Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Cloudenex Solution Private Limited, operating under the brand name SafarWay, collects, uses, stores, shares, and protects personal information obtained through the website www.safarway.in and the SafarWay mobile application (collectively, the "Platform").

We are committed to protecting your privacy and handling your data in a transparent and responsible manner. By using the Platform, you consent to the data practices described in this Policy. If you do not agree with this Policy, please do not use the Platform.

Registered Office: First Floor, Shop No. 128, Vardhman Bahnhof Plaza, Sector 12, Plot No. 10, Pocket 7, Dwarka, New Delhi, South West Delhi, Delhi - 110078
CIN: U74999DL2025PTC458295  |  GSTIN: 07AANCC1743N1ZA

2. Information We Collect

2.1 Personal Information

Information you provide directly to us includes:

• Identity Data: Full name, date of birth, gender, nationality.
• Contact Data: Email address, phone number, postal address.
• Account Data: Username, password, account preferences.
• Booking Data: Travel dates, destinations, passenger details, special requests, frequent flyer numbers.
• Payment Data: Credit/debit card numbers, UPI IDs, bank account details, billing address (processed through secure PCI DSS-compliant payment gateways; we do not store full card numbers).
• Identity Documents: Passport number, Aadhaar number, PAN number, or government ID (when required for bookings).
• Communication Data: Feedback, reviews, support queries, and correspondence with us.

2.2 Usage Information

Information collected automatically when you use the Platform:

• Pages visited, search queries, click patterns, and browsing behavior.
• Time and date of visits, time spent on pages.
• Referring website addresses and exit pages.
• Booking history and transaction records.

2.3 Device and Technical Information

• IP address, browser type and version, operating system.
• Device type, device identifiers, screen resolution.
• Mobile network information, language settings.
• Geolocation data (with your consent, for location-based services).

2.4 Information from Third Parties

• Information from social media platforms if you log in using social accounts (Google, Facebook).
• Payment verification data from payment service providers.
• Information from business partners such as airlines, hotels, and travel service providers.

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To process bookings, issue tickets, confirm reservations, and provide travel-related services.
• Account Management: To create and manage your user account, authenticate your identity, and maintain account security.
• Payment Processing: To process payments, manage refunds, and prevent payment fraud.
• Customer Support: To respond to your queries, complaints, and requests for assistance.
• Communication: To send booking confirmations, itinerary updates, travel alerts, and important service notifications via email, SMS, or push notifications.
• Personalization: To personalize your experience, recommend destinations, and show relevant offers based on your preferences and booking history.
• Marketing: To send promotional offers, newsletters, and marketing communications (with your consent; you can opt out at any time).
• Analytics: To analyze usage patterns, improve our services, optimize Platform performance, and develop new features.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or government requests.
• Fraud Prevention: To detect, prevent, and address fraud, security breaches, and other harmful activities.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

• Service Providers: With airlines, hotels, bus operators, railways, and other travel service providers to fulfill your bookings. These providers receive only the information necessary to complete the booking.
• Payment Processors: With payment gateway providers (e.g., PayU, Razorpay) to process your payments securely.
• Technology Partners: With hosting providers, analytics services, email delivery services, and customer support tools that assist in operating the Platform.
• Legal Requirements: When required by law, regulation, court order, or governmental authority, or to protect the rights, property, or safety of SafarWay, our users, or others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction.
• With Consent: We may share your information for purposes not described in this Policy with your explicit consent.

5. Data Security

We implement robust technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmissions are encrypted using 256-bit SSL/TLS encryption.
• PCI DSS Compliance: Payment processing adheres to Payment Card Industry Data Security Standards.
• Access Controls: Strict access controls ensure that only authorized personnel can access personal data.
• Secure Storage: Personal data is stored on secure servers with firewalls, intrusion detection systems, and regular security audits.
• Regular Monitoring: We continuously monitor our systems for vulnerabilities and security threats.
• Employee Training: All employees handling personal data receive regular training on data protection and security practices.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to using commercially acceptable means to protect your data.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform:

• Essential Cookies: Required for the Platform to function properly (session management, authentication, security).
• Functional Cookies: Remember your preferences, language settings, and search history to enhance your experience.
• Analytics Cookies: Help us understand how users interact with the Platform, which pages are most visited, and identify areas for improvement (e.g., Google Analytics).
• Advertising Cookies: Used to deliver relevant advertisements and measure the effectiveness of advertising campaigns.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. By continuing to use the Platform, you consent to the use of cookies as described herein.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You have the right to request access to the personal data we hold about you.
• Correction: You have the right to request correction of inaccurate or incomplete personal data.
• Deletion: You have the right to request deletion of your personal data, subject to legal and contractual obligations.
• Opt-Out of Marketing: You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.
• Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Restrict Processing: You may request restriction of processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at support@safarway.in. We will respond to your request within 30 days.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active Accounts: For the duration of your account being active, plus a reasonable period thereafter.
• Booking Records: Transaction and booking records are retained for a minimum of 8 years as required under Indian taxation and accounting laws (Income Tax Act, GST Act).
• Legal Obligations: Data required for legal compliance is retained as mandated by applicable laws.
• Dispute Resolution: Data relevant to disputes or claims is retained until the matter is resolved.
• Marketing Data: Until you opt out or withdraw consent.

After the retention period, personal data is securely deleted or anonymized so that it can no longer be associated with you.

9. Children's Privacy

The Platform is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information from our records. If you believe that a child under 18 has provided personal information to us, please contact us at support@safarway.in.

10. Compliance with Indian Laws

This Privacy Policy is designed to comply with applicable Indian laws and regulations, including:

• Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• Digital Personal Data Protection Act, 2023 (DPDPA) — We are committed to complying with the provisions of the DPDPA as they come into force, including obtaining valid consent, purpose limitation, data minimization, and ensuring data principal rights.
• Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020.
• Indian Penal Code provisions related to data theft and unauthorized access.

11. International Users and GDPR

If you access the Platform from outside India, your information may be transferred to and processed in India. By using the Platform, you consent to such transfer and processing.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, the following additional rights may apply under the General Data Protection Regulation (GDPR):

• Right to lodge a complaint with a supervisory authority.
• Right to object to processing based on legitimate interests.
• Right not to be subject to automated decision-making, including profiling.

We process your data on the basis of consent, contractual necessity, and legitimate interests (such as fraud prevention and service improvement).

12. Third-Party Links

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to such third-party websites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party website you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Policy periodically. For material changes, we will notify you via email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated Policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for the purpose of this Policy is:

The Grievance Officer shall address your concerns within 30 days of receipt of the complaint.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: