Privacy Policy
What we collect when you use Badrikedar, why we collect it, who sees it, how long we keep it and how you can control it.
Last updated 26 October 2026
BADRI KEDAR TRAVELS PRIVATE LIMITED ("Badrikedar", "we", "us") runs this website. This notice explains how we collect, use, keep and share your personal information, as the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 require. We are also preparing for the Digital Personal Data Protection Act, 2023 as it comes into force. You do not need any other document to understand this notice.
1. Who is responsible
BADRI KEDAR TRAVELS PRIVATE LIMITED, a private limited company, registered office at MV Square, Second Floor, 6 No. Puliya, Nehrugram, Dehradun, Uttarakhand 248001. GSTIN 05AAOCB4627R1Z1. We decide why and how your information is used, and we collect and keep it ourselves, at this address.
Questions, requests and complaints: Appointed Grievance Officer, Grievance Officer, support@badrikedartravels.com. See also Grievance Officer & Data Rights.
2. What we collect, why, and what it lets you do
| Personal data | Why we need it | What you get |
|---|---|---|
| Name, email address, mobile number, password (stored scrambled; we cannot read it) | To create your account and keep you signed in | Your account, bookings and saved tours |
| Name, email and profile picture from your Google account, and your Google account ID, if you choose "Continue with Google" | To sign you in without a password and set up your account profile | Sign-in with Google, with your Google picture on your account |
| Date of birth from your Google account, only if you allow it when you choose "Continue with Google" | To hold your date of birth on your account without you typing it. You can decline and still sign in | Your date of birth saved to your account |
| Travel date, number of adults and children, the tour you chose, notes you write | To make your booking and pass it to the tour operator | A booking request or confirmation |
| Booking status, amount and payment status. If you upload a bank-transfer slip: the slip itself (a photo or PDF, which may show your name, bank and account details) | To check that your payment arrived and to handle refunds | Your booking marked as paid |
| Name, mobile number, email (optional), travel date, number of adults, your message, and the page you sent the enquiry from | To call you back about a trip | A call back or quote |
| Your review: rating, title, comment | To show genuine reviews of tours | Your review on the tour page, shown with your first name, the initial of your last name and the month you travelled |
| Your profile picture, if you upload one | To show it on your account | A picture on your account |
| Your IP address and the pages you request, in server and hosting logs | To keep the site secure, limit abuse and find faults | A safe, working site |
Sensitive personal data
Indian law treats some information as sensitive personal data or information. On this site that is: your password; any payment details shown on a bank-transfer slip you upload (such as a bank account number); and any health information you choose to write in booking notes, for example a mobility or dietary need. Everything else in the table above, such as your name, email, mobile number and travel dates, is ordinary personal information.
We collect sensitive information only with your agreement, use it only for the purpose in the table, and never ask you for it unless it is needed. Your password is never shown to anyone, including us. Health details you write in notes are passed only to the tour operator running your trip, so they can plan for you. You can leave notes empty, and you can choose not to upload a slip.
If you book as a guest, we create an account for you from the name, email and mobile number you enter, so you can see your booking. You can set a password later with "Forgot password".
We do not collect Aadhaar, PAN, passport details, card numbers or bank logins. Payment is made by bank transfer to the tour operator. We do not ask for the names or ages of travelling children: we record only the number of adults and children in a booking.
Tour operators who list tours with us give us their company name, GST or tax ID, phone, address, city, state, country and a verification document. We use these to check who they are and to run the marketplace. The document is kept in private storage and is visible only to our staff.
3. Your consent
When you tick the box to agree to this Privacy Policy and our Terms & Conditions while creating an account or booking as a guest, or when you choose "Continue with Google" under the same words, you give us your written consent, by electronic means, to collect, use, keep and share your information as set out in this notice. We record the date and the version of this notice you agreed to. When you send an enquiry or upload a slip, you give us that information for the purpose shown beside it. We use your information only for those purposes, and we do not send you marketing messages. If we ever want to use it for something else, we will ask separately, with an unticked box.
You may choose not to give us any information we ask for, but then we may not be able to give you the service that needs it, such as a booking. You can withdraw your consent at any time by writing to the Grievance Officer (email is fine), or by closing your account yourself from the "Your data" page. Withdrawing does not affect what we did lawfully before. We may also use information without asking where the law allows, for example to keep tax records or to answer a request you made yourself.
Our servers and our service providers' servers may be in India or in other countries. By agreeing to this notice you accept that your information, including sensitive information, may be stored and handled there.
4. Cookies and similar tools
We use the cookies and browser storage below. Analytics and marketing categories are off unless you turn them on in the cookie banner: we run no analytics, advertising or tracking cookies today, and none load unless you opt in. You can change your choice at any time through Cookie settings in the footer. See our Cookie Policy for the full detail.
| Tool | Provider | Purpose | Needs your permission |
|---|---|---|---|
| Sign-in cookie, lasts about 6 hours | Us | Keeps you signed in after sign-in, sign-up or booking | No, the site cannot work without it |
| Saved and compared tours list, kept in your browser | Us, on your device only | Remembers the tours you saved or compared. It never leaves your device | No, you asked for the feature |
| Cookie-consent cookie, lasts about 180 days | Us, on your device only | Stores your per-category cookie choice, the version you agreed to and the date. It stays on your device and is never sent to our servers. Change it any time with "Cookie settings" in the footer | No, it records the choice you made |
| Google reCAPTCHA (invisible) | Google (USA) | Checks that sign-in, sign-up, booking, enquiry, review and slip-upload forms are filled by a person. Google receives your IP address and browser details when these forms load | No, it protects the forms |
| "Continue with Google" button | Google (USA) | Lets you sign in with your Google account. Loaded on the sign-in, sign-up and booking pages | No, it only works if you click it |
| Analytics cookies (none in use today) | Us, if ever added | Would measure how the site is used. This category is empty today, and nothing loads unless you turn it on | Yes, off unless you opt in through the cookie banner |
| Marketing cookies (none in use today) | Us, if ever added | Would support advertising or promotions. This category is empty today, and nothing loads unless you turn it on | Yes, off unless you opt in through the cookie banner |
5. Who we share information with
We do not sell your information. We share it only with the kinds of recipients below, and with government agencies or courts when the law requires. We do not share your password with anyone. Sensitive information is shared only as stated in this table, or when the law requires it. A recipient we share with may not pass your information on further.
| Who | What for | Where |
|---|---|---|
| The tour operator whose tour you book | Your name, mobile number, travel date, number of travellers and any notes you write, including health needs, so they can organise and confirm your trip. They may contact you about it | India |
| Technology service providers | Hosting our website and servers, storing our database, uploaded slips and images, delivering pages, sending our emails, and the tools our team uses to read and answer your enquiries and bookings. They handle your information only to provide that service to us | India and other countries |
| Bot-protection and sign-in providers | Checking that our forms are filled in by a person, and signing you in if you choose Google (section 4) | Other countries |
| Government agencies, courts and regulators | Only when the law requires, for example to verify identity or investigate an offence | India |
You can ask the Grievance Officer for the names of the providers that handle your information (section 8).
6. How long we keep it
| Data | Kept for | Why |
|---|---|---|
| Account details | Until you erase your account from the "Your data" page after signing in, or ask us to. Your account closes at once. We keep your details for 30 more days in case you change your mind, then erase them for good. The account record stays without your details, because bookings are attached to it | To run your account |
| Bookings, payment status and uploaded slips | 8 years after the booking | Accounting and tax records |
| Enquiries | 24 months, then deleted automatically | To follow up on a trip enquiry |
| Reviews | Until you ask us to remove yours, or the tour is removed | To show reviews |
| Tour operator verification documents | While the operator is listed, and afterwards only as long as the law requires | To prove who we verified |
| Server and security logs | At least 1 year | Security and legal duties |
When the purpose ends, or you withdraw permission, we erase the data unless a law requires us to keep it.
7. How we protect it
These are the security practices we use to protect your information, including sensitive information:
- Encrypted connections (HTTPS) between your browser and our website.
- Passwords are stored in scrambled (hashed) form, so no one can read them.
- The sign-in cookie cannot be read by scripts on the page and expires after about 6 hours.
- Staff reach information through accounts with role-based permissions, limited to what their work needs.
- Payment slips and tour-operator verification documents are kept in private storage, not on public web addresses.
- Automated bot checks and limits on the number of requests to forms and sign-in.
- Information is deleted when its retention period ends (section 6).
If a security incident affects your information, we will tell you without delay what happened, the likely impact, what we are doing and what you can do, and we will report it to the authorities as the law requires.
8. Your rights
You can ask us to: (a) let you review the information you have given us, with a summary of what we hold and who we shared it with; (b) correct or update anything that is wrong or incomplete; (c) erase it; (d) deal with a grievance; and (e) nominate another person to use these rights if you die or cannot act. You can see and update your name and mobile number in your account and bookings.
To erase your account yourself, sign in and open Your data in the menu under your name. To do anything else, write to support@badrikedartravels.com with the subject "Data request", or see Grievance Officer & Data Rights. We may need to confirm it is you by using the email or mobile number on your account. We acknowledge within 48 hours and resolve your grievance within one month (30 days) of receiving it.
9. Children
Our site is for people aged 18 and over, and you confirm this when you create an account or book. Adults may book trips for family members who are children, and we then record only the number of children. We do not knowingly collect a child's own account or personal details, and we do not track or advertise to children. If you think a child has given us data, tell the Grievance Officer and we will delete it.
10. Changes to this notice
If we change what we collect or why, we will update the date at the top of this page and ask for your permission again where required.