Privacy Policy

1.  Who We Are

Ghummofy.com (“we”, “our” or “us”) is the online travel planning and booking platform operated by Shrinath Adventures, a registered travel and tourism firm based in Jaisalmer, Rajasthan, India.

This Privacy Policy explains how Shrinath Adventures collects, uses, stores, shares and protects the personal information of visitors and customers who use the Ghummofy website, contact us by phone or email, or book travel services through us.

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or submit your personal information to us.

2.  Information We Collect

We collect the following categories of personal information, depending on how you interact with us:

2.1  Information you give us directly

• Full name and date of birth
• Email address and phone number (including WhatsApp number)
• Postal address (for invoice and documentation purposes)
• Passport details or government-issued ID number (required for certain bookings such as flight tickets, adventure permits or hotel check-ins)
• Travel preferences, dietary requirements or accessibility needs you share with us
• Payment details — card information is processed only through our secure payment gateway partners; we do not store full card numbers on our servers
• Any messages, enquiries or feedback you send us via our contact form, email or WhatsApp

2.2  Information collected automatically

• IP address and approximate geographic location
• Browser type, operating system and device type
• Pages visited on ghummofy.com, time spent on each page and clickstream data
• Referring website or search query that brought you to our site
• Cookie data (see Section 7 for our full Cookie Policy)

2.3  Information from third parties

• If you contact us through a third-party platform (Instagram, Facebook, Google Business), we receive the information you share in that interaction
• If you book via a travel aggregator or partner site, we may receive booking details from that partner

3.  How We Use Your Information

We use the personal information we collect for the following purposes:

To process and manage your booking: Confirming your reservation, issuing itineraries, arranging accommodation, transport, guided tours and activities, and communicating travel updates before and during your trip.

To respond to your enquiries: Answering questions submitted via our website, email, phone or WhatsApp in a timely and accurate manner.

To issue invoices and receipts: Generating financial documentation for your travel purchases as required under Indian tax law (GST compliance).

To send travel-related communications: Pre-departure reminders, itinerary updates, changes to bookings and emergency contact information relevant to your trip.

To send marketing communications (with your consent): Newsletters, promotional offers, seasonal deals and blog content from Ghummofy. You may unsubscribe at any time using the link in any marketing email.

To improve our website and services: Analysing aggregated, anonymised usage data to understand which pages and packages are most popular and to improve our content and booking experience.

To comply with legal obligations: Sharing passenger details with hotels, airlines, transport providers and Indian government authorities where required by law (e.g. foreigner registration, GST filings).

4.  Legal Basis for Processing Your Data

Shrinath Adventures processes your personal data on the following legal grounds, in accordance with the Information Technology Act, 2000 (India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable, the General Data Protection Regulation (GDPR) for customers based in the European Economic Area:

• Contract performance — processing is necessary to fulfil the travel booking contract between you and Shrinath Adventures
• Legitimate interests — to operate, improve and promote our travel services, provided your rights and interests are not overridden
• Legal obligation — to comply with applicable Indian tax, tourism, immigration and consumer protection laws
• Consent — for marketing communications and the use of non-essential cookies, where you have given explicit consent

5.  How We Share Your Information

We do not sell, rent or trade your personal information to any third party for commercial purposes. We share your information only in the following limited circumstances:

Service providers: Hotels, guesthouses, airlines, train operators, local guides, transport companies and activity providers who are part of your booked itinerary. These parties receive only the information necessary to deliver the service you have booked.

Payment processors: Our secure payment gateway partners who process card transactions on our behalf. These providers are PCI-DSS compliant and operate under strict data security standards.

Government and regulatory authorities: Where required by Indian law, we share guest details with relevant authorities, including the Foreigners Regional Registration Office (FRRO) for international visitors, state tourism boards and GST authorities.

Technology and platform providers: Our website hosting provider, email service provider, CRM software and analytics tools. These providers process data only on our instructions and are bound by confidentiality agreements.

Legal proceedings: We may disclose your information if required to do so by a court order, law enforcement request or other legally binding demand.

6.  How Long We Keep Your Data

We retain your personal information for as long as is necessary for the purposes set out in this policy, subject to the following:

• Booking and financial records are retained for a minimum of 7 years in accordance with Indian GST and financial record-keeping requirements.
• Customer enquiry records are retained for up to 3 years to allow us to reference past communications and improve our service.
• Marketing consent records are retained until you withdraw your consent or request deletion.
• Website analytics data is retained in aggregated, anonymised form for up to 2 years.

When your data is no longer required, we will securely delete or anonymise it in accordance with applicable law.

7.  Cookies and Tracking Technologies

Ghummofy.com uses cookies and similar tracking technologies to operate the website effectively and to understand how visitors use our pages. The following types of cookies may be used:

Essential cookies: Necessary for the website to function correctly. These cannot be disabled without affecting core website functionality (e.g. maintaining your session when filling in a booking form).

Analytics cookies: Used to collect anonymous data about how visitors navigate our website (e.g. Google Analytics). This helps us understand which content is most useful and improve our pages.

Marketing cookies: Used to track visits from marketing campaigns and measure their effectiveness. These are only set with your consent.

Third-party cookies: Set by embedded tools such as Google Maps, WhatsApp chat widgets or social media sharing buttons. These are governed by the privacy policies of the respective third parties.

You can control and manage cookies through your browser settings. Disabling certain cookies may affect your experience on the site. For full details of the cookies we use, see our Cookie Preferences tool on the website.

8.  How We Protect Your Data

Shrinath Adventures takes the security of your personal information seriously. We implement the following measures to protect your data:

• SSL/TLS encryption on all pages of ghummofy.com (HTTPS throughout)
• Secure, access-controlled servers for storage of customer data
• Payment processing handled exclusively by PCI-DSS compliant payment gateway providers; full card details are never stored on our systems
• Access to personal data is restricted to authorised staff members who require it to perform their role
• Regular review of our data security practices

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but we commit to notifying affected users promptly in the event of a data breach that affects their personal information.

9.  Your Rights

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

Right to access: You may request a copy of the personal information we hold about you.

Right to correction: You may request that we correct any inaccurate or incomplete information we hold about you.

Right to deletion: You may request that we delete your personal data, subject to our legal obligations to retain certain records.

Right to withdraw consent: Where we process your data on the basis of consent (e.g. marketing emails), you may withdraw that consent at any time by clicking ‘Unsubscribe’ in any email or by contacting us directly.

Right to object: You may object to our processing of your data for direct marketing purposes at any time.

Right to data portability: Where applicable, you may request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at info@ghummofy.com with the subject line “Data Request — [Your Name]”. We will respond within 30 days. We may need to verify your identity before processing your request.

10.  Children’s Privacy

Ghummofy.com is not directed at children under the age of 18. We do not knowingly collect personal information from minors. Where a booking involves a minor as a traveller, we collect only the information necessary to fulfil the booking (such as name and date of birth for documentation purposes), provided by the parent or legal guardian making the booking.

If you believe we have inadvertently collected information from a child under 18 without appropriate consent, please contact us at info@ghummofy.com and we will delete the information promptly.

11.  Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment gateways and embedded tools (such as Google Maps). This Privacy Policy applies only to ghummofy.com and the services provided directly by Shrinath Adventures.

We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party platform you visit through links on our site.

12.  International Data Transfers

If you are visiting or contacting us from outside India, please be aware that your information will be transferred to, stored and processed in India, where our operations are based. By providing your information to us, you consent to this transfer.

For customers based in the European Economic Area (EEA) or United Kingdom (UK), we process your data in compliance with applicable data protection law, including the GDPR. If you have questions about cross-border data transfers, please contact us at info@ghummofy.com.

13.  Changes to This Privacy Policy

Shrinath Adventures may update this Privacy Policy from time to time to reflect changes in our practices, services or applicable law. When we make material changes, we will update the ‘Last Updated’ date at the top of this document and, where appropriate, notify registered users by email.

We encourage you to review this Privacy Policy periodically. Your continued use of ghummofy.com after any changes constitutes your acceptance of the updated policy.

14.  Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, we have appointed a Grievance Officer to address any complaints or concerns regarding the processing of your personal data.

If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.

15.  Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by Shrinath Adventures, please get in touch: