Privacy Policy

1 · Introduction

Who we are

Bhumivox Experiences Private Limited (“Bhumivox”, “we”, “our” or “us”) is a company incorporated in India, engaged in the design and operation of heritage and civilisational journeys. Our registered office is at [PLACEHOLDER — 1/2C, Kannan Street, Korukkupet, Chennai — 600021].

What this Policy covers

This Privacy Policy explains what personal information we collect from you when you visit our website, submit an enquiry, book a journey or otherwise interact with us; how we use it; whom we share it with; how we protect it; and the rights you have over it.

Whom this Policy applies to

This Policy applies to all visitors to our website (www.bhumivox.com), all persons who submit enquiries or bookings through any channel (form, WhatsApp, email or phone), and all Bhumivox travellers.

Governing law

This Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”). For visitors from the European Union or other jurisdictions, we make reasonable effort to comply with applicable local data protection principles, including the General Data Protection Regulation (GDPR).

Effective date and updates

This Policy is effective from August 2026. We may update it from time to time. The latest version will always be available on our website. Material changes will be notified as described in Section 11.

2 · Information We Collect

We collect only the information necessary to provide our services and improve your experience.

Information You Provide Directly

• Contact details: Name, email address, WhatsApp or phone number, city and country.
• Booking details: Journey selection, preferred departure, number of travellers, dietary requirements, medical or accessibility notes, room-sharing preferences.
• Traveller identification: For international journeys (such as the Sri Lanka Heritage Journey), we may need passport details for visa and travel arrangements.
• Payment information: Processed through secure third-party payment gateways — we do not store your full card or bank details on our systems.
• Communication: Messages and details you share via our contact form, email, WhatsApp or phone.
• Preferences and consent: Your marketing communication preferences and consent choices.

Information Collected Automatically

• Technical data: IP address, device type, browser type, operating system.
• Usage data: Pages viewed, time spent on pages, links clicked, referring website.
• Cookies and similar technologies: As described in Section 5 and our Cookie Policy.

Information From Third Parties

• Payment confirmations from our payment gateway partners.
• Social platform interactions if you engage with us via WhatsApp Business, Facebook, Instagram or LinkedIn.
• Referrals if you were referred by a partner or past traveller.

3 · How We Use Your Information

We use your information for the following purposes:

To respond to your enquiry and provide our services

• Reply to your questions, quotes and calls.
• Process your booking, coordinate travel logistics and confirm reservations.
• Coordinate accommodation, transport, meals and site access on your behalf.
• Send journey-related communications (pre-departure briefings, updates, changes).

To process payments

• Send payment invoices and receipts.
• Process refunds where applicable.
• Meet tax and financial reporting obligations.

To communicate with you

• Respond to enquiries and provide customer support.
• Send transactional messages (booking confirmations, itineraries, receipts).
• Send marketing communications — only where you have opted in (see Section 8).

To improve our services

• Understand which pages and journeys are of most interest.
• Improve our website and journey design.
• Analyse aggregate usage patterns.

To meet legal obligations

• Retain records required by tax, corporate and travel-industry regulations.
• Respond to lawful requests from authorities where required.

4 · How We Share Your Information

We share your information only with parties necessary to deliver our services, or as required by law. We never sell your personal information to any third party.

With service providers

Each service provider is engaged under agreements that require them to protect your data and use it only for the purpose we specify.

With legal authorities

• When required by court order, subpoena or applicable law.
• When necessary to protect our legal rights, prevent fraud, or protect the safety of any person.

With your consent

We share your information with any other party only with your explicit consent.

5 · Cookies and Tracking Technologies

Our website uses cookies and similar technologies to function properly and to help us understand how you use our site.

Types of cookies we use

• Essential cookies: Required for the website to function.
• Analytics cookies: Help us understand how visitors use our site.
• Marketing cookies: Used only if you have opted in.

Your control over cookies

You can control cookies through your browser settings. Blocking essential cookies may affect site functionality. You can also opt out of analytics and marketing tracking at any time through the cookie preferences banner on our site.

A detailed policy is available on our Cookie Policy Page.

6 · Data Security

We take reasonable technical and organisational measures to protect your information from unauthorised access, alteration, disclosure or destruction:

• SSL encryption for all data transmitted through our website.
• Restricted access: Only authorised team members and service providers can access personal information.
• Regular reviews of our data security practices.
• Contractual safeguards with our service providers requiring equivalent standards.

No system is perfectly secure. If you become aware of a security concern, please contact our Grievance Officer immediately (details in Section 12).

7 · Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this Policy, or as required by law.

You can request early deletion of your data at any time — see Section 8.

8 · Your Rights

You have the following rights over your personal information:

• Right to access: Request a copy of the personal information we hold about you.
• Right to correction: Ask us to correct any inaccurate or incomplete information.
• Right to erasure: Request deletion of your personal information (subject to legal retention obligations).
• Right to withdraw consent: For any data processing based on your consent, including marketing communications.
• Right to data portability: Request your data in a machine-readable format.
• Right to object: Object to certain types of processing.
• Right to grievance redressal: File a complaint with our Grievance Officer.

How to exercise your rights

Contact our Grievance Officer (Section 12). We respond to all rights requests within 30 days (or such shorter period as required by applicable law).

Marketing communications

You can opt out of marketing communications at any time:

• Click unsubscribe in any marketing email.
• Reply STOP to any marketing WhatsApp message.
• Contact us directly at support@bhumivox.com.

9 · Children’s Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children under 18.

If a child under 18 travels with us as part of a family or institutional group, their information is provided by, and processed under the responsibility of, their parent, guardian or authorised institution.

If you believe we have inadvertently collected information from a child under 18 without appropriate consent, please contact us immediately.

10 · International Data Transfers

Because we use third-party service providers (including cloud, analytics and communication providers) that may be based outside India, your personal information may be transferred to, stored in or processed in other countries.

Where such transfers occur, we take reasonable steps to ensure your information receives an adequate level of protection — through contractual safeguards, applicable data transfer frameworks, or your explicit consent where required.

11 · Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services or our practices:

• Minor changes (clarifications, formatting): Posted directly to this page with an updated effective date.
• Material changes (new data uses, new third parties, changes to your rights): Notified to you by email or website banner at least 30 days before taking effect.

We encourage you to review this Policy periodically.

12 · Contact Us & Grievance Officer

For general privacy queries

• Email: [PLACEHOLDER — privacy@bhumivox.com]
• WhatsApp / Phone: [PLACEHOLDER]

Grievance Officer (per DPDP Act, 2023)

• Name: [PLACEHOLDER — Grievance Officer name required by law]
• Designation: [PLACEHOLDER — Grievance Officer]
• Email: [PLACEHOLDER — grievance@bhumivox.com]
• Address: [PLACEHOLDER — 1/2C, Kannan Street, Korukkupet, Chennai — 600021]