Privacy Policy

Overview

By using hiddenrajasthan.com, contacting us, subscribing to emails, requesting custom planning, purchasing digital itineraries, or using interactive features such as language, currency, or packing tools, you acknowledge this Privacy Policy and the handling practices described here.

Information We Collect

Information you provide directly

• Name, email address, phone number, WhatsApp details, nationality, or country of residence when you contact us or request support.
• Travel preferences such as travel dates, group size, destinations, budget notes, dietary needs, and special requests for itinerary planning.
• Communication content from emails, forms, or booking-related conversations.
• Email address and consent preferences when you subscribe to newsletters or updates.

Information collected automatically

• Technical details such as IP address, browser, device type, operating system, screen size, and referral source.
• Usage details such as pages viewed, time on page, basic click patterns, and broad site-performance metrics.
• Preference data such as saved language, currency selection, theme preference, and similar functional settings stored on your device.

Product and tool context

If you purchase itineraries or use planning tools such as PackPilot, we may process the information needed to deliver those services properly, such as trip dates, trip type, destination notes, and product-delivery information.

How We Use Data

• To respond to enquiries, deliver digital itineraries, and manage custom trip planning requests.
• To send newsletters and editorial updates where you have actively opted in.
• To remember preferences like language, currency, and interface settings for a smoother browsing experience.
• To understand site performance, popular content, and visitor behaviour so we can improve the website.
• To prevent fraud, abuse, misuse of content, and technical security issues.
• To meet tax, accounting, compliance, or lawful disclosure obligations when required.

If you are in the EEA, UK, or a similar jurisdiction, we generally rely on consent, contractual necessity, legitimate interests, or legal obligation as the basis for processing, depending on the interaction involved.

Cookies, Analytics, and Preferences

We use a limited set of cookies or similar technologies to keep the website functional, measure performance, and remember user choices.

• Essential cookies: support core site functionality and session behaviour.
• Functional cookies: remember settings such as selected language, currency, or theme.
• Analytics cookies: help us understand traffic and improve content quality.

We may use analytics providers such as Google Analytics. Those providers process certain technical and usage data under their own policies. You can manage cookies through your browser settings, including blocking or deleting them, though some features may stop working as intended.

Sharing, Payments, and Third Parties

We do not rent, sell, or trade personal information. We only share data where needed to run the site or complete a service.

• Service providers: trusted hosting, analytics, email, and payment partners that support site operations or product delivery.
• Payment processors: payments are handled by third-party gateways such as Razorpay or Stripe, and card data is not stored on our own servers.
• Legal disclosures: where disclosure is required by law, valid legal process, or protection of rights and safety.

Our website may link to external services, booking platforms, or social channels. Those third-party sites control their own privacy practices, and we encourage users to review them separately.

Retention and Your Rights

We keep personal data only as long as necessary for the purpose it was collected.

• Enquiry and communication records are typically retained for up to 24 months after the last active exchange.
• Purchase and transaction records may be retained for up to 7 years to satisfy tax and accounting requirements.
• Newsletter data is retained until you unsubscribe or request deletion.
• Aggregated or anonymised analytics may be retained longer where it no longer identifies you.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or port certain personal data, and to withdraw consent where consent is the legal basis.

California residents may also have rights under the CCPA or CPRA, including the right to know, delete, and request non-discriminatory treatment. We do not sell personal information.

Security, International Transfers, and Children

We use reasonable technical and organisational safeguards to protect information, including HTTPS encryption, limited-access storage practices, and periodic review of security measures. No system is completely risk-free, so absolute security cannot be guaranteed.

Because Hidden Rajasthan operates from India, information may be stored or processed in India or in other jurisdictions used by our service providers. Where required, we rely on appropriate contractual or legal safeguards for cross-border processing.

Our services are not directed to children under 16, and we do not knowingly collect personal data from children. If we learn that such data has been submitted inadvertently, we will delete it within a reasonable period.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.