Privacy Policy

• Account details: name, email, mobile number and a securely hashed password.
• Trip details: destination, dates, number of travellers, budget, notes and any documents needed for your booking.
• Payment status and references from PayU or the office. We do not receive or store card, UPI PIN or bank login details.
• Referral information: who referred you, and the status of bookings made by people you referred (shown to you by first name only).
• Messages you send us through the website, email or WhatsApp.

• To prepare quotations, make and manage your bookings, and send confirmations, invoices and travel documents.
• To run HDYU Rewards and the referral programme.
• To contact you about your trips and answer your questions.
• To keep the website secure and meet legal and tax obligations.

• Hotels, transport companies and other travel providers, only the details needed to deliver your booking.
• PayU, to process online payments.
• Service providers that run the website for us: hosting (Cloudflare), database (MongoDB Atlas) and email delivery (Brevo).
• Authorities, when the law requires it.

We keep booking and invoice records for as long as tax and accounting laws require. You can ask us to close your account; we will delete or anonymise information we no longer need to keep.

You can see your bookings and rewards in your dashboard at any time, and ask us to correct or delete your information by contacting us.

We use only the cookies needed to keep you signed in and to make the website work. We do not use advertising cookies.