Privacy Policy

Information you provide directly:

• Account registration: name, email address, phone number, date of birth, gender
• Booking details: check-in/check-out dates, guest count, special requests, payment information
• Profile information: address, travel preferences, dietary requirements, family members
• Communications: support tickets, reviews, and messages sent through our platform

Information collected automatically:

• Usage data: pages visited, features used, search queries, booking history
• Device information: browser type, operating system, IP address, device identifiers
• Location data (if permitted): approximate location for destination recommendations
• Cookies and similar tracking technologies (see our Cookie Policy)

We use the information we collect to:

• Process and confirm bookings, issue invoices and receipts
• Communicate booking confirmations, reminders, and updates via email and SMS
• Provide customer support and resolve disputes
• Personalise your experience — destination recommendations, tailored search results
• Improve our platform through analytics and user research
• Prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations
• Send promotional communications (only with your consent; you may opt out at any time)

Legal basis (GDPR): We process your data on the basis of contract performance (bookings), legitimate interests (security, fraud prevention), consent (marketing), and legal obligation.

We do not sell your personal data. We may share it with:

• Property vendors: your name, phone, and booking details are shared with the hotel/houseboat you book with
• Payment processors: Razorpay processes all payments; we do not store card details
• Authentication: Clerk manages account authentication and session management
• Cloud services: MongoDB Atlas (database), UploadThing (file storage), Resend (email delivery)
• Legal authorities: when required by law, court order, or to protect rights and safety

All third-party providers are contractually bound to maintain confidentiality and process data only for the stated purpose.

We use cookies and similar technologies for authentication, security, and analytics. See our full Cookie Policy for details on what cookies we use and how to manage them.

We retain your personal data for as long as your account is active, or as necessary to provide our services. Specifically:

• Account data: retained for the lifetime of your account plus 2 years after deletion
• Booking records: 7 years for financial/legal compliance (Indian GST requirements)
• Support correspondence: 2 years
• Marketing preferences: until you withdraw consent

Depending on your location, you may have the right to:

• Access — request a copy of your personal data (available via Account Settings → Export Data)
• Correction — update inaccurate information through your profile page
• Deletion — request deletion of your account and personal data (Account Settings → Danger Zone)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — opt out of marketing at any time via Account Settings

To exercise these rights, contact us at contact@viakashmir.com or through our Support Centre.

We implement industry-standard security measures including TLS/HTTPS encryption, hashed passwords, role-based access controls, and regular security reviews. However, no system is 100% secure — please use a strong, unique password and enable two-factor authentication in your Account Settings.

Our platform is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a child has provided us data, please contact us immediately at contact@viakashmir.com.

For any privacy-related questions or requests: