Privacy Policy

We use your personal data only for lawful purposes and to the extent necessary. Specifically:

• To process bookings, payments, and issue confirmations and itineraries.
• To verify your identity and eligibility for certain experiences.
• To communicate with you about your bookings, account, and support requests.
• To send travel updates, curated offers, newsletters, and sustainable travel stories (you may opt out at any time).
• To improve our platform, troubleshoot technical issues, and develop new features.
• To conduct analytics and understand user behaviour for service improvement.
• To comply with legal obligations including tax records, GST filings, and regulatory requirements.
• To investigate and resolve disputes, enforce our Terms and Conditions, or respond to legal process.
• To onboard, verify, and manage host partners listing experiences on our Platform.

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:

• Consent — where you have explicitly agreed to processing (e.g., marketing emails, location access).
• Contractual necessity — to fulfil a booking or service agreement with you.
• Legal obligation — where we are required by law to retain or process your data (e.g., GST records for 7 years).
• Legitimate interests — for platform security, fraud prevention, and analytics, where such interests do not override your rights.

You have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Account data is retained for the duration of your account and for 3 years after account deletion.
• Booking and transaction records are retained for 7 years as required under GST and accounting regulations.
• Marketing preferences and opt-out records are retained for 3 years.
• Grievance and complaint records are retained for 2 years from resolution.

After the applicable retention period, your data will be securely deleted or anonymised.

Under the DPDPA 2023 and SPDI Rules 2011, you have the following rights:

• Right to Access — Request a summary of personal data held by us and how it is processed.
• Right to Correction — Request correction of inaccurate or incomplete personal data.
• Right to Erasure — Request deletion of your personal data, subject to legal retention requirements.
• Right to Grievance Redressal — Raise a grievance with our Grievance Officer (details below).
• Right to Nominate — Nominate another individual to exercise your rights in the event of death or incapacity.
• Right to Withdraw Consent — Withdraw consent previously given for specific processing activities.

To exercise any of these rights, please write to us at Connect@trekkingmiles.com. We will respond within 30 days. For complex requests, we may require identity verification before processing.

Our Platform uses cookies and similar technologies to enhance your experience:

• Essential Cookies — Required for the Platform to function (login sessions, booking cart).
• Analytics Cookies — Google Analytics tracks aggregated usage data to help us improve the Platform.
• Marketing Cookies — Meta Pixel enables us to measure the effectiveness of our advertising campaigns.
• Preference Cookies — Remember your language, location, and display preferences.

You may manage cookie preferences through your browser settings. A cookie consent banner is presented to all users on first visit.

Trekking Miles primarily operates within India and processes data on servers located in India. Some third-party service providers (such as Google Analytics and Meta) may process data outside India. Where such transfers occur, we ensure appropriate safeguards are in place in compliance with applicable Indian data protection law.