Privacy Policy

The Vacation Studio (“TVS”, “we”, “us”) values your privacy. This policy describes how we collect, use, share, and protect personal data.

1. Who We Are (Data Fiduciary)

The Vacation Studio processes personal data as a “Data Fiduciary” for purposes of India’s Digital Personal Data Protection Act, 2023 (DPDP Act), where applicable.

2. Data We Collect

• Identity & contact: name, phone, email,
• Travel details: date of birth, nationality, passport details, traveller preferences, emergency contact, meal/medical requests relevant to
• Government/tax details (only where required): PAN for invoicing/TCS/GST compliance where applicable.
• Payment data: we do not store full card details; payments are processed via payment gateways/banks. We may store transaction references and billing
• Communications: emails, WhatsApp chats, call notes, support
• Website/app usage: device info, logs, analytics, cookies (where enabled).

Important: We do not require Aadhaar for travel bookings in most cases. If ever collected for a specific lawful purpose, it will be minimised, protected, and requested only where necessary.

3. Purposes of Processing

We use data to:

• create quotations and fulfil bookings with Suppliers
• provide customer support and itinerary updates
• process payments, refunds, and comply with accounting/tax laws
• manage fraud prevention and security
• send marketing communications only where permitted and with opt-out options
• improve our services and website performance

4. Legal Basis (DPDP / Other Laws)

Where DPDP applies, we process data based on your consent and/or legitimate uses permitted by law (including compliance with legal obligations and performing services you requested).

5. Sharing / Disclosure

We may share data with:

• Suppliers (hotels, airlines, transport, activities) to fulfil services
• visa facilitation partners (if you request visa assistance)
• payment processors/banks for transactions and refunds
• government/immigration/tax authorities where required by law
• IT service providers (hosting, CRM, email/WhatsApp tools) acting under contractual safeguards

We do not sell personal data.

6. Cross-Border Transfers

International travel services often involve suppliers outside India. Your data may be transferred internationally as needed to fulfil bookings, subject to contractual and security safeguards and applicable legal requirements.

7. Retention

We retain data only as long as necessary for bookings/support and as required by law for accounting/tax compliance. Marketing data is retained until you opt out or request deletion, subject to legal requirements.

8. Security

We use reasonable security measures (access controls, least privilege, encryption in transit where supported, vendor due diligence). No method is 100% secure; you should also protect your accounts and devices.

9. Your Rights / Choices

Subject to applicable law, you may request access/correction, deletion where permitted, withdrawal of consent (which may affect service delivery), and opt-out of marketing communications.

10. Grievance Redressal (India)

For privacy-related queries or data requests, contact:

Email: privacy@thevacationstudio.com

We will respond within a reasonable time as per applicable law.

11. Cookies

We may use cookies for functionality and analytics. You can disable cookies in browser settings; some features may not work.

12. Children

Our services are intended for adults. If you are booking for minors, you confirm you are authorised to provide the minor’s data for travel purposes.

13. Policy Updates

We may update this policy periodically. The latest version will be available on our website/portal.

Last Updated: January 2026 | Version: 2.0