Legal
Privacy Policy
Last updated: 23 October 2026
This notice explains what personal data Shanvi Tours & Travels collects, why, and the rights you have under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 and its rules. We collect only what we need to answer your enquiry and run your trip.
1. Who we are
Shanvi Tours & Travels (“we”, “us”) is a commercial passenger transport operator in Bangalore and is the Data Fiduciary for the personal data described here. Address: #2472/1, 3rd Block, SMV Layout, Doddabasthihalli, Near Vijaya Hospital, Nagadevanahalli, Bangalore - 560056, Karnataka, India. Email: info@shanvitoursandtravels.com. Phone / WhatsApp: +91 9611120023.
2. Personal data we collect and why
You do not need to share any personal data to browse this website. We collect the following only when you contact us or book a trip:
| Personal data | How we get it | Purpose |
|---|---|---|
| Name and phone number | Enquiry popup, contact form, phone or WhatsApp | To reply to your enquiry, send a quote and confirm your booking |
| Email address | Contact form (optional elsewhere) | To send quotes, booking confirmations and invoices |
| Trip details: travel date, number of travellers, trip type, pickup and destination, your message | Enquiry popup, contact form, booking widget, fare calculator | To recommend the right vehicle, price the trip and plan the route |
| Pickup address and lead passenger's contact for the trip | Shared by you when a booking is confirmed | To dispatch the vehicle and let the driver reach you |
| Billing details: company name, GSTIN, billing address | Shared by corporate customers who need a GST invoice | To issue GST-compliant tax invoices |
| Payment records: amount, date, UPI or bank reference | When you pay by UPI, bank transfer, card or cash | Accounting and tax compliance. Card payments are handled by the bank or payment terminal; we never ask for card numbers, PINs or UPI passwords over the phone or WhatsApp |
| Technical data: IP address, browser type, pages requested, time of request | Automatically, by our website host's server logs | To keep the website secure and running. We use no cookies, analytics or advertising trackers |
We do not use your data for automated decision-making, profiling or advertising, and we never sell it.
3. How our enquiry forms work
Our website forms do not store your details on our servers. When you press send, the form opens WhatsApp with your message pre-filled, and the details reach us only when you send that message from your own WhatsApp account. WhatsApp is operated by WhatsApp LLC (Meta Platforms) and handles the message under its own terms and privacy policy. We then keep the conversation on our business WhatsApp to serve your booking.
4. Consent and other lawful grounds
- Consent: our enquiry forms ask you to tick a box agreeing to this notice before you send. Each WhatsApp enquiry from our forms records that consent with the date, time and the version of this notice.
- Data you share voluntarily for a specific purpose (for example, calling or messaging us for a quote) is used for that purpose, as allowed by Section 7 of the DPDP Act.
- Legal obligations and safety: we may process or disclose data where the law requires it (for example GST records, permit checks or police requests) or to respond to a medical emergency or safety incident during a trip.
5. Who we share it with
- The driver assigned to your trip: the lead passenger's name, phone number, pickup point and itinerary.
- Service providers that help us operate: our website host (Vercel Inc.), WhatsApp (Meta Platforms) for messages, and our telecom provider for calls. They process data only to provide their service.
- Government authorities (such as transport, tax or police authorities) when required by law.
Some of these providers may process data outside India. We do so only as permitted under the DPDP Act and any restrictions notified by the Government of India.
6. How long we keep it
- Enquiries that do not become bookings: deleted within 12 months of our last conversation.
- Booking, invoice and payment records: kept for as long as tax law requires (under GST law, up to 72 months from the due date of the annual return), then deleted.
- Server logs: kept by our website host for a limited period for security and troubleshooting.
If you withdraw consent or ask us to erase your data, we delete it unless the law requires us to keep it.
7. How we protect it
We take reasonable security safeguards: access to customer data is limited to our booking staff and the assigned driver, business phones and accounts are protected by screen locks and passwords, and this website is served only over encrypted HTTPS. If a personal data breach occurs, we will inform the Data Protection Board of India and the affected people as the DPDP Act and Rules require, including a detailed report to the Board within 72 hours of becoming aware of it.
8. Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you and how we use it, and the identity of those we have shared it with.
- Correct, complete or update inaccurate or incomplete data.
- Erase data we no longer need, unless the law requires us to keep it.
- Withdraw consent at any time, as easily as you gave it, by messaging or emailing us. Withdrawal does not affect processing already done, but we may not be able to complete an ongoing booking without the necessary details.
- Nominate a person to exercise your rights in case of your death or incapacity.
- Seek grievance redressal from us, and then complain to the Data Protection Board of India.
To use any of these rights, email info@shanvitoursandtravels.com or WhatsApp +91 9611120023. We may ask you to confirm your identity, and we will respond within 30 days.
9. Your duties
As the DPDP Act requires, please give accurate information, do not impersonate anyone, share another person's details (such as fellow passengers) only with their permission, and do not file false or frivolous complaints.
10. Children
Our enquiry forms are meant for adults aged 18 or over. We do not knowingly collect personal data from children. Bookings for school or college trips should be made by the institution or a parent or guardian, who provides any details needed with the guardian's consent.
11. Grievance Officer
For any question, complaint or request about your personal data, contact our Grievance Officer:
Pradeep H.B., Founder, Shanvi Tours & Travels
Email: info@shanvitoursandtravels.com · Phone: +91 9611120023
Address: #2472/1, 3rd Block, SMV Layout, Doddabasthihalli, Near Vijaya Hospital, Nagadevanahalli, Bangalore - 560056
We acknowledge grievances promptly and resolve them within 30 days. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India under the DPDP Act.
12. Language and changes to this notice
On request, we will provide this notice in Kannada or Hindi. We may update this notice when our practices or the law change; the “Last updated” date above shows the current version, and significant changes will be highlighted on this page.
See also: Privacy Policy · Terms & Conditions · Contact