This policy covers pickthepackage.com, run by Pick The Package India Pvt Ltd ("PickThePackage", "we", "us"). It applies to travelers, to tour operators who list trips with us, and to anyone who just browses. We handle personal data in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
The short version
- We ask for your details only when you send an enquiry, create an account, or write to us.
- An enquiry goes to the one operator you sent it to. We do not sell your phone number or email.
- You can ask us to show, fix or delete your data at info@pickthepackage.com.
1. What we collect and why
| When | What we store | What we use it for |
|---|---|---|
| You send a trip enquiry | Name, phone number, email, preferred travel date, group size, and the message you type, along with the trip and operator it was sent to. | Delivering your enquiry to that operator so they can quote you. It appears in their dashboard. |
| You create an account | Name, email, a hashed password, optional phone number and profile photo. If you use Google sign-in, we receive your name and email from Google; we never see your Google password. | Signing you in, keeping your wishlist and notifications, and prefilling forms. |
| You click Website, Call or WhatsApp on a trip | The trip, the operator, the type of click, your IP address, browser details, and your account ID if you are signed in. | Showing operators how many people showed interest, and spotting automated abuse. |
| You use the contact or report form | Name, email, subject and message, or the email and reason you give in a report. | Replying to you and investigating a complaint. |
| You register as an operator | Business name, city, contact details, registration or GST details, the packages you publish, and your plan and payment records (plan, amount, payment method label, reference and invoice number). | Setting up your listing, billing, and checking that a business is real. |
| You open a page | Standard server logs and, through Google Tag Manager, usage statistics and session recordings (Google Analytics and Microsoft Clarity). Trip and blog pages also keep a simple view counter. See the Cookie Policy. | Fixing errors, protecting the site, and learning which pages people use. |
We do not ask for card numbers, UPI PINs or net-banking passwords anywhere on this site. If an operator asks for payment, that happens on their own channel.
2. Who else sees your data
- The operator you contacted. They receive what you put in the enquiry form and use it to reach you. After that, they hold their copy under their own practices. We cannot delete it from their records, but we can ask them to.
- Google. Google Tag Manager loads our analytics, and Google Analytics counts visits. Google sign-in is available if you choose it. Google Fonts is also loaded from Google's servers, and some trip pages embed YouTube videos.
- Microsoft. Microsoft Clarity records how visitors click, scroll and move through pages so we can find confusing layouts. It receives your IP address, device and browser details and the pages you view. We do not use it to identify you.
- Content delivery networks. Icons and some scripts load from cdnjs and jsDelivr, so those providers see your IP address when a page loads.
- Authorities. We disclose data when a court order or a legal obligation requires it.
No selling, no renting
We do not sell, rent or trade personal data, and we do not hand lists of travelers to advertisers or call centres.
3. How long we keep it
Account data stays while your account is open. Enquiries are kept as long as they are useful to you and the operator, or as long as we need them to settle a dispute. Operator billing records are kept for as long as tax and accounting rules require. When you ask us to delete something, we remove or anonymise it unless a legal duty says we must keep it, and we will tell you if that is the case.
4. Your choices and rights
You can ask us to show you what we hold about you, correct it, delete it, or stop using it for a particular purpose. You can also withdraw consent you gave earlier and name someone to exercise these rights on your behalf. Email info@pickthepackage.com from the address on your account, or tell us which enquiry you mean. We aim to answer within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India once it is operating.
Signed-in users can edit their name, phone number and photo from the profile page.
5. Listings gathered from public sources
Some packages and operators in our directory were found through Google Search and other public sources such as operator websites and business listings. This can include a business name, website, published address, phone number or email, and package details. For a sole proprietor, a business contact can identify a person. Being public does not remove privacy protections or give anyone the right to republish it freely.
A listing built this way does not mean the operator signed up, agreed to anything, or was checked by us. The operator, not Google or PickThePackage, runs the trip. If you are an operator or individual named in a listing, send the page URL and what you want changed or removed to info@pickthepackage.com. Send only what is needed to identify the listing and your connection to it. Never email passwords or identity documents unless we ask. We may need to retain some records to meet legal duties or resolve a dispute.
6. Security
Passwords are stored as hashes, not in readable form. Forms that change data use CSRF tokens, and access to operator and admin areas needs a login. Pages should be served over HTTPS so data is encrypted on its way to us. No website can promise perfect security. If a breach affects your data in a way the law requires us to report, we will notify you and the relevant authority.
7. Children
PickThePackage is meant for adults planning travel. If you are under 18, ask a parent or guardian to send enquiries for you. If you think a child has given us personal data, write to us and we will remove it.
8. Third-party sites
Links to operator websites, WhatsApp, maps and social platforms lead to services we do not control. Read their privacy notices before you share anything. See our Terms of Service for how we treat listing sources and operator responsibility.
9. Changes and contact
When we change this policy, we update the date at the top of the page. If a change affects how we use data you have already given us, we will tell you by email or a notice on the site. Questions or complaints about privacy go to info@pickthepackage.com with "Privacy" in the subject line.