Privacy Policy

This website is operated by Kaif Solkar, sole proprietor, trading as TipTapGo, at Shop No. S-174, Plot No. 47, Fantasia Business Park, Sector 30A, Vashi, Navi Mumbai, Maharashtra 400703. We decide how and why your personal data is used, which makes us the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Questions about this policy: sales@tiptapgo.in or +91 98190 57929.

• When you enquire: your name, email, mobile number, destination, travel dates, number of travellers and anything you tell us about your trip.
• When you create an account: your name, email, mobile number, country and a password. Passwords are stored only in scrambled (hashed) form — we cannot read them.
• When you book: the lead traveller's contact details, and for each traveller their name, age group (adult or child, with a child's age) and any special requests such as dietary or mobility needs.
• Identity details, only when needed: some hotels, permits for restricted areas, or the law may require ID details. We ask for these only for the booking that needs them.
• Payments: the amount, date, status and the payment provider's reference. Your card, UPI and bank details are entered on Razorpay's secure page and never reach us.
• Automatically: basic technical information such as your IP address, browser type and the pages requested, kept in server logs for security and to prevent fraud.

If you give us details of other travellers, please make sure they agree to you sharing them with us for the booking.

• To answer your enquiry and prepare your quote.
• To make, manage and change your booking — hotels and transport operators need guest names and contact details.
• To take payments, issue receipts and invoices, and process refunds.
• To send messages your booking needs: confirmations, itineraries, vouchers, payment reminders, travel updates and cancellation or refund notices.
• To help you during your trip and handle any complaint.
• To keep our website and systems secure and prevent fraud.
• To meet our legal duties, such as tax and accounting records.
• With your separate permission only: to send you offers, newsletters and travel deals.

We use your data for these purposes on the basis of your consent — given when you enquire, register or book — or where the DPDP Act allows use without consent, such as meeting a legal duty or responding to a medical emergency.

We share only what each party needs to do its part:

• Travel suppliers — hotels, transport operators, activity providers and local partners delivering your package receive the travellers' names, contact number and booking details.
• Payment provider — Razorpay, to take payments and make refunds.
• Messaging providers — WhatsApp (Meta), and our email and SMS providers, so that confirmations and updates reach you.
• Hosting and storage — our cloud providers, which store our database and documents securely on our behalf.
• Professional advisers — such as our accountants and lawyers, when needed.
• Authorities — government, police, courts or regulators, when the law requires it.

We do not sell your personal data, and we do not share it with advertisers. Some of our service providers may store data on servers outside India; where they do, they are bound by contract to protect it.

• All traffic to and from this website is encrypted (HTTPS).
• Payment details are handled only by Razorpay, a PCI-DSS compliant payment provider.
• Access to customer data is limited to staff who need it for their work, each with their own login.
• Travel documents and vouchers are stored privately and shared through links that expire.

If a data breach ever affects your personal data, we will inform you and the Data Protection Board of India as the DPDP Act requires.

• Booking, payment and invoice records: 8 years, because tax and accounting law requires it.
• Enquiries that did not become a booking: 2 years, then deleted.
• Your account: until you ask us to close it. Closing an account does not delete booking records we must keep by law.
• Server logs: up to 180 days.

Under the DPDP Act you may:

• Ask for a summary of the personal data we hold about you and how we use it.
• Ask us to correct, complete or update it.
• Ask us to delete it, where we are not required by law to keep it.
• Withdraw your consent at any time — for example, to marketing messages. This does not affect anything done before you withdrew it, and withdrawing consent for booking-related use may mean we cannot complete your booking.
• Nominate another person to exercise these rights for you in the event of your death or incapacity.
• Complain to our Grievance Officer (section 11), and if you are not satisfied with our reply, to the Data Protection Board of India.

To use any of these rights, write to our Grievance Officer. We may ask you to confirm your identity first, and we will reply within 30 days.

Messages about an enquiry or booking you have made are always sent, because you need them. Offers and newsletters are sent only if you have agreed, and you can turn them off at any time in your profile (Notifications) or by writing to us.

We use only the cookies needed for the website to work — keeping you signed in securely and remembering your settings, such as currency. We do not use analytics, tracking or advertising cookies. If that ever changes, we will update this policy and ask for your consent first.

Accounts and bookings are for adults (18 and over) only. We collect a child's name and age only when a parent or guardian books a trip that includes them, because hotels need it, and we treat that as given with the parent's or guardian's consent.

Grievance Officer: Kaif Solkar & Dhaval Solank, sales@tiptapgo.in, +91 98190 57929

Named under the DPDP Act, 2023, the Information Technology Rules, 2021 and the Consumer Protection (E-Commerce) Rules, 2020. Complaints are acknowledged within 48 hours and resolved within 30 days.

We may update this policy from time to time. The date at the top shows the latest version. If we make an important change, we will tell you by email or on the website. See also our Terms & Conditions.