Privacy Policy

EkaRa (“EkaRa”, “we”, “us”, or “our”) is an independent online tour-booking marketplace that connects travellers with independent travel agents and tour operators (“Travel Agents” or “Tour Operators”). EkaRa currently offers tour packages only.

EkaRa provides the digital platform, tour discovery interface, booking system, payment integration, invoice generation, and customer communication tools. The independent Travel Agent or Tour Operator responsible for the tour you select is an independent service provider—not an employee of EkaRa—and is solely responsible for conducting the tour and delivering the travel services.

This Privacy Policy is designed to comply with Indian data protection and e-commerce laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act)and the notified DPDP Rules, 2025, subject to their applicable commencement dates.

We collect only the information actually needed to manage accounts, process bookings, issue invoices, and coordinate with travel partners:

• Account & Contact Details: Full name, email address, 10-digit mobile phone number, and account password (stored securely as a one-way cryptographic hash) when you register or sign in. If you sign in via Google OAuth, we receive your name and verified email address from Google.
• Booking & Traveller Details: Lead traveller name, contact phone number, email address, passenger names, age, gender, seat selections, room sharing options (e.g. single, double, or triple sharing), and chosen pickup and drop-off points. EkaRa does not collect Aadhaar or PAN card numbers from travellers during the general booking process.
• Tour Preferences & Communication: Special notes, itinerary selections, inquiries, or cancellation requests submitted through your traveller dashboard.
• Payment Transaction References: Transaction identifiers from Razorpay (such as razorpay_payment_id, razorpay_order_id), amount paid, payment method type (e.g., UPI, Card, Net Banking), payment status, and timestamps.
• Invoice & Tax Records: Customer billing name, contact phone number, and optional customer GSTIN (Goods and Services Tax Identification Number) if you choose to provide it at checkout for business tax credit.
• Customer Support Records: Messages, feedback, or support tickets submitted through our Contact Us page or email helpdesk.
• Agent KYC Verification Information: If you register as an independent travel partner or agent on EkaRa, we collect your agency name, business contact details, bank settlement information, and commercial verification documents (such as agency PAN, proprietor identification, and trade license or business registration) to verify agent eligibility.
• Technical & Log Information: IP address, device browser type, and non-personally identifiable page visit telemetry to help us diagnose technical issues and ensure site stability.

We process your personal information strictly for specified, legitimate business purposes:

• Creating and managing your user account and authentication sessions.
• Processing tour reservations, managing seat holds, and issuing official booking references.
• Sharing necessary booking and traveller details with the selected travel agent/operator to deliver the tour.
• Verifying payment completion with our payment gateway and generating itemized tax invoices.
• Sending essential booking updates, confirmations, itinerary changes, and schedule notifications.
• Facilitating cancellation requests and coordinating refund reviews between travellers and travel agents.
• Providing customer support and responding to inquiries.
• Protecting platform security, detecting fraud, and meeting statutory tax, accounting, and legal obligations under Indian law.

When you book a tour on EkaRa, relevant booking and traveller information is shared with the independent Travel Agent or Tour Operator responsible for that tour.

This information includes the names of all travellers in your party, age, gender, contact phone number, selected pickup and drop-off points, seat numbers, and room sharing preferences. The agent requires this information to:

• Manage passenger manifests and coordinate transportation.
• Arrange hotel accommodations and room check-in according to your booking.
• Contact you on the day of travel regarding departure timings, pickup landmarks, and trip logistics.
• Ensure passenger safety and manage on-ground operations throughout the tour.

The independent travel agent is an independent service provider and is responsible for handling the traveller information they receive in accordance with applicable law. EkaRa does not permit agents to use customer details for unsolicited marketing outside the scope of the booked journey.

Online payments on EkaRa are processed through Razorpay Software Private Limited (“Razorpay”), an RBI-authorized payment aggregator.

What EkaRa receives and stores:

• Gateway payment IDs (razorpay_payment_id), order IDs, and signature verification tokens.
• Transaction amounts, payment status (PAID, REFUNDED), payment method category, and timestamps.
• Related booking identifiers and invoice numbers to reconcile your account.

What EkaRa does not capture or store:

• EkaRa does not capture, store, or view full credit or debit card numbers, card expiry dates, or CVVs.
• EkaRa does not capture, store, or view net banking login passwords or UPI MPINs.

All sensitive payment instrument details are entered directly within Razorpay’s encrypted checkout interface. Razorpay processes transactions according to its own privacy policy and PCI-DSS compliance standards.

We use browser cookies and local storage technologies in a transparent manner:

• Essential Cookies & Storage: Required for the website to function. They keep you signed in, remember your language preferences, and hold your selected tour seats during the checkout process. These cannot be disabled without breaking website functionality.
• Analytics Tools: We collect first-party, non-personally identifiable page view telemetry to understand which routes are popular and ensure page loading performance. We do not use third-party behavioral advertising tracker networks.
• Marketing Consent: If you voluntarily subscribe to our newsletter in the footer, we use your email address to share travel offers and tour announcements. You can unsubscribe at any time by clicking the unsubscribe link or contacting support. Refusing marketing communications will never prevent you from browsing tours or completing bookings.

Data Storage: Personal account information, booking records, invoices, and transaction references are stored in our secure database systems.

Data Retention: We retain your personal information for the period your account remains active or as necessary to fulfill your booked tours. In addition, financial records, itemized tax invoices, and payment reference logs are retained for the statutory retention periods required under Indian tax, GST, and corporate accounting laws.

Security Measures: We employ standard technological and administrative safeguards, including HTTPS TLS encryption for data in transit, one-way bcrypt hashing for passwords, and access restrictions for administrative systems.

Honest Security Notice: While we implement reasonable technical and organizational precautions, no electronic transmission over the internet or computer storage system can be guaranteed to be 100% secure. Travellers are advised to choose strong account passwords and maintain the confidentiality of their login credentials.

To provide platform services, EkaRa integrates with select third-party service providers (such as Google for OAuth login and Razorpay for payment processing). Additionally, the EkaRa website may display links to social media channels or external travel resources.

EkaRa is not responsible for the privacy practices, content, or data protection policies of external websites. When you follow a link to another site, we encourage you to read that provider’s privacy notice.

Under the Digital Personal Data Protection Act, 2023 and applicable Indian privacy regulations, customers have the right to:

• Access Information: Request a summary of the personal data processed by EkaRa and details of third parties (including travel agents) with whom booking information has been shared.
• Correction & Updating: Request the correction or updating of inaccurate or incomplete personal data.
• Erasure & Account Deletion: Request the deletion of your personal data where it is no longer required for the purpose for which it was collected, subject to statutory retention obligations under Indian tax and accounting laws.
• Grievance Redressal: Submit a complaint regarding the processing of your personal data to our designated contact desk.

To submit a request regarding your personal data, email our support desk at info@ekaratravel.com with your registered email and details of your request.

EkaRa may update this Privacy Policy from time to time to reflect changes in our marketplace features, operational practices, or evolving statutory requirements under Indian law.

When changes are made, the revised policy will be posted on this page with an updated “Last updated” date. We encourage users to periodically review this page. Continued use of EkaRa after any updates signifies your acknowledgment of the revised policy.