Lunes Travel Services (“we,” “us,” “our”) operates the website www.lunestravel.com. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or book a tour, cab or hotel stay with us, in accordance with India’s Digital Personal Data Protection Act, 2023 (DPDPA).

1.1 Information We Collect

• Contact details: name, email address, phone number, WhatsApp number
• Booking details: travel dates, number of travellers, hotel or pickup location, special requests
• Account details: login credentials (stored as a hashed password) if you register on the site
• Payment information: processed via Razorpay (UPI, cards and net banking), bank transfer, UPI — we do not store your full card details on our servers. For manual bank or UPI payments we may store a UTR reference and an optional receipt file you upload
• Technical data: IP address, browser type, and pages visited, collected automatically via cookies and session data needed to keep you logged in and complete checkout

1.2 How We Use Your Information

We use your data to:

• Confirm and manage your tour, cab and hotel bookings
• Communicate booking updates, itinerary changes, or guide/driver details
• Respond to inquiries and provide customer support
• Issue invoices, vouchers and transactional emails
• Improve our website and services
• Send promotional offers only if you have opted in (you may unsubscribe anytime)

1.3 Legal Basis and Consent

We collect and process your personal data with your consent, given when you submit a booking, registration or inquiry form, and as needed to perform the contract you enter into with us. You may withdraw consent at any time by contacting us at info@lunestravel.com, though this may affect our ability to process an existing booking.

1.4 Data Sharing

We share your information only with:

• Our local guides, drivers, and hotel/transport partners, strictly to fulfil your booking
• Payment gateway providers (including Razorpay, where enabled) to process transactions
• Government authorities, where required by law (for example, monument entry permits)

We do not sell or rent your personal data to third parties.

1.5 Data Retention

We retain your personal data for as long as necessary to fulfil your booking and for 3 years afterward for accounting and legal record-keeping, after which it is securely deleted, unless a longer period is required by law.

1.6 Your Rights

Under the DPDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (subject to legal retention requirements)
• Withdraw consent at any time
• File a grievance regarding how your data is handled

To exercise any of these rights, contact our Grievance Officer (details below and on the Grievance Details page). You can also update your profile details when logged in.

1.7 Data Security

We use reasonable technical and organisational measures (secure hosting, restricted access, CSRF-protected forms, hashed passwords, and encrypted payment processing via Razorpay) to protect your personal data from unauthorised access, loss, or misuse.

1.8 Cookies

Our website uses cookies to improve your browsing experience. See our Cookie Policy for details.

1.9 Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

1.10 Contact Us

For any privacy-related questions, contact:

Padam Chaudhary
Lunes Travel Services
Office Address: 42/SD/8-11A, Sharda Kunj, Agra, Uttar Pradesh 282001, India
Email: info@lunestravel.com
Phone: +919690297941