Privacy Policy

Welcome to Ghumo Ji Travels ("Company", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://ghumoji.com or use our taxi booking and tour package services.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

1.1 Purpose of This Policy

This policy is designed to help you understand:

• What information we collect and why we collect it
• How we use the information we collect
• How we share information with others
• How we protect your information
• Your rights regarding your personal information

1.2 User Acceptance

By using our website or services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you are using our services on behalf of a business or organisation, you represent that you have the authority to bind that entity to this Privacy Policy.

• Personal Data: Any information that relates to an identified or identifiable natural person.
• Processing: Any operation performed on personal data, including collection, storage, use, or disclosure.
• Data Subject: The individual whose personal data is being processed.
• Service: The taxi booking, tour package, and related travel services provided by Ghumo Ji Travels.
• Website: The website accessible at https://ghumoji.com.
• Booking: A confirmed reservation for a taxi service or tour package.
• Cookies: Small data files stored on your device by your web browser.

3.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register on our website or create an account
• Make a booking for taxi services or tour packages
• Contact us for customer support
• Subscribe to our newsletter or marketing communications
• Participate in surveys, contests, or promotions

The personal information we collect includes:

• Full Name: To identify you and personalise your booking experience
• Mobile Number: For booking confirmation, driver coordination, and WhatsApp notifications
• Email Address: For booking confirmations, invoices, and communication
• Pickup & Drop Locations: To calculate fares and plan your journey
• Booking Details: Travel dates, times, number of passengers, and special requirements
• Vehicle Preferences: Your preferred vehicle category for the journey
• Billing Address: For GST invoice generation where applicable
• GST Number: For corporate bookings requiring GST invoices

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and usage, including:

• Device Information: Device type, operating system, browser type and version
• Browser Information: Browser settings, language preferences, time zone
• IP Address: Used for security, fraud prevention, and approximate location detection
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs
• Cookies and Tracking Technologies: As described in our Cookies Policy below

3.3 Location Information

We may collect GPS/location data from your device only with your explicit permission. This is used to:

• Automatically detect your pickup location
• Provide accurate fare estimates based on your current location
• Improve our service routing and coverage

You can disable location access at any time through your device settings. Disabling location access will not prevent you from using our services, but may require you to manually enter your pickup location.

We use the information we collect for the following purposes:

4.1 Service Delivery

• Processing and confirming your taxi or tour package bookings
• Calculating accurate fares based on distance, vehicle type, and applicable charges
• Assigning drivers and vehicles to your bookings
• Coordinating pickup and drop-off logistics
• Generating booking vouchers and GST-ready invoices

4.2 Communication

• Sending booking confirmation emails and WhatsApp messages
• Providing trip reminders and driver assignment notifications
• Responding to your customer support queries
• Sending important service updates and policy changes

4.3 Marketing (With Your Consent)

• Sending promotional offers, discounts, and travel deals
• Sharing information about new tour packages and services
• Personalising marketing communications based on your travel history

You may opt out of marketing communications at any time by contacting us or clicking the unsubscribe link in our emails.

4.4 Security & Fraud Prevention

• Verifying your identity and preventing fraudulent bookings
• Monitoring for suspicious activity and security threats
• Complying with legal obligations and law enforcement requests

4.5 Service Improvement

• Analysing usage patterns to improve our website and services
• Conducting research and analytics to enhance user experience
• Testing new features and service offerings

All payments on the Ghumo Ji Travels platform are processed through secure, PCI-DSS compliant payment gateways including Razorpay.

5.1 What We Do NOT Store

Ghumo Ji Travels does not store, process, or have access to:

• Debit card or credit card numbers
• CVV/CVC security codes
• UPI PINs or banking credentials
• Net banking passwords
• Any other sensitive payment authentication data

5.2 What We Store

We only store transaction-level information necessary for booking management:

• Transaction ID and Order ID (provided by the payment gateway)
• Payment status (Paid / Pending / Failed / Refunded)
• Amount paid and payment method type (Card / UPI / Net Banking)
• Payment date and time

5.3 Payment Gateway Privacy

When you make a payment, you are subject to the privacy policy of the respective payment gateway (Razorpay). We encourage you to review their privacy policies before making a payment.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

• Essential Cookies: These are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies.
• Analytics Cookies: We use Google Analytics to understand how visitors interact with our website. These cookies collect information about pages visited, time spent, and traffic sources. This data is aggregated and anonymised.
• Preference Cookies: These cookies remember your preferences such as language settings, location, and vehicle preferences to provide a personalised experience.
• Performance Cookies: These cookies help us understand how our website performs and identify areas for improvement. They collect data on page load times, error rates, and user interactions.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View cookies stored on your device
• Delete cookies individually or all at once
• Block cookies from specific websites
• Block all cookies from being set

We use the following third-party services that may collect information about you:

• Google Maps & Places API: Used for location search, route calculation, and distance estimation. Subject to Google's Privacy Policy.
• Google Analytics: Used for website traffic analysis and user behaviour insights. Data is anonymised and aggregated.
• Razorpay: Our primary payment gateway for processing online payments. Subject to Razorpay's Privacy Policy.
• WhatsApp Business API: Used to send booking confirmations, trip updates, and customer support messages.
• Email Service Providers: Used to send transactional emails including booking confirmations and invoices.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

8.1 Security Measures

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols.
• Secure Servers: Your data is stored on secure servers with restricted access controls.
• Access Controls: Only authorised personnel have access to personal data, and they are bound by confidentiality obligations.
• Payment Security: All payment processing is handled by PCI-DSS compliant payment gateways.
• Security Monitoring: We continuously monitor our systems for potential vulnerabilities and security threats.

8.2 Data Breach Response

In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law, within a reasonable timeframe.

You have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal obligations.
• Right to Withdraw Consent: You may withdraw your consent to marketing communications at any time.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at info@ghumoji.com. We will respond to your request within 30 days.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Booking Records: Retained for 7 years for accounting and legal compliance purposes.
• Account Information: Retained until you request account deletion.
• Communication Records: Retained for 2 years for customer support purposes.
• Analytics Data: Retained in anonymised form for up to 26 months.

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@ghumoji.com and we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

Your continued use of our services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.