Privacy Policy

Madmaheshwar ("we", "us", "our") operates the website madmaheshwar.com and related booking, blog and enquiry services (together, the "Site"). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have, in line with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

By using the Site or submitting a booking, contact, or newsletter form, you agree to the practices described in this Policy. If you do not agree, please do not use the Site.

1. Information We Collect

a) Information you give us directly

• Name, phone number, email address and postal address (booking, contact and enquiry forms)
• Trip details such as travel dates, group size, and preferred packages
• Age, health or fitness declarations where relevant to trek safety (e.g. Kedarnath, Madmaheshwar, high-altitude treks)
• Government ID details where required for permits, registration or hotel check-in
• Payment details, processed directly by our third-party payment gateway (we do not store full card or UPI credentials on our own servers)
• Messages, reviews, comments or testimonials you submit

b) Information collected automatically

• IP address, browser type, device information and pages visited
• Cookies and similar tracking technologies (see Section 4)
• Analytics data (e.g. Google Analytics) about how visitors use the Site

2. How We Use Your Information

• To process bookings, enquiries and payments for trek and tour packages
• To communicate trip confirmations, itinerary updates, and safety information
• To respond to questions submitted through contact forms or WhatsApp/email
• To improve the Site, our content and our services
• To send promotional updates or newsletters, where you have opted in
• To comply with legal, permit, insurance or regulatory requirements related to Himalayan trekking and pilgrimage tourism

3. Legal Basis and Consent

We collect and process personal data on the basis of your consent (for example, when you submit a form or opt into a newsletter) and, where applicable, to perform a booking contract with you. You may withdraw consent at any time by contacting us using the details in Section 11, though this may affect our ability to process an existing booking.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to keep the Site functional, remember your preferences, and understand how visitors use our pages through analytics tools. You can control or disable cookies through your browser settings; disabling some cookies may affect Site functionality.

5. How We Share Information

We do not sell your personal data. We may share information with:

• Local trek operators, guides, porters, hotels and camp partners needed to fulfil your booking
• Payment gateway and banking partners to process payments securely
• Government, forest, or permit authorities where required for trek permits or registration (e.g. Char Dham / Panch Kedar registration)
• IT service providers who host or maintain the Site, under confidentiality obligations
• Authorities, where required by law, court order, or to protect safety and legal rights

6. Data Storage and Security

We use reasonable technical and organisational safeguards to protect personal data against unauthorised access, loss or misuse. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable tax, accounting, permit or legal obligations, after which it is securely deleted or anonymised.

8. Your Rights

Subject to applicable law, including the DPDP Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data, subject to legal or contractual retention needs
• Withdraw consent for marketing communications at any time
• Register a grievance regarding how your data is handled

To exercise these rights, contact us using the details in Section 11.

9. Children's Privacy

The Site is intended for use by adults booking travel on behalf of themselves and their families. Bookings involving minors must be made by a parent or legal guardian, and we do not knowingly collect personal data directly from children without such involvement.

10. Third-Party Links

Our Site may link to third-party websites (e.g. payment gateways, social media, or partner sites). We are not responsible for the privacy practices of these external sites, and we encourage you to review their own privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will indicate when the Policy was last revised. Continued use of the Site after changes means you accept the updated Policy.