Client Data Security & Privacy Policy

GTI Travels Private Limited: Client Data Security & Privacy Policy

1. Information We Collect

When customers submit enquiries or request travel services, we may collect the following information:

• Customer name and contact details.
• Email address and mobile number.
• Country and address, where necessary.
• Travel dates and booking preferences.
• Safari, hotel and tour package details.
• Guest details required for reservations.
• Identity information where required by booking authorities.
• Payment references and transaction status.
• Customer messages and enquiry records.
• IP address and relevant technical information.

2. Purpose of Collecting Information

We use customer information for legitimate travel booking and customer service activities, including:

• Processing safari and hotel booking requests.
• Responding to customer enquiries.
• Providing booking confirmations and updates.
• Coordinating with relevant service providers.
• Processing payments and refunds.
• Maintaining booking and accounting records.
• Preventing fraudulent or unauthorized activities.
• Complying with applicable legal requirements.

3. Customer Data Storage

Customer information submitted through our website may be stored in our booking and enquiry management systems. We aim to maintain appropriate safeguards to protect these records from unauthorized access, misuse, alteration and disclosure.

Database access should be restricted to authorized personnel and necessary technical administrators.

4. Client Data Security Measures

We seek to protect customer information through appropriate technical and organizational controls, including:

• HTTPS protection for website communications.
• Restricted administrative access.
• Secure authentication and password management.
• Database access controls.
• Regular software and security updates.
• Controlled database backups.
• Protection against unauthorized database queries.
• Monitoring and investigation of suspicious activity.

Although reasonable security measures are intended to reduce risk, no internet-based system can guarantee complete security.

5. Access to Customer Information

Customer information is intended to be accessible only to authorized GTI Travels Pvt. Ltd. personnel and service providers who require it to perform legitimate business activities.

Access should be limited according to job responsibilities, and customer information must not be disclosed for unauthorized purposes.

6. Third-Party Data Sharing

Customer information may be shared where necessary with hotels, safari booking providers, payment processors, hosting providers and other parties involved in delivering requested travel services.

We do not sell customer personal information to advertisers or data brokers. Any external processing should be limited to an appropriate business or legal purpose and supported by suitable safeguards.

7. Payment Information Security

Online payments may be processed through authorized third-party payment gateways. Complete card numbers, CVV codes and banking passwords should not be collected or stored on our own website servers.

Transaction references, amounts, payment status and booking-related records may be retained for customer service, accounting and reconciliation.

8. Data Retention Policy

Customer information is retained only for as long as reasonably necessary to complete bookings, provide support, handle disputes, maintain financial records and satisfy applicable legal requirements.

Information that is no longer required should be securely deleted or anonymized, unless continued retention is legally necessary.

9. Customer Data Deletion

Customers may request correction or deletion of their personal information by contacting: contact@kaziranganationalpark-india.com .

Requests will be reviewed, identity may be verified, and action will be taken in accordance with applicable law. Certain booking and financial records may need to be retained for legal reasons.

10. Cookies and Website Information

Our website may use cookies and similar technologies for essential functionality, performance monitoring and improving website experience. Appropriate notices and choices will be provided where required.

11. Data Breach Management

If a security incident affects customer information, we will assess the incident, take appropriate containment and remediation measures, and provide notifications to affected persons or authorities where required by applicable law.

12. Customer Privacy Rights

Subject to applicable law, customers may request information about the processing of their personal data, seek correction or erasure, withdraw consent where applicable, and raise privacy-related grievances.

13. Independent Travel Agency Disclosure

GTI Travels Pvt. Ltd. operates this website as an independent travel agency. It is not an official Government, Assam Forest Department or National Park authority website.

Safari confirmation, permits and zone allocation are subject to availability and applicable Forest Department regulations.

14. Changes to This Policy

We may revise this policy to reflect changes in our services, security practices, technology or applicable legal requirements. Updated versions will be published on this website.

15. Contact Information