Privacy Policy

Last Updated: February 2026

1. Introduction

Welcome to TravelToons (“we,” “our,” or “us”). We are committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025.

Data Fiduciary Details:

• Company Name: TravelToons
• Website: www.traveltoons.in
• Contact Email: [email protected]
• Phone: 96299 16663
• Address: No.25, RMS Nagar Kamarajar Nagar Extention, Avaniyapuram Bypass Rd, Madurai, Tamil Nadu 625012
• Grievance Officer: SUJATHA JP

2. What Personal Data We Collect

We collect the following categories of personal data when you use our services:

Information You Provide:

• Identity Information: Name, date of birth, gender, ID proof details (passport, Aadhaar, etc.)
• Contact Information: Email address, phone number, postal address
• Travel Information: Travel preferences, destinations, itinerary details, booking history
• Payment Information: Payment card details (processed securely through payment gateways), billing address
• Account Information: Username, password (encrypted), profile preferences

Information Collected Automatically:

• Device & Technical Data: IP address, browser type, device identifiers, operating system
• Usage Data: Pages visited, time spent, click patterns, search queries
• Location Data: Geographic location (with your consent)
• Cookies & Tracking: Cookie identifiers, advertising IDs, analytics data

3. Why We Collect Your Data (Purpose & Legal Basis)

We process your personal data for the following purposes with your consent or as necessary to fulfill our contractual obligations:

4. How We Use Your Data

Your personal data is used to:

• Facilitate travel bookings with airlines, hotels, tour operators, and other service providers
• Process payments securely through authorized payment gateways
• Communicate booking confirmations, updates, and travel-related information
• Provide customer support and respond to your inquiries
• Send marketing communications (only with your consent)
• Analyze website usage to improve our services
• Prevent fraud, ensure security, and comply with legal obligations

5. Who We Share Your Data With

We may share your personal data with the following third parties:

Service Providers:

• Travel Partners: Airlines, hotels, tour operators, car rental companies, insurance providers
• Payment Processors: Banks, payment gateways, financial institutions
• Technology Partners: Hosting providers, analytics platforms, CRM systems
• Communication Tools: Email service providers, SMS gateways

Legal Requirements:

• Government authorities, law enforcement, or regulatory bodies when required by law
• Courts or tribunals pursuant to legal proceedings

Cross-Border Transfers: When you book international travel, your data may be transferred to service providers outside India. We ensure appropriate safeguards are in place for such transfers.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website.

Types of Cookies We Use:

Strictly Necessary Cookies: Essential for website functionality (login, booking process, security)

• These cannot be disabled as they are required for the website to function

Analytics Cookies: Help us understand how visitors use our website (Google Analytics, etc.)

• Requires your consent

Marketing Cookies: Used for personalized advertising and retargeting

• Requires your consent

Preference Cookies: Remember your settings and preferences

• Requires your consent

Managing Your Cookie Preferences

When you first visit our website, you will see a cookie banner with options to:

• Accept All: Accept all cookies
• Reject Non-Essential: Accept only strictly necessary cookies
• Customize: Choose specific cookie categories

You can change your cookie preferences anytime by clicking the “Cookie Settings” link in our website footer or through your browser settings.

Important: We do not use cookies to track or profile children’s behavior for advertising purposes.

7. Your Rights Under DPDPA

As a user, you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you

Right to Correction

Request correction of inaccurate or incomplete personal data

Right to Erasure

Request deletion of your personal data when it is no longer necessary or when you withdraw consent

Right to Withdraw Consent

Withdraw your consent for specific processing activities at any time

Right to Grievance Redressal

Lodge a complaint with our Grievance Officer or the Data Protection Board of India

How to Exercise Your Rights:

• Email: [email protected]
• Phone: 96299 16663
• Account Dashboard: Manage your data through your account settings
• Response Time: We will respond to your requests within 15 days

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• Booking & Transaction Data: Retained for 7 years for accounting and tax purposes
• Marketing Consent Data: Until you withdraw consent
• Account Data: Until you request account deletion
• Cookies: As per individual cookie settings and browser preferences

9. Children’s Privacy

We do not knowingly collect personal data from children under 18 years of age without verifiable parental consent. If you are a parent or guardian and believe your child has provided us with personal data without consent, please contact us immediately.

For Children’s Data:

• We do not engage in behavioral tracking or targeted advertising based on children’s online activities
• We implement age-appropriate design and stricter consent mechanisms

10. Security Measures

We implement reasonable security safeguards to protect your personal data:

• Encryption: Data transmission using SSL/TLS encryption
• Access Controls: Role-based access and authentication
• Security Audits: Regular security assessments and vulnerability testing
• Payment Security: PCI-DSS compliant payment processing
• Data Breach Protocol: Prompt notification to the Data Protection Board and affected users in case of qualifying data breaches

11. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights, we will:

• Notify the Data Protection Board of India as required by the DPDP Rules, 2025
• Inform affected individuals promptly with details of the breach and remedial measures

12. GDPR Compliance (For EU Users)

If you are located in the European Union or European Economic Area, your personal data is also protected under the General Data Protection Regulation (GDPR).

Additional Rights for EU Users:

• Right to data portability
• Right to object to processing
• Right to restriction of processing
• Right to lodge a complaint with your local supervisory authority

Legal Basis for Processing (EU Users):

• Consent (where you have provided it)
• Contract performance (to fulfill your booking)
• Legitimate interests (fraud prevention, security)

International Transfers:

Data transfers from the EU to India are protected by Standard Contractual Clauses (SCCs) or other appropriate safeguards.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website with a new “Last Updated” date
• Sending an email notification (for material changes)

14. Contact Us & Grievance Redressal

If you have questions, concerns, or complaints about this Privacy Policy or our data practices:

Grievance Officer:

• Name: SUJATHA JP
• Email: [email protected]
• Phone: 96299 16663
• Address: No.25, RMS Nagar Kamarajar Nagar Extention, Avaniyapuram Bypass Rd, Madurai, Tamil Nadu 625012

Data Protection Board of India:
If your grievance is not resolved satisfactorily, you may escalate to the Data Protection Board of India through their official portal.

15. Consent

By using our website and services, you acknowledge that you have read, understood, and agree to this Privacy Policy. For specific processing activities requiring consent (marketing, analytics, personalized advertising), you can manage your preferences through:

• Cookie banner on first visit
• Account settings dashboard
• Unsubscribe links in marketing emails
• Contacting our Grievance Officer at [email protected] or 96299 16663

This Privacy Policy is compliant with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.