Privacy Policy

The business responsible for your personal data (in India's Digital Personal Data Protection Act, 2023, the "Data Fiduciary"; under UK/EU GDPR, the "controller") is:

Privacy and grievance contact: Sambhav Luniya, luminajourneys@zohomail.in.

• Enquiry and call-request forms: your name, phone or WhatsApp number, email address (where the form asks for it), and the message or trip details you choose to write. Fields marked optional can be left blank.
• Trip planning and bookings: traveller names as they appear on passports, travel dates, destinations, preferences and, where a booking or visa needs it, passport and identity details. We ask for these only when a specific booking or application needs them, never on the general website forms.
• Payments: when you pay for the Personalized Visa Checklist or a planning session, the payment is handled by Razorpay. Your card, UPI or bank details go to Razorpay and its banking partners, not to us. We receive the payment status, amount and reference, plus your name and email.
• Messages you send us: the content of WhatsApp, email and call conversations with us.
• Technical data: our hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for security and to keep the site running. We do not run analytics or advertising trackers unless you accept optional cookies (see our Cookie Policy).

We do not knowingly collect data from children under 18 through this site. Travel details of a minor are provided by a parent or guardian for a booking.

• To reply to your enquiry and plan your trip. Basis: your consent when you submit a form, and steps you ask us to take before a contract.
• To make and manage bookings, visas and payments. Basis: performing our contract with you.
• To meet tax, accounting and legal duties. Basis: legal obligation.
• To keep the site and our records secure, and prevent fraud. Basis: our legitimate interests.
• Optional marketing messages. We send offers or newsletters only if you separately agree. You can withdraw at any time.

Our first reply to a form enquiry may be sent by an automated assistant on WhatsApp, with a person following up. A person makes every decision about your booking. Automated tools never decide anything that legally affects you.

We do not sell your personal data. We share it only with:

• Travel suppliers you ask us to book with (airlines, hotels, tour and transfer operators, cruise lines, visa and insurance providers), and only the details each needs.
• Service providers that run our business: Netlify (website hosting and form handling), Google (Sheets, Calendar and Meet for our records and scheduling), Zoho (email), Meta/WhatsApp (messaging), and Razorpay (payments). They process data on our behalf.
• Advertising and affiliate partners, only if you accept optional cookies.
• Authorities and advisers where the law requires it, or to protect our legal rights.

Our providers and travel suppliers operate worldwide, so your data may be processed outside India, the UK or the EU, including in the USA. Where UK/EU data is transferred, we rely on the safeguards our providers offer, such as standard contractual clauses or an adequacy decision. Ask us if you want details.

• Enquiries that do not become bookings: up to 24 months after our last contact, then deleted or anonymised.
• Booking, invoice and payment records: as long as tax, accounting and consumer law require.
• Passport and identity documents: only for as long as needed to complete the booking or visa, then deleted from our active systems, except where the law requires us to keep a record.

Subject to the law that applies to you, you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct or update it;
• erase it, or restrict how we use it;
• stop using it for a purpose you agreed to, by withdrawing consent (this does not affect what we did before);
• move it to another provider, where the law gives you that right;
• register a grievance, and nominate someone to exercise your rights if you cannot (India).

Write to luminajourneys@zohomail.in. We aim to respond within 30 days. If you are unhappy with our reply, you can complain to the Data Protection Board of India, or, if you are in the UK or EU, to your local data protection authority (in the UK, the Information Commissioner's Office).

Forms are sent over HTTPS. We limit access to your data to the people who need it and use reputable providers with their own security controls. No online service is completely secure. If a breach affects you, we will tell you and the authorities as the law requires.

We use only essential storage by default. Optional cookies are loaded only if you accept them. Details and how to change your choice are in the Cookie Policy.

Our site links to WhatsApp, Instagram, Google Calendar, Razorpay and other sites. They have their own privacy policies, and we are not responsible for them.

If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you on the site.