This Privacy Policy explains how travelwithmacha collects, uses, stores, shares, and protects your personal information when you interact with us through our website, social media, WhatsApp, email, or by participating in our curated travel experiences (Drops).
travelwithmacha is a sole proprietorship owned and operated by Ganesh Narayankar, based out of Bengaluru, Karnataka, India. We operate at www.travelwithmacha.com and on Instagram as @travelwithmacha.
By submitting an application, paying for a Drop, communicating with us, or using our website, you consent to the practices described here. If you don't agree, please don't share information with us or book a Drop.
We collect personal information only when it's necessary to provide our services, communicate with you, or comply with legal obligations.
Under Indian data protection law, including the Digital Personal Data Protection Act, 2023, we process your personal information based on:
We do not sell, rent, or trade your personal information. Ever. Not to data brokers, not to advertisers, not to anyone. We share your information only in these limited circumstances.
We share only the minimum information necessary.
We use Razorpay for payment link processing. Payment information is handled directly by Razorpay under their privacy policy and security standards. For direct bank transfers and UPI payments, transaction information is processed by your bank, our bank, and the National Payments Corporation of India (NPCI).
We use WhatsApp Business for communications. Messages are processed through Meta's WhatsApp infrastructure. For email, we use standard email service providers. For applications, form tools such as Tally or Google Forms.
We may disclose information when required by law, court order, regulatory request, or to protect our legal rights, prevent fraud, or respond to emergencies.
If an insurance claim arises related to a Drop, we may share relevant information with our insurance provider or, with your consent, with your personal travel insurance provider.
If we transition from sole proprietorship to a Limited Liability Partnership or other entity in the future, your information may be transferred to the successor entity under the same privacy commitments.
For pre-trip group coordination, we may share your first name and a basic introduction with other Travelers in your Drop group through WhatsApp groups. We do not share contact details, ID information, or health disclosures with other Travelers.
Health and medical disclosures qualify as sensitive personal information under Indian law. We treat this with additional care.
We retain your personal information only as long as necessary, or as required by law.
| Type of Information | Retention Period |
|---|---|
| Active Traveler data (contact, preferences) | Active period + 12 months after last interaction |
| Booking and transaction records | 3 years post-Drop (consumer claim limitation) |
| Financial and tax records | 8 years from end of relevant financial year |
| Health and medical disclosures | 3 years post-Drop |
| Marketing consent records | Until withdrawn, or as required by law |
| Photography and video content | Indefinitely, subject to opt-out (Section 8.5) |
| Communication records | Up to 3 years, subject to ongoing relationship |
After the retention period expires, we securely delete or anonymize your data, unless legally required to retain it longer.
Under the Digital Personal Data Protection Act, 2023, and other applicable Indian laws, you have these rights regarding your personal information.
Request a copy of the personal information we hold about you by writing to bonvoyage@travelwithmacha.com.
If any information we hold is inaccurate or outdated, request correction. We'll update it within a reasonable time.
Request deletion of your personal information, subject to legal retention requirements (e.g., financial records we're legally required to keep).
Withdraw consent for data processing at any time by writing to us. Note: withdrawing consent may affect our ability to provide services.
Write to bonvoyage@travelwithmacha.com with your full name, the specific right you wish to exercise, and sufficient information to verify your identity. We respond within 30 days of receiving your verified request.
While we use reasonable safeguards, no system is 100% secure. We cannot guarantee absolute security but commit to acting promptly in case of any incident.
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal information from children under 18. If we discover we've inadvertently collected such information, we'll delete it. Parents or guardians who believe their child has provided information to us should contact us immediately.
Some tools we use (such as WhatsApp, Google Forms, email service providers) may store data outside India. By using our services, you consent to such transfers, conducted in compliance with applicable Indian data protection laws.
Our website may use cookies and similar technologies to:
You can control cookies through your browser settings. Disabling cookies may affect some features of the website.
Our website, Instagram, and communications may contain links to third-party websites or services (e.g., Razorpay payment links, vendor websites, social media). We're not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing any information with them.
We may send you marketing communications about new Drops, exclusive announcements, community events, and updates. These are sent only with your consent or to existing customers as part of our legitimate interest.
Opt out anytime by:
Even after opting out of marketing, we'll continue to send essential operational communications related to your active bookings.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on our website with the revised "Last Updated" date.
For material changes, we'll notify you via email, WhatsApp, or a prominent notice on our website. Continuing to use our services after such updates confirms your acceptance of the revised policy.
As of the Effective Date, travelwithmacha is not yet GST-registered as our turnover is below the registration threshold. Once we are GST-registered, our GSTIN will be displayed on invoices and on our website. GST-related information may be collected and shared with tax authorities as required by law.
For questions, concerns, or requests related to this Privacy Policy or your personal information, contact our Grievance Officer.
Response commitments:
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and other applicable laws. Any disputes are subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka, India, subject to your statutory rights as a consumer.
By submitting an application, making a booking, communicating with us, or using our website, you confirm you have read, understood, and agreed to this Privacy Policy.
If you do not agree, please do not provide your personal information to us or use our services.