Privacy notice

Who we are

Travel Krafterz is a travel and visa business run by Dr Megha Sharma as proprietor, with offices in Mumbai, Pune, Delhi and Chandigarh. We decide why and how your personal data is used when you ask us about a trip, a visa, a passport or an event. Under India's Digital Personal Data Protection Act, 2023 that makes us the Data Fiduciary, and you are the Data Principal.

For anything in this notice, write to Dr Megha Sharma at megha@travelkrafterz.com. This is also the address for complaints about how we handle your data.

What this website collects

Very little. The site has no forms, no accounts, no analytics and no advertising cookies, so we do not show a cookie banner. Our hosting company, Hostinger, keeps ordinary server logs (your IP address, the time, the page you opened and your browser type) so the site stays secure and working.

The typefaces are served from this site, so opening a page does not send anything to Google or any other font service.

What we collect when you write to us or book with us

You reach us by email, and we also take details over the phone or in person at an office. Depending on what you ask for, we may hold:

• your name, email address, phone number and city, plus your travel dates, destination and rough budget;
• the names of everyone travelling, their dates of birth and, where it matters for the plan, whether any of them are older travellers;
• for a visa or passport file: passport details and copies, photographs, bank statements, income tax returns, employment or business papers and your earlier travel history;
• for an event: the headcount, dates and city, and attendee names if you give them to us;
• booking and payment references, so we can match what you paid to what we arranged.

We ask only for what the job needs. If you send something extra by mistake, tell us and we will delete it.

Why we use it

We use your data to answer you, to plan and book your trip, to prepare and file your visa or passport application, to place insurance or forex if you ask for it, and to meet legal and accounting duties. We do not use it for advertising and we do not sell it.

We rely on your consent, which you give by sending us the information for that purpose. You can take that consent back at any time. In a few cases the Act lets us use data without consent, for example to meet a legal obligation, and we keep to those uses.

Who else sees it

Only the people who need it to do what you asked:

• our own lawyers and chartered accountants, who read visa files before they are filed;
• consulates, embassies, visa application centres and passport offices, for the application itself;
• airlines, hotels, cruise lines, venues and transport operators, for your bookings;
• insurers we place travel cover with (Tata AIG, ICICI Lombard, IFFCO-Tokio and Reliance General) and EbixCash Global Services for forex, when you ask for those;
• Hostinger, which hosts this website.

Each of them handles your data for its own purpose or on our instructions, under its own rules or a contract with us. A court, regulator or government body may also require us to hand data over, and we will do so only where the law demands it.

Data that goes outside India

If your visa or trip is abroad, your documents go to the consulate, hotel, airline or operator in that country, because the arrangement cannot happen otherwise. Nothing leaves India for any other reason. We follow the Government of India's list of restricted countries for such transfers.

How long we keep it

• An enquiry that never turns into a booking: 12 months after our last message, then deleted.
• Passport, bank, tax and employment documents for a visa or passport file: deleted within 90 days after the application is decided, unless you ask us to keep them or the law requires it.
• Bookings, invoices and payment records: for as long as tax and company law require, then deleted.

If you withdraw consent or ask us to erase your data earlier, we do it unless a law says we must keep a record.

How we protect it

Only the people working on your file can open it. This website is served over HTTPS. We will never ask for your card PIN, a one-time password or your online banking login, so do not send them to anyone claiming to be us. If a personal data breach affects you, we will tell you and report it to the Data Protection Board of India as the law requires.

Children

The Act treats anyone under 18 as a child. A passport copy or visa form for a child counts as the child's personal data, so we ask a parent or legal guardian to send it and to confirm in writing that they agree. We do not track or target children, and this website collects nothing from visitors at all.

Your rights

You can ask us for a summary of the personal data we hold about you and what we do with it. You can ask us to correct or update it, or to erase it. You can withdraw your consent, and doing so is as easy as giving it: send us an email saying so. You can name another person to exercise these rights for you if you die or cannot act for yourself. And you can raise a grievance with us.

Write to megha@travelkrafterz.com. We reply within 30 days. If we have not settled it, you can complain to the Data Protection Board of India.

Changes to this notice

If we change how we handle data, we will update this page and its date.