Privacy Policy

We use the information we collect to:

• Create and manage your account
• Process bookings, payments, and refunds
• Generate e-passes and participant manifests for activity organizers
• Send booking confirmations, OTPs, and important service notifications via SMS and email
• Verify organizer identity and process KYC approvals
• Enable you to leave and receive reviews
• Respond to your support queries
• Detect and prevent fraud and platform abuse
• Improve the platform through aggregated, anonymised analytics
• Comply with applicable legal obligations

We do not use your personal data for automated decision-making that produces significant legal effects on you.

We do not sell your personal data. We share it only in the following circumstances:

We implement industry-standard security measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Passwords are hashed and never stored in plain text
• OTP-based verification for account access
• Access controls limiting who can access personal data internally

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data: retained until you delete your account
• Booking records: retained for 7 years for financial and legal compliance
• Payment records: retained for 7 years as required by Indian tax law
• Usage logs: retained for up to 12 months, then anonymised

After account deletion, we anonymise or delete your personal data within 30 days, except where retention is required by law.

Under applicable Indian data protection law, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: update inaccurate or incomplete information via Account Settings
• Deletion: request deletion of your account and associated personal data
• Portability: request your data in a structured, machine-readable format
• Objection: object to processing of your data for certain purposes
• Withdraw consent: opt out of non-essential communications at any time

To exercise any of these rights, contact us at privacy@kadal2sahyadri.com. We will respond within 30 days.

We use the following types of cookies:

• Essential cookies: required for the platform to function (authentication session, CSRF protection). Cannot be disabled.
• Preference cookies: remember your settings (e.g., search filters). You can clear these via your browser settings.
• Analytics cookies: help us understand how users interact with the platform using anonymised data. You can opt out via your browser settings.

We do not use advertising or tracking cookies. You can control cookie settings in your browser at any time. Disabling essential cookies will affect platform functionality.

Our platform is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

Trek bookings for participants under 18 must be made by a parent or legal guardian who accepts full responsibility for the minor's participation.

For privacy-related queries, requests, or complaints, contact our Data Protection point of contact:

This policy is governed by the laws of India. We will endeavour to resolve all queries within 30 days of receipt.