Data Protection Policy

Data Protection Principles

• Collect only data required for clear business, legal, security, payment, tax, or support purposes.
• Use data for stated purposes and avoid unnecessary sharing.
• Keep data reasonably accurate and allow users to request correction.
• Protect data using reasonable technical and organisational safeguards.
• Delete, anonymise, or archive data when no longer required, subject to legal and tax retention needs.

Security Controls

We use session controls, access restrictions, admin authentication, file permissions, HTTPS enforcement, and payment partner controls. Admin access should be limited to authorised personnel only.

Payment Data

BigTravel.in does not intend to store full card numbers, CVV, UPI PINs, or net-banking passwords. Payment authentication and sensitive payment details are handled by authorised payment partners such as Cashfree or Razorpay where enabled.

Access and Requests

Users can contact bigtraveldesk@gmail.com for access, correction, deletion, withdrawal, or grievance requests. We may retain records required for GST, accounting, fraud prevention, dispute resolution, and legal compliance.

Incidents

If we become aware of a data incident that materially affects user data, we will assess the incident, take reasonable containment steps, and respond in accordance with applicable Indian law.