2. Definitions

For the purpose of this Policy:

• • "Personal Data" means any information relating to an identified or identifiable individual
• • "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion
• • "Data Subject" refers to the individual whose Personal Data is processed
• • "Controller" refers to TripTravel Go, which determines the purpose and means of processing Personal Data
• • "Processor" refers to any third party that processes Personal Data on behalf of TripTravel Go

3. Categories of Personal Data Processed

TripTravel Go may process the following categories of Personal Data:

• • Identity data (name, gender, date of birth)
• • Contact data (email address, phone number, postal address)
• • Travel data (booking details, itinerary, preferences)
• • Identification documents (passport or visa details, where required)
• • Financial data (payment status, transaction references; card details are processed by secure payment gateways)
• • Technical data (IP address, device information, browser type)

4. Lawful Basis for Processing

TripTravel Go processes Personal Data on one or more of the following legal bases:

• • Performance of a contract (booking and travel services)
• • Compliance with legal obligations
• • Legitimate business interests
• • User consent (marketing communications, cookies, promotions)

5. Methods of Data Processing

Personal Data may be processed through:

• • Automated systems (Website, App, CRM tools)
• • Manual processing by authorized personnel
• • Secure third-party platforms for payments, analytics, and communications

All processing is conducted in a lawful, fair, and transparent manner.

6. Data Sharing & Disclosure

TripTravel Go may share Personal Data with:

• • Airlines, hotels, travel agents, tour operators, and transport providers
• • Payment gateway providers and financial institutions
• • IT service providers, hosting partners, and analytics vendors
• • Legal, regulatory, or government authorities when required by law

All third parties are contractually obligated to process data securely and only for authorized purposes.

7. International Data Transfers

Personal Data may be transferred to and processed in countries outside your country of residence, including India, where TripTravel Go operates.

Where such transfers occur, TripTravel Go ensures appropriate safeguards are implemented in accordance with applicable data protection laws.

8. Data Retention

Personal Data is retained only for as long as necessary to:

• • Fulfil contractual obligations
• • Comply with legal and regulatory requirements
• • Resolve disputes and prevent fraud

Data may be retained after account closure where legally required.

9. Data Security Measures

TripTravel Go implements reasonable technical and organizational security measures, including:

• • Secure servers and encrypted communications
• • Restricted access to Personal Data
• • Regular monitoring and security updates

Despite best efforts, no data transmission over the internet can be guaranteed to be completely secure.

10. Data Subject Rights

Depending on applicable laws, Data Subjects may have the right to:

• • Access their Personal Data
• • Correct or update inaccurate data
• • Request deletion or restriction of processing
• • Object to certain processing activities
• • Withdraw consent where processing is based on consent

Requests may be submitted to support@triptravelgo.com.

11. Obligations of Users & Partners

Users and partners agree to:

• • Provide accurate and lawful Personal Data
• • Obtain required consents before sharing data
• • Use Personal Data only for authorized purposes

TripTravel Go reserves the right to suspend services in case of misuse or breach.

12. Breach Notification

In the event of a personal data breach that poses a risk to users, TripTravel Go will take reasonable steps to:

• • Investigate and mitigate the breach
• • Notify affected users and authorities where required by law

13. Policy Updates

TripTravel Go may update this Data Processing Policy periodically. Changes will be effective upon posting on the Website or App.

Continued use of services constitutes acceptance of the updated Policy.