Privacy Policy

NorthYatra ("we", "us", "our") is committed to protecting the privacy of travellers who visit our website at northyatra.com, submit enquiries, or book trips with us. This policy explains what information we collect, how we use it, who we share it with, and what rights you have.

By using our website or services, you consent to the practices described below. If you do not agree, please do not submit personal information through our site.

Information we collect

Information you give us directly

Contact details — name, phone number, email address, and city/location when you submit an enquiry or make a booking
Travel preferences — travel dates, destinations of interest, number of travellers, budget range, dietary or accessibility needs
Booking information — passport details, date of birth, and identification documents (collected only when required for specific trips like pilgrimage registration or domestic flights)
Payment information — handled by our payment gateway partners; we do not store full card numbers, CVVs, or UPI PINs on our servers
Communication history — messages you send us via WhatsApp, email, forms, or phone

Information we collect automatically

Device and browser data — IP address, browser type, device type, operating system
Usage data — which pages you visit, time spent, referring website, approximate location derived from IP
Cookies and similar technologies — for remembering your preferences and measuring site performance (see Cookies section below)

How we use your information

We use your personal information for the following purposes:

Respond to your enquiries and design customized trip itineraries
Process bookings, payments, and refunds
Coordinate with travel partners — hotels, transport operators, pilgrimage boards, airlines — for your specific trip
Send trip updates — itinerary confirmations, driver details, check-in reminders, safety advisories
Improve our website and services based on how travellers use the site
Send occasional marketing about new destinations or seasonal offers (only if you opt in, and you can unsubscribe anytime)
Comply with legal obligations — tax records, regulatory requirements under Indian law

Who we share information with

We do not sell your personal information to anyone. We share it only with the following parties, strictly as needed to provide your trip:

Travel partners — hotels, transport providers, guides, pilgrimage boards — who receive only the specific details needed to serve you (name, arrival date, group size)
Payment processors — ICICI Bank, Razorpay, and similar — to handle secure transactions
Technology providers — Supabase (our database), hosting providers, and analytics tools — who process data on our behalf under strict confidentiality
Government or legal authorities — only when required by Indian law, valid court order, or to protect safety

All partners are required to handle your information responsibly and use it only for the purpose we shared it.

Cookies and tracking

Our website uses cookies and similar technologies for:

Essential cookies — required for the site to function (remembering your enquiry form, preventing abuse)
Analytics cookies — to understand which content travellers find useful (Google Analytics 4, with IP anonymization enabled)
Preference cookies — to remember settings like currency or language

You can disable cookies in your browser settings, but some site features may not work correctly. We do not use advertising cookies or sell data to advertising networks.

How we store and protect your data

Your data is stored on secure, encrypted servers hosted by Supabase (EU or Asia-Pacific regions, depending on our current configuration)
All data transmission uses HTTPS with 256-bit SSL encryption
Access to customer data is restricted to authorized NorthYatra staff only, protected by password and multi-factor authentication
Payment card details are never stored on our servers — they're handled entirely by PCI-DSS compliant payment gateways
We regularly back up data and maintain security audit logs

No online system is 100% secure, but we take reasonable and industry-standard precautions to protect your information from unauthorized access, alteration, or destruction.

How long we keep your data

Booking records — 8 years (required for Indian tax and business records)
Enquiries that didn't lead to a booking — 2 years, then deleted
Marketing subscriptions — until you unsubscribe
Website analytics — 14 months (Google Analytics default)

Your rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate or outdated information
Delete your data (subject to our legal retention obligations for completed bookings)
Opt out of marketing communications at any time
Withdraw consent previously given for specific data use
Receive a copy of your data in a portable format

To exercise any of these rights, email us at info@northyatra.com with your request. We will respond within 30 days.

Children's privacy

Our services are intended for adults booking travel, often on behalf of families. We do not knowingly collect personal data from children under 18 without parental consent. If you believe we have inadvertently collected such data, please contact us and we will delete it.

Third-party links

Our website may link to third-party sites (hotel bookings, travel partners, maps). This policy does not cover those sites — please review their own privacy policies. We are not responsible for their practices.

Updates to this policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make significant changes, we will post the updated version on this page and update the effective date at the top. For material changes, we will also notify customers with active bookings by email.

Contact us

For any privacy-related questions, complaints, or to exercise your rights:

Email: info@northyatra.com
Phone / WhatsApp: +91 99062 45745
Postal address: NorthYatra, Railway Road, Katra, J&K 182301, India

See also our Terms & Conditions and Cancellation Policy.