Privacy Policy

Version 2.0. Adds travel partners, accounts and partner KYC. 8 October 2026: what a published review shows (section 2). 9 October 2026: AI drafting help for travel partners (section 4). 11 October 2026: the website moved from tripzoy.com to ideaholiday.com and the service is now named Idea Holiday (same company, same data, same practices).

This policy explains how Idea Holiday Private Limited (“Idea Holiday”, CIN U63030UP2022PTC172520), registered office Shop No 129, Deva Palace, Viram Khand-1, Gomtinagar, Lucknow, Uttar Pradesh 226010 (“we”, “us”), collects and uses your personal data when you use ideaholiday.com. We process personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

1. Data we collect

• Details you give us: name, mobile/WhatsApp number, email, travel city, destination, dates, number of travellers and any message.
• Booking details when you proceed with a trip: names and ages of travellers, ID or passport details required for tickets, hotels and visas.
• Technical data: IP address, browser, device, pages visited, and the ad campaign or link that brought you here (UTM parameters, ad click IDs).
• Records of calls, WhatsApp and email conversations with our team about your enquiry.
• Account data: login details, password hash and one-time-code logs; PAN for international bookings (needed for TCS); chat messages with partners; reviews and photos you upload; payment status from our payment partner (we never see or store full card details).
• For travel agents and suppliers who register as partners: business, tax (GSTIN, PAN) and bank details and KYC documents.

2. Why we use it

• To respond to your enquiry, prepare quotes and contact you by call, WhatsApp, SMS or email.
• To make bookings with hotels, airlines, transport and activity providers and to arrange visas.
• To prevent spam and fraud, keep the website secure and meet legal, tax and accounting duties.
• To measure and improve our website and advertising, including showing you our ads on other platforms.
• To match your trip request with suitable travel partners and let them send you quotes.
• To process payments, invoices, tax deductions/collections and refunds, and to show your review. A published review shows only your first name and last initial, the destination and month of travel, and your photos; we remove location and camera details from photos when you upload them.

3. Consent

When you submit a form or message us, you consent to be contacted about your trip. You can withdraw consent at any time by writing to info@ideaholiday.com or replying STOP to a marketing message. Withdrawal does not affect processing already done, and we may keep records we are legally required to keep.

When you ask for quotes, you agree that selected partners may contact you about that request. You can stop partner contact at any time from your account or by writing to us.

4. Who we share data with

• Up to 5 travel partners (independent agents/tour operators that completed KYC with us) selected for your trip request. They receive your name, contact number, email and trip details only after accepting your request, and only to serve it. Partners are bound by contract to use your data only for your trip and to delete it after it. Suppliers named in your booking (hotels, transport, activity providers).
• Service providers that help us run the site and communicate with you: Cloudflare (hosting, storage, security and bot protection), Meta (WhatsApp messaging), Brevo (email), Cashfree Payments (payment processing) when online payment is used, Anthropic (an AI service that helps travel partners draft your day-by-day itinerary; it receives trip details such as destination, dates, travellers and preferences, never your name, phone number or email), your browser's push service (Google, Apple, Mozilla or Microsoft) if you turn on phone notifications (it carries the encrypted notification text only), travel suppliers and booking systems (for example hotel and activity wholesalers) that we book your services with, and the customer-management (CRM) tool we use to follow up on your trip.
• Analytics and advertising platforms (Google, Meta) if enabled, using cookies and similar technologies.
• Authorities, when the law requires it.

We do not sell your personal data.

5. Cookies and tracking

We use cookies and similar technologies for security (Cloudflare Turnstile), analytics and advertising measurement (Google Analytics, Meta Pixel, Google Ads), where enabled. You can block cookies in your browser settings or use Google and Meta ad settings to opt out of personalised ads.

6. Storage and security

Data is stored on Cloudflare infrastructure and in the tools named above, which may process data outside India. We use access controls, encryption in transit and bot protection. No online system is completely secure, so please do not send card numbers or passwords by chat.

7. How long we keep data

Enquiries are kept for up to 24 months unless you ask us to delete them sooner. Booking and invoice records are kept for the period required by tax and company law. Partner KYC documents are kept while the account is active and up to 8 years after closure for tax records; rejected applications are deleted within 90 days. Chat messages are kept for 24 months after the trip.

8. Your rights

You may ask us to access, correct, update or delete your personal data, withdraw consent, or nominate someone to exercise rights on your behalf. Write to info@ideaholiday.comand we will respond within a reasonable time, not later than 30 days.

9. Children

Our website is for adults. Details of children travelling are collected only from a parent or guardian to arrange a booking.

10. Grievance contact

Grievance Officer: Director, Idea Holiday Private Limited, Shop No 129, Deva Palace, Viram Khand-1, Gomtinagar, Lucknow, Uttar Pradesh 226010. Email: info@ideaholiday.com. Phone: +91 96967 77391.

11. Changes

We may update this policy. The latest version is always on this page with its date.