Sarang Travels ("we", "us", "our") is committed to protecting your personal information. This policy outlines how we collect, process, and safeguard the data you provide on www.sarangtravels.com in order to deliver our customized travel services.

1. Information We Collect

To provide you with personalized travel itineraries and secure login access, we collect:

• Identity & Contact Data: Full name, email address, and mobile number.
• Authentication Data: Phone numbers used for OTP (One Time Password) verification to ensure secure account creation.
• Travel Preferences: Booking requests, travel dates, passenger counts, and specific itinerary requirements.

2. Financial & Payment Information

We do not store your credit/debit card numbers, UPI IDs, or bank passwords on our servers. All online advance payments and balance settlements are processed through our highly secure, PCI-DSS compliant payment gateway partner, Razorpay. Your financial data is handled directly by Razorpay according to their strict privacy standards.

3. How We Use Your Information

We strictly use your information to operate our business and fulfill your travel requests:

• To allow our travel executives to contact you to negotiate and finalize custom trip pricing.
• To send automated booking confirmations, PDF invoices, and payment deadline reminders.
• To authenticate your identity securely via Google Firebase (for mobile OTPs).

4. Sharing Data with Third Parties

As a travel agency, we must share specific operational data with trusted third parties to make your trip happen. We only share what is absolutely necessary:

• Service Providers: Your name and contact details will be shared with the specific hotels, cab drivers, and local tour guides assigned to your confirmed itinerary.
• Technology Partners: We use Google Firebase to deliver OTP SMS messages, and Razorpay to process your payments securely.
• Legal Obligations: We will disclose data if strictly required by Indian law enforcement or tax authorities.

5. Data Security

We employ modern security protocols, including database encryption and secure password hashing (Bcrypt), to protect your personal account details from unauthorized access.

6. Your Rights & Account Deletion

You have the right to request a copy of your data or ask us to delete your account. However, please note that we are legally required to retain transaction histories and invoices for confirmed bookings for tax and accounting purposes. To request an account review or deletion, please raise a ticket in your "My Tours" dashboard or contact our support team.