences, dietary or accessibility needs, and any other details you choose to share with us or with IVY.
Payment information. Payments are processed by our payment provider, Razorpay. Card and banking details are collected and processed by Razorpay under its own terms and security standards; we do not store complete card numbers on our systems.
Information collected automatically. Like most websites, we and our service providers may collect device, browser, approximate location, and usage data through cookies and similar technologies and through standard server logs.
2. How we use information
- To respond to enquiries and prepare estimates, itineraries and quotations.
- To arrange, confirm, deliver and support your journey, including coordinating with hotels, transport and guides.
- To process payments, issue invoices, and meet tax, accounting and regulatory obligations.
- To communicate with you about your enquiry, booking or journey.
- To operate, secure, maintain and improve our website and services, and to prevent fraud and misuse.
- With your consent where required, to send you marketing about journeys and offers (you may opt out at any time).
3. Legal bases
Where applicable law (including, for some international travellers, data-protection laws such as the EU/UK GDPR) requires a legal basis, we rely as relevant on: performance of a contract with you or to take steps at your request; your consent; compliance with legal obligations; and our legitimate interests in operating and improving our business, where these are not overridden by your rights.
4. How we share information
We share personal information only as needed to provide our services and as permitted by law:
- With travel suppliers — hotels, transport operators, guides, parks and experience providers — to deliver your journey. These suppliers process your information under their own terms.
- With service providers acting on our behalf, such as our payment processor (Razorpay), hosting and infrastructure providers, and analytics and communication tools.
- With professional advisers, insurers, auditors and authorities where required by law, regulation or legal process, or to establish, exercise or defend legal claims.
- In connection with a merger, acquisition, financing or sale of assets, in which case information may be transferred as a business asset.
We do not sell your personal information.
5. International transfers
Ivory Arc operates from India, and your information will be processed and stored in India and in any other country where our suppliers must deliver your journey. Data-protection laws in these countries may differ from those in your home country. Where you provide information from outside India, you understand and, to the extent permitted by law, consent to its transfer to and processing in India and such other countries for the purposes described above.
6. Retention
We retain personal information for as long as needed to provide our services and to satisfy legal, tax, accounting and dispute-resolution requirements, after which we delete or anonymise it.
7. Security
We use reasonable technical and organisational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security; you share information with us at your own risk and are responsible for keeping any credentials confidential.
8. Cookies and analytics
We use cookies and similar technologies to operate the site, remember preferences and understand usage. You can control cookies through your browser settings; disabling some cookies may affect site functionality.
9. Your rights
Subject to applicable law, you may request access to, correction or deletion of your personal information, object to or restrict certain processing, withdraw consent, or request portability. To make a request, contact us using the details below; we may need to verify your identity, and we will respond as required by law. Some information may be retained where we have a legal basis or obligation to do so.
10. Children
Our website and services are intended for adults. Bookings that include minors are made and managed by a responsible adult who provides the relevant details. We do not knowingly collect information directly from children.
11. Third-party links
Our website and communications may link to third-party sites and services that we do not control. This Policy does not apply to them, and we are not responsible for their content or privacy practices.
12. Changes to this Policy
We may update this Policy from time to time. The “Effective date” above reflects the latest version, and your continued use of our website or services after an update constitutes acceptance of the revised Policy.
13. Contact & grievances
For any privacy request or complaint, contact us at hello@ivoryarctravels.com or via our contact page. Grievance Officer (as applicable under Indian law): [name], reachable at the same address.