Privacy Policy

Goa Trip Package, operated by Shivendra Yadav ("we", "us", "our"), is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

This policy applies to all information collected through our website (goatrippackage.com), WhatsApp communications, and any related services or interactions.

We use the information we collect to:

• Process and confirm your bookings, send itineraries, and provide booking support
• Communicate with you via WhatsApp, email, or phone regarding your bookings and enquiries
• Process payments securely and send payment receipts and invoices
• Send promotional offers, new package announcements, and seasonal deals (you can opt out at any time)
• Improve our website, services, and customer experience based on usage patterns
• Comply with legal obligations and prevent fraudulent activities
• Generate anonymous, aggregated analytics to understand market trends

We do not sell your personal data. We share information only with the following trusted partners, strictly for service delivery:

• PayU— Payment processing. PayU receives your payment details to process transactions securely under PCI DSS compliance. See PayU's Privacy Policy.
• n8n— Workflow automation. Used internally to automate booking confirmations, follow-ups, and notifications. Your data is processed on our self-hosted instance and not shared further.
• Interakt — WhatsApp Business API. Used to send booking confirmations, reminders, and support messages via WhatsApp. See Interakt's Privacy Policy.
• Service Providers — Cruise operators, yacht owners, hotels, and activity vendors receive only the information necessary to deliver your booked experience (name, contact number, group size, special requests).

We may also disclose information if required by law, court order, or to protect our rights and safety.

We use cookies and similar technologies to:

• Essential cookies: Maintain your session, remember your cart, and ensure the website functions properly.
• Analytics cookies: Understand how visitors use our website so we can improve content, navigation, and performance.
• Marketing cookies: Deliver relevant advertisements and track campaign effectiveness across platforms.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality. Most browsers allow you to block or delete cookies, but this may impact your experience.

• Booking records and transaction data are retained for 5 years for tax and legal compliance purposes.
• Marketing contact information is retained until you unsubscribe or request deletion.
• Website analytics data is anonymised and retained indefinitely for trend analysis.
• WhatsApp conversation logs are retained for 12 months for quality assurance, then deleted.
• Enquiry data (where no booking was made) is retained for 6 months and then purged.

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Right to Opt Out: Unsubscribe from marketing communications at any time by replying "STOP" on WhatsApp or clicking "unsubscribe" in emails.
• Right to Portability: Request your data in a machine-readable format.
• Right to Object: Object to the processing of your data for specific purposes.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data in transit
• PCI DSS compliant payment processing via PayU
• Access controls limiting data access to authorised staff only
• Regular security reviews and updates to our systems

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

For any privacy-related questions, data access requests, or concerns about how your data is being handled, please contact: