Privacy policy

The Hidden Trails, a travel brand of RR Global Ventures LLP, respects your privacy and is committed to handling your personal information responsibly.

This Privacy Policy explains what information we may collect, why we collect it, how we use it, when it may be shared, how we protect it, and the choices available to you when you use our website, contact us, make an enquiry, or book travel services through The Hidden Trails.

By using our website, submitting an enquiry, communicating with us, or making a booking, you acknowledge this Privacy Policy.

1. About This Privacy Policy

This Privacy Policy applies to personal information collected through:

• The Hidden Trails website and digital platforms
• Enquiry and booking forms
• Email, telephone, WhatsApp and other communication channels
• Social media interactions where applicable
• Travel bookings and related documentation
• Communications with customers before, during or after a trip

This Policy applies to The Hidden Trails, a travel brand of RR Global Ventures LLP.

2. Information We May Collect

Depending on the service you request or book, we may collect information such as:

A. Contact & Identification Information

• Name
• Mobile number
• Email address
• Residential or correspondence address
• Date of birth or age, where relevant
• Identification details required for travel or booking purposes

B. Travel Information

• Travel dates
• Destination and itinerary preferences
• Number of travellers
• Room and accommodation preferences
• Transport requirements
• Flight or other travel details
• Passport information where required for international travel
• Visa-related information where required for arranging travel services

C. Special Travel Requirements

Where voluntarily provided and necessary to arrange your trip, we may receive information relating to:

• Dietary preferences
• Accessibility requirements
• Mobility requirements
• Special assistance requirements
• Other information necessary to properly arrange the requested service

We request that you provide only information that is necessary for the service being requested.

D. Payment & Transaction Information

Payments may be processed through third-party payment gateways, banks or other payment providers.

We may receive transaction-related information such as:

• Payment status
• Transaction reference
• Amount paid
• Date of payment
• Payment method

We generally do not need to receive or store your complete card, banking or other sensitive payment credentials where the payment is processed directly by a third-party payment provider.

3. Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, depending on the technologies used on our website.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location derived from technical information
• Pages visited
• Time spent on pages
• Referring website
• Website interaction and usage information

This information may be used for website operation, security, performance analysis and improving the user experience.

4. How We Use Your Information

We may use your personal information for purposes including:

• Responding to travel enquiries
• Preparing quotations
• Designing itineraries
• Processing and confirming bookings
• Arranging hotels, resorts, homestays and other accommodation
• Arranging transportation and transfers
• Arranging sightseeing, activities and experiences
• Arranging flights or other travel services where applicable
• Communicating booking updates
• Sending invoices, confirmations, vouchers and travel documents
• Providing assistance during your journey
• Handling complaints, emergencies and service issues
• Processing payments and refunds
• Maintaining booking and business records
• Improving our products, services and website
• Preventing fraud, misuse or unauthorised activity
• Complying with applicable legal, regulatory or contractual requirements
• Communicating relevant offers or marketing information where permitted and where applicable

The purpose of collecting information will depend on the nature of your interaction with us.

5. Providing Information to Travel Service Providers

Travel arrangements often require us to share relevant customer information with third parties.

Depending on your booking, information may be shared with:

• Hotels, villas, resorts and homestays
• Destination Management Partners
• Tour operators
• Transport and cab providers
• Drivers and local representatives
• Activity and experience providers
• Airlines and other travel suppliers
• Visa or travel documentation service providers
• Insurance providers where applicable
• Payment gateways and financial service providers
• Technology, CRM and booking-system providers
• Other suppliers necessary to fulfil your booking

We aim to share only the information reasonably required for the relevant service.

For example, a hotel may require the guest's name and booking details, while an international travel service provider may require passport information.

6. International Travel & Cross-Border Data Sharing

For international travel bookings, your information may need to be shared with airlines, hotels, destination partners, visa service providers, payment providers or other travel suppliers located outside India.

Such sharing may be necessary to arrange and provide the services requested by you.

Where required, such processing or transfer will be handled in accordance with applicable law.

7. WhatsApp, Email & Other Communication Platforms

We may communicate with you through:

• Email
• Telephone
• WhatsApp
• SMS
• Website communication tools
• Social media or other communication platforms

Information shared through third-party communication platforms may also be subject to the privacy policies and terms of those platforms.

Customers should avoid sending unnecessary sensitive information through open messaging channels.

8. Cookies & Similar Technologies

Our website may use cookies and similar technologies to:

• Enable website functionality
• Remember certain preferences
• Understand website usage
• Improve website performance
• Analyse visitor behaviour
• Support advertising or marketing activities, where applicable

Some cookies may be placed by third-party services used on our website.

You may be able to control or disable cookies through your browser settings. However, disabling certain cookies may affect website functionality.

Where applicable, additional consent or controls may be provided for cookies or similar technologies.

9. Analytics & Marketing

We may use third-party analytics, advertising or marketing tools to understand how visitors use our website and to improve our marketing activities.

Such services may collect certain technical or usage information in accordance with their own policies.

Where required, marketing communications or processing based on consent will be carried out in accordance with applicable law.

You may unsubscribe from marketing communications by using the relevant unsubscribe option or by contacting us.

10. Legal & Regulatory Requirements

We may use or disclose personal information where reasonably necessary to:

• Comply with applicable laws and regulations
• Respond to lawful requests from government authorities
• Meet legal or regulatory obligations
• Prevent fraud or misuse
• Protect the rights, property or safety of The Hidden Trails, RR Global Ventures LLP, customers or other persons
• Establish, exercise or defend legal claims

11. Information Security

We take reasonable measures to protect personal information against:

• Unauthorised access
• Unauthorised disclosure
• Loss
• Misuse
• Alteration
• Destruction

Security measures may include appropriate administrative, technical and organisational safeguards.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. Therefore, while we take reasonable precautions, we cannot guarantee absolute security of information transmitted over the internet.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing travel services
• Maintaining booking and transaction records
• Handling complaints or disputes
• Meeting accounting, tax, legal or regulatory requirements
• Preventing fraud or misuse
• Protecting and enforcing legal rights

When personal information is no longer required, we may securely delete, anonymise or otherwise dispose of it, subject to applicable legal and operational requirements.

13. Customer Choices & Rights

Depending on applicable law, you may have rights relating to your personal information, including rights to:

• Request information about the personal data we process about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information where applicable
• Withdraw consent where processing is based on consent
• Raise a grievance regarding the handling of your personal information
• Exercise other rights available under applicable data-protection law

The Digital Personal Data Protection Act provides for rights including access to information about personal data, correction/erasure, grievance redressal and withdrawal of consent, subject to the conditions and exceptions under the law.

Some information may need to be retained or processed despite a request for deletion or withdrawal where processing is required or permitted by applicable law or is necessary for an existing booking, transaction, dispute or legal obligation.

14. Withdrawing Consent

Where we rely on your consent to process personal information, you may withdraw that consent by contacting us through the details provided below, or through the relevant mechanism made available to you.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Please note that withdrawal of consent may affect our ability to provide certain services where that information is necessary for the service.

The DPDP framework specifically recognises withdrawal of consent and requires that it be capable of being exercised with ease comparable to the manner in which consent was given, subject to applicable law.

15. Accuracy of Information

We rely on customers to provide accurate and up-to-date information.

You are responsible for informing us if any information provided to us changes or is incorrect.

Incorrect information may result in difficulties with:

• Travel bookings
• Airline or hotel reservations
• Visa applications
• Guest registration
• Transportation
• Activities
• Travel documentation

The Hidden Trails is not responsible for problems arising solely from inaccurate, incomplete or outdated information supplied by the customer.

16. Children's Information

Our services may involve family travel where bookings include children.

Where information relating to a child is required for a booking, it should be provided by or with the involvement of the child's parent or lawful guardian.

We do not knowingly seek to collect information from children independently for unnecessary purposes.

Where applicable law requires additional consent or safeguards in relation to children's personal data, we will follow those requirements.

17. Third-Party Websites & Services

Our website or communications may contain links to third-party websites, booking systems, payment gateways, social media platforms or other services.

We are not responsible for the privacy practices, content, security or policies of third-party websites or services.

Customers should review the applicable privacy policy of the relevant third party before providing information to it.

18. Third-Party Service Providers

Some technology and operational services used by The Hidden Trails may be provided by third-party service providers.

These may include:

• CRM and booking platforms
• Cloud storage providers
• Payment processors
• Email and communication providers
• Website hosting providers
• Analytics providers
• IT and cybersecurity providers
• Travel technology platforms

Such providers may process personal information on our behalf for defined operational purposes.

We seek to use service providers that apply appropriate safeguards and contractual controls, as applicable.

19. Data Breaches & Security Incidents

If we become aware of a personal data breach that requires action or notification under applicable law, we will take reasonable steps to investigate, contain and address the incident and provide notifications where legally required.

Our response may include:

• Assessing the nature and extent of the incident
• Taking steps to contain or mitigate the issue
• Working with relevant technology or service providers
• Notifying affected parties or authorities where required
• Taking corrective measures to reduce the likelihood of recurrence

The notified DPDP Rules, 2025 include requirements concerning reasonable security safeguards and personal data breach-related obligations.

20. Business Transfers

If The Hidden Trails or RR Global Ventures LLP undergoes a restructuring, merger, acquisition, sale of business, transfer of assets or similar corporate transaction, personal information may form part of the relevant business records transferred as part of that transaction.

Any such transfer will remain subject to applicable law and appropriate privacy protections.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our services
• Changes in technology
• Changes in legal or regulatory requirements
• Changes in the way we process personal information

The updated version will be published on our website with a revised “Last Updated” date.

Customers are encouraged to review this page periodically.

22. Governing Law

This Privacy Policy shall be governed by the applicable laws of India.

Any dispute relating to this Privacy Policy shall be subject to the applicable dispute-resolution and jurisdiction provisions contained in our Terms & Conditions, subject to applicable law.

23. Acceptance

By using The Hidden Trails website, submitting an enquiry, providing information, or making a booking, you acknowledge that you have read and understood this Privacy Policy.

Where consent is legally required for a particular processing activity, consent will be obtained through the applicable process or mechanism.

See also: Terms and conditions and Cancellation and refund policy