Privacy Policy

Who holds your data

PackUrBag is a travel company registered in India. GSTIN 29ABHFP3423E1ZB.

Registered office: #252, 14th A Cross Road, Sector A, Yelahanka Satellite Town, Yelahanka New Town, Bengaluru, Karnataka 560064.

Sales office: 51, Kaveri Layout, Mariyannapalya, Hebbal Kempapura, Byatarayanapura CMC and OG Part, Bengaluru, Karnataka 560024.

Chennai office: 70, 1st Floor, Rayala Nagar 2nd Main Road Entrance, Valluvar Salai, Ramapuram, Chennai 600089.

On this site, “we”, “us” and “PackUrBag” mean that company. “You” means the person making the booking, on behalf of everybody named on it.

For the purposes of the Digital Personal Data Protection Act, 2023, PackUrBag is the Data Fiduciary for the personal data described here.

What we collect

Only what a booking actually needs, and only when you give it:

• Contact details — name, email, phone, and the city you would fly from.
• Travel details — who is travelling, ages of children, dates, destinations, hotel preference, food requirements, and anything you tell us in the notes.
• Booking and billing details — your booking reference, billing address, and your PAN, which the Income Tax Act requires us to record against TCS.
• Passport details, where a visa or a hotel registration needs them.
• Technical data — IP address and browser information, recorded by the web server and used to keep the site working and to stop abuse of the forms.

We do not store your card number, CVV or UPI PIN. Card details are handled by the payment gateway and never reach our server.

Why we hold it, and on what basis

Your data is processed for these purposes and no others:

• To quote for, arrange and deliver the holiday you asked for — including passing what is necessary to the hotels, transport operators, guides and airlines who perform it.
• To meet legal obligations: GST records, TCS returns against your PAN, and the record-keeping the Income Tax Act requires.
• To answer you and to handle complaints.
• To send you offers and trip ideas — only if you ticked that box, and only until you tell us to stop.

The lawful basis is the consent you give when you submit a form or make a booking, and the legitimate uses the DPDP Act allows for performing a contract and complying with law.

Who we share it with

Your details go to the people who have to have them, and stop there:

• The ground operator in your destination country, and through them the hotels, transport companies and guides on your itinerary.
• The payment gateway, for the transaction itself.
• Government authorities, where the law requires it — GST filings, TCS returns, and any lawful request.
• Our accountants and auditors, under confidentiality.

We do not sell your data. We do not share it with advertisers, and we do not pass it to another travel company.

Because the holidays are abroad, some of this data is necessarily transferred outside India — to the operator in Thailand, Laos, Sri Lanka or the UAE who is running your trip. That transfer is limited to what the trip requires.

How long we keep it

Booking and financial records are kept for eight years from the end of the financial year, which is what Indian tax and company law requires.

An enquiry that never became a booking is kept for two years, then deleted.

Marketing consent is kept until you withdraw it, and the record of the withdrawal is kept so we can prove we honoured it.

Your rights

Under the DPDP Act you may:

• Ask what we hold about you, and why.
• Have anything wrong corrected, or anything incomplete completed.
• Ask us to erase it, where we are not required by law to keep it.
• Withdraw consent — including marketing consent — at any time, as easily as you gave it.
• Nominate someone to exercise these rights if you die or become incapacitated.
• Complain to us first, and to the Data Protection Board of India if we do not put it right.

To exercise any of these, write to sales@packurbag.com. We respond within 30 days.

Keeping it safe

The site runs over HTTPS. Access to booking records is limited to staff who need it. Documents suppliers send us are stored outside the public web root and are not reachable by URL.

No system is perfect. If a breach occurs that is likely to affect you, we will tell you and the Data Protection Board, as the DPDP Act requires.

Children

We collect children’s names and ages because fares and room types depend on them, and only from the adult making the booking. We do not market to children and we do not knowingly collect data directly from anyone under 18.

Complaints about your data

Under the Consumer Protection (E-Commerce) Rules, 2020 we publish a grievance contact. Write to sales@packurbag.com with “Grievance” in the subject, or call +91 86184 85787.

A grievance is acknowledged within 48 hours and resolved within one month of receipt. Use this route when the ordinary one has not worked; for a normal question the sales desk is faster.