Privacy Policy

This Privacy Policy explains how Chardham Sarthi ("Company", "we", "us") collects, uses, discloses, and protects your personal information when you visit chardhamsarthi.com ("Website") or use our services. We are committed to safeguarding your privacy in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

We collect the following types of information: Personal Information (provided by you): • Full name, email address, phone number • Address, city, state, pincode • Government ID details (Aadhar, PAN, Passport, Voter ID) for booking and Yatra registration • Age, gender, and special needs of travelers • Payment details (UPI transaction references, payment confirmations) Automatically Collected Information: • IP address, browser type, device information • Pages visited, time spent, referral source • Cookies and similar tracking technologies

We use your information for: • Processing and managing your bookings • Communicating booking confirmations, updates, and payment receipts via email/SMS • Assisting with mandatory Uttarakhand Yatra registration (QR e-Pass) • Providing customer support and responding to queries • Sharing traveler details with hotel and transport vendors to fulfill your booking • Improving our Website, services, and user experience • Sending promotional offers and updates (only with your consent) • Complying with legal obligations and resolving disputes

We do NOT sell your personal data. We share information only with: • Hotel and transport vendors: Names, contact details, ID proofs, and travel dates — strictly to fulfill your booking. • Payment processors: Transaction data for payment verification (UPI / online gateways). • Government authorities: If required by law, court order, or regulation (e.g., Uttarakhand Tourism registration data). • Service providers: Email services, analytics tools — bound by confidentiality agreements. All third parties are required to protect your data and use it only for the purpose specified.

We implement industry-standard security measures: • All data transmission is encrypted via HTTPS/TLS • Passwords are hashed using bcrypt (never stored in plain text) • JWT-based authentication with short-lived access tokens (15 min) and refresh tokens (7 days) • Rate limiting on all API endpoints to prevent brute-force attacks • XSS sanitization on all user inputs • Database hosted on secure cloud infrastructure with restricted access While we take reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

We use cookies and similar technologies to: • Maintain your login session • Remember your preferences • Analyze website traffic and usage patterns • Improve site performance You can control cookies through your browser settings. Disabling cookies may affect some Website functionality (e.g., staying logged in).

You have the right to: • Access: Request a copy of the personal data we hold about you. • Correction: Update or correct inaccurate information via your dashboard profile. • Deletion: Request deletion of your account and associated data (subject to legal retention requirements). • Opt-out: Unsubscribe from promotional emails at any time. • Withdraw consent: For any processing based on consent. To exercise these rights, email us at chardhamsarthi@gmail.com.

We retain your data for: • Active bookings: Throughout the booking lifecycle and 2 years after completion (for tax/legal compliance). • User accounts: Until you request deletion. • Payment records: 7 years as required by Indian tax regulations. • Website analytics: Aggregated and anonymized data retained indefinitely.

Our Website may contain links to external sites (e.g., Uttarakhand Tourism portal, Razorpay, Google OAuth). We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies.

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover such data has been collected, we will delete it promptly. For minors (13–18), a parent or guardian must provide consent and submit the booking.

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Continued use of the Website after changes constitutes acceptance.

For privacy-related questions or to exercise your rights: • Email: chardhamsarthi@gmail.com • Phone: +91 92860 59830 • Address: Trishool inn residency, Sersi, Shree Kedarnath Road, Uttarakhand, India Grievance Officer: As per the IT Act 2000, you may contact our Grievance Officer at the above email for any privacy complaints.