Triphoc (the “Company” or “we”) is committed to protecting the privacy of our users (“you”). This Privacy Policy is provided in compliance with India’s Information Technology Act 2000 and the SPDI Rules (2011). It explains what personal and sensitive personal data we collect, how we use and store it, your rights, and how to contact us regarding privacy.

Data We Collect: We collect personal information you provide when booking or planning travel. This includes your name, address, email, and telephone number. We also collect sensitive personal data necessary for travel and visa services: for example, passport and visa details, government-issued ID numbers, health or dietary information, and financial/payment information. We may also collect travel-related information (itinerary details, frequent-flier information, hotel and transportation bookings, insurance preferences, etc.) and device or usage data (IP address, browser type, cookies for site functionality, time zones, etc.). We do not collect any personal data beyond what is reasonably necessary for the services you request.

• Personal Data: Name, contact details (email, address, phone), date of birth, etc.
• Sensitive Personal Data: Passport and other government ID details; visa documents; financial/payment information; health or disability-related information relevant to travel; biometric or photograph data if submitted for visas.

Use of Data: We use your personal and sensitive data only for the purposes for which you provide it (with your consent). For example, we use your data to confirm and manage travel bookings, plan and organize itineraries, assist with visa applications, process payments and refunds, and communicate with you about your travel arrangements (e.g. confirmations, reminders, or any changes). We may also use your information to improve our services (e.g. by analyzing booking patterns internally), to comply with legal requirements (such as immigration or tax laws), and to protect your account security. In all cases, data is used strictly for legitimate travel-related purposes. We will not use your data for purposes beyond those you have consented to, and we will not sell or disclose your personal data to unrelated third parties.

• Lawful Purpose & Retention: In line with SPDI Rules, Triphoc uses collected data only for the lawful purpose for which it was obtained. We do not retain your sensitive personal information longer than required to fulfill the purpose of collection. Once your booking, travel or visa services are complete, we will delete or anonymize your data in accordance with our data retention policy and any applicable legal obligations.

Data Storage and Security: Your data is stored on secure servers with appropriate safeguards. We implement reasonable security practices and procedures, including encryption (SSL) for data in transit, access controls, and regular security audit. Access to personal information is restricted to authorized Triphoc personnel and contractors on a need-to-know basis. We use firewalls, intrusion detection, and other technical and organizational measures to protect data from unauthorized access, alteration or disclosure. Despite these measures, no internet-based system is 100% secure, so please contact us promptly if you suspect any security breach.

Your Rights: You have rights under Indian law regarding your data. You may (a) access the personal data we hold about you, (b) correct or update any inaccuracies, and (c) withdraw your consent at any time for future use of your data. To exercise these rights, please contact our Data Officer (below) in writing. Upon request, we will provide a copy of your data and correct any inaccuracies as soon as feasible. If you withdraw consent, we may no longer be able to provide some services and may have to cancel or suspend those services.

• You may request deletion of your data or cessation of its use. (Under SPDI Rules, if you do so we have the option to discontinue the related service.)
• You may object to any data processing for which you previously gave consent.
• For privacy complaints or grievances, you have the right to contact our designated Grievance Officer (see below) for redress.

Third-Party Services: We do not share your personal data with any third-party advertising or analytics companies, nor do we use any external ad networks. We use only essential cookies for site functionality (e.g. to remember your preferences), but no third-party tracking or analytics cookies are employed. We also do not rely on any third-party payment processors; all payments are handled through our own secure systems, and payment data is not stored by any outside service. (Any disclosure to external entities is only as required for your travel: e.g. sharing details with airlines, hotels or consulates to secure your bookings or visas, and only with your consent or as required by law.)

Contact Information: If you have questions about privacy or wish to exercise your data rights, contact our Grievance Officer: Name: Vikash Kumar Yadav, Triphoc Holiday & Adventures Pvt. Ltd.; Email: triphoc@gmail.com; Address: Triphoc Holiday & Adventures Pvt. Ltd., office no 503, Mansarover Plaza, 5th Floor, B Sector 7, Madhyam Marg, Mansarovar, Jaipur, Rajasthan 302020; Phone: +91-7976945344. As required by the SPDI Rules, our Grievance Officer is tasked with addressing privacy grievances and will respond to any complaint within one month.

Changes to This Policy: We may update this Privacy Policy from time to time. We will post any changes on our website with an updated date. We encourage you to review the policy periodically. Continued use of Triphoc.com after changes implies acceptance of the revised policy.