Privacy Policy

Last updated: 02 July 2026

This Privacy Policy explains how Orchid Land Holidays collects, uses, shares, stores, and protects personal information when you use our website, mobile website, customer dashboard, booking forms, payment flows, support system, and any Android application that we may offer.

For this document, "Orchid Land Holidays", "we", "our", or "us" means Orchid Land Holidays, operating the travel booking platform available at https://orchidlandholidays.com and related app services. "You" or "user" means any person who visits, registers, requests, books, pays for, or uses our services.

1. Information We Collect

We collect information that is necessary to provide travel discovery, booking, payment, account, support, and app services.

1.1 Account and Contact Information

We may collect:

• Name
• Email address
• Phone number
• Password in encrypted form
• Login method, such as email login or Google login
• Profile details such as address or travel preferences, if you provide them

1.2 Google Login Information

If you choose to sign in with Google, we may receive information permitted by Google and approved by you, such as:

• Name
• Email address
• Google account ID
• Profile photo
• Email verification status

We do not receive your Google password.

1.3 Booking and Travel Information

When you search, request, or book travel services, we may collect:

• Travel dates
• Destination and itinerary preferences
• Number of travellers
• Pickup city and pickup address
• Room preference
• Vehicle preference
• Special instructions submitted by you
• Booking reference, booking status, payment status, cancellation status, refund status, and related booking records

If you provide information about other travellers, you confirm that you have permission to share that information with us for booking and service delivery.

1.4 Payment Information

We may collect and store payment-related records such as:

• Payment provider name
• Payment order ID
• Payment transaction ID
• Payment status
• Amount, currency, taxes, fees, discounts, and refund records
• Limited payment metadata needed for verification, reconciliation, fraud prevention, accounting, support, and legal compliance

Payments may be processed by third-party payment gateways such as Razorpay, PhonePe, Cashfree, or other providers enabled by us. We do not store your full card number, CVV, UPI PIN, net banking password, or OTP on our servers.

1.5 Support, Custom Request, and Communication Data

When you contact us or submit forms, we may collect:

• Contact form details
• Support ticket messages
• Custom tour request details
• Refund or cancellation reasons
• Email, SMS, WhatsApp, phone, or app notification communication records
• Attachments or screenshots that you choose to upload

1.6 Device, App, and Technical Information

When you use our website or app, we may collect:

• IP address
• Browser type
• Device type
• Operating system
• App version
• Pages or screens visited
• Date and time of access
• Referring URLs
• Error logs, crash logs, and security logs
• Approximate location inferred from IP address
• Cookies and similar identifiers

For the Android app, we may collect app diagnostics, crash reports, performance data, and device information necessary to operate, secure, debug, and improve the app.

1.7 Location Information

We may use location-related information for travel search, pickup coordination, fraud prevention, and service availability.

If the Android app requests device location permission in the future, it will be used only for disclosed travel-related features such as location-based search, nearby travel options, or pickup assistance. We do not intend to collect background location unless a future feature clearly requires it and we provide separate notice and permission controls.

1.8 Cookies and Similar Technologies

We may use cookies, local storage, session storage, and similar technologies to:

• Keep you logged in
• Remember preferences
• Secure forms and sessions
• Prevent spam and abuse
• Measure website performance
• Improve booking and support workflows

You can control cookies through your browser settings, but some features may not work correctly if cookies are disabled.

1.9 Sensitive Information

We do not intentionally request highly sensitive personal information unless it is necessary for a specific travel-related request. If you voluntarily include medical, accessibility, dietary, identity, or other sensitive details in special instructions or support messages, we will use them only for the purpose for which they were provided, such as arranging suitable travel support.

2. How We Use Information

We use personal information to:

• Create and manage user accounts
• Authenticate users, including Google login
• Show travel services and booking options
• Calculate booking prices, taxes, discounts, and payable amounts
• Process booking requests and confirmed bookings
• Verify payments and prevent payment fraud
• Coordinate with hotels, transport providers, drivers, and other service partners
• Handle cancellations, refunds, wallet credits, and support requests
• Send booking confirmations, payment updates, service alerts, and customer support messages
• Send promotional messages where permitted by law or with appropriate consent
• Secure our website, app, payment flows, and user accounts
• Prevent spam, abuse, fraud, duplicate requests, and unauthorized activity
• Maintain records for accounting, tax, audit, dispute, and legal purposes
• Improve our platform, services, user experience, and app performance
• Comply with applicable laws, regulations, court orders, and lawful requests

3. Legal Basis and Consent

Where applicable, we process personal information based on your consent, the need to provide requested services, legitimate business and security purposes, legal obligations, and other lawful grounds permitted by applicable law.

Under Indian data protection principles, we aim to collect only the information needed for clear purposes, use reasonable security safeguards, allow correction or deletion requests where applicable, and retain information only as long as necessary for business, legal, tax, accounting, fraud prevention, dispute handling, or service purposes.

You may withdraw consent for optional communications or certain optional processing activities. Withdrawal may affect our ability to provide some services.

4. How We Share Information

We may share personal information with:

• Hotels, transport operators, drivers, travel partners, local suppliers, or other service providers needed to fulfil your booking
• Payment gateways and banking partners for payment processing, verification, refunds, reconciliation, and fraud prevention
• Email, SMS, WhatsApp, phone, notification, hosting, cloud, analytics, security, and customer support service providers
• Professional advisers, auditors, accountants, insurers, or legal representatives
• Government authorities, law enforcement, courts, regulators, or other parties where required by law or necessary to protect rights, safety, security, or prevent fraud
• Business successors in case of merger, acquisition, restructuring, or transfer of business, subject to appropriate safeguards

We do not sell your personal information.

5. Payment Gateway and Third-Party Services

Third-party services such as Razorpay, PhonePe, Cashfree, Google login, hosting providers, analytics providers, messaging providers, and map or location services may process information according to their own privacy policies and security practices.

We take reasonable steps to use reputable providers, but their services are governed by their own terms and policies. You should review the privacy policy of any third-party service when interacting with it.

6. Android App Data Practices

When our Android app is released, this Privacy Policy will apply to the app. The app may collect or access data needed for:

• Account login and authentication
• Booking search, booking creation, and booking management
• Payment status and booking confirmation
• Customer support
• Notifications related to bookings, payments, cancellations, refunds, and support
• App security, diagnostics, crash reporting, and performance improvement
• Optional location-based travel features, if enabled by you
• Optional file or image uploads, if you choose to attach files in support or profile features

The app will not request permissions that are unrelated to its travel booking and support functions. If a permission is optional, you may deny it, but the related feature may not work.

7. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including account management, booking and service fulfilment, customer support, payment verification and refund processing, tax records, accounting records, audit records, legal records, fraud prevention, platform security, and dispute resolution.

Some records may need to be retained even after account deletion where required for legal, tax, accounting, fraud prevention, payment dispute, or regulatory reasons. When retention is no longer required, we will delete, anonymize, or securely archive the information as appropriate.

8. Your Choices and Rights

Subject to applicable law and identity verification, you may request to:

• Access your personal information
• Correct inaccurate or incomplete information
• Update profile or contact details
• Delete certain account information
• Withdraw consent for optional marketing communication
• Request information about how your data is processed
• Raise a grievance about privacy or data handling

To exercise these rights, contact us using the details in the Contact section below. We may refuse or limit requests where permitted by law, such as where retention is required for legal, tax, accounting, fraud prevention, security, dispute, or booking record purposes.

9. Account Deletion

You may request account deletion by contacting us at info@orchidlandholidays.com or through any account deletion feature we provide in the website or app.

After verifying your request, we will delete or deactivate account information where legally and operationally possible. Some booking, payment, tax, refund, support, fraud prevention, and legal records may be retained as required or permitted by law.

Before Android app release, we should provide a clear in-app or web-based account deletion path that is consistent with Google Play requirements.

10. Security

We use reasonable technical and organizational safeguards to protect personal information, including secure password hashing, access controls, HTTPS where applicable, backend payment verification, form security controls, rate limiting, audit records, and restricted administrative access.

No internet or storage system is completely secure. You are responsible for keeping your password, OTPs, device, and account access secure. Do not share payment credentials, OTPs, passwords, or sensitive login information with anyone.

11. Children

Our platform is intended for adults who can make travel bookings. We do not knowingly create accounts for children or collect personal information from children without appropriate adult involvement.

Children may be included as travellers in bookings made by parents, guardians, or authorized adults. If you believe a child has provided personal information without proper authorization, contact us.

12. International Processing and Storage

Our service providers, cloud systems, payment partners, communication providers, or technical vendors may process or store information in India or other countries. Where information is transferred or processed outside India, we take reasonable steps to use appropriate safeguards and service providers that support secure handling.

13. Marketing Communications

We may send offers, travel updates, coupons, or promotional communication where permitted by law or with appropriate consent. You can opt out of promotional messages using available unsubscribe methods or by contacting us.

Even if you opt out of marketing, we may still send service-related messages such as booking confirmations, payment updates, security notices, cancellation updates, refund updates, support replies, and policy changes.

14. Links to Other Websites

Our platform may contain links to third-party websites, payment pages, maps, social media pages, app stores, hotel sites, or supplier pages. We are not responsible for the privacy practices or content of third-party websites or services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website or app with a revised "Last updated" date. If changes are material, we may provide additional notice where appropriate.

16. Contact and Privacy Grievance