1. Introduction
TrekBooking (“we”, “us”, “our”) operates the website trekbooking.in. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
Personal Information
- Name, email address, phone number (provided during registration)
- City and profile photo (optional, provided in settings)
- Emergency contact details (provided during booking)
- Payment information (processed by Razorpay — we do not store card details)
Organizer Information
- Organization name, description, phone, email
- Bank account details (for payout processing — stored securely, visible only to the account owner)
- Organization logo
Automatically Collected Information
- Browser type and version
- Pages visited and time spent
- IP address and approximate location
- Device information
3. How We Use Your Information
- To create and manage your account
- To process bookings and payments
- To communicate booking confirmations and updates
- To enable organizers to manage their treks and bookings
- To process payouts to organizers
- To improve our platform and user experience
- To send important service-related notifications
- To prevent fraud and ensure platform security
4. Information Sharing
We share your information only in these cases:
- With trek organizers: Your booking name, phone, email, and emergency contact are shared with the organizer of the trek you book — so they can coordinate logistics.
- With payment processors: Razorpay processes your payment. Their privacy policy applies to payment data.
- With authentication providers: If you sign in with Google, Google’s privacy policy applies to authentication data.
- As required by law: If required by legal process, regulation, or government request.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Data Security
- All data is transmitted over HTTPS (SSL/TLS encryption).
- Passwords are hashed and never stored in plain text.
- Bank account details are accessible only to the account owner via authenticated API.
- Database access is controlled by Row Level Security (RLS) policies.
- We use Supabase (hosted on AWS in Mumbai region) for data storage.
6. Cookies
We use essential cookies for authentication and session management. These are strictly necessary for the platform to function and cannot be opted out of. We do not use advertising or tracking cookies.
7. Your Rights
You have the right to:
- Access: View all personal data we hold about you (via your dashboard settings).
- Correct: Update your profile information at any time.
- Delete: Request account deletion (Settings → Danger Zone). This permanently removes all your data.
- Withdraw consent: You can stop using the platform at any time.
8. Data Retention
We retain your data for as long as your account is active. Booking and payment records are retained for 7 years for accounting and legal compliance. When you delete your account, personal data is permanently removed; anonymized booking records may be retained for analytics.
9. Children’s Privacy
TrekBooking is not intended for users under 18. We do not knowingly collect personal information from children. Child bookings must be made by a parent or guardian. The “child-friendly” filter refers to trek difficulty, not platform users.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the platform constitutes acceptance of the updated policy.