1. Scope

This Privacy Policy explains how Booking Hospitality & Leisure Infra LLP (BHLI) collects, uses, shares, retains and protects personal data when you visit our website, create an account, contact us or request travel and hospitality services.

2. Personal data we collect

• Identity and contact details, including name, email address and mobile number.
• Account and official-travel details, such as rank, department, service number or limited employee/identity-number details supplied for eligibility verification.
• Travel and booking details, including destinations, dates, companions, preferences, enquiries and support communications.
• Transaction and booking-status information. Payment credentials may be processed directly by authorised payment providers and need not be stored by BHLI.
• Technical information such as IP address, device/browser data, security logs, cookie identifiers and website usage.

3. Why we use personal data

• To create and secure accounts and verify login requests.
• To respond to enquiries, prepare options and process or support reservations.
• To verify eligibility for Government, Defence, corporate, LTC, MoU or other restricted rates.
• To communicate confirmations, service updates, support messages and requested information.
• To prevent fraud, protect the website, comply with legal obligations and resolve disputes.
• To improve services and send optional promotional communications where permitted; you may opt out of marketing messages.

4. Consent and lawful processing

We process personal data for specified, lawful purposes, including providing services you request, meeting legal obligations, protecting legitimate interests recognised by law and obtaining consent where required. You may withdraw consent for future processing through the contact details below, although this will not affect earlier lawful processing and may limit services that require the information.

5. When we share information

We share only the information reasonably necessary for the relevant purpose. Recipients may include hotels, airlines, rail or road transport providers, event and travel partners, payment processors, communications and cloud-service providers, professional advisers, and government or law-enforcement authorities where legally required.

We do not sell personal data. Service providers acting for BHLI are expected to use information only for authorised purposes and apply appropriate safeguards.

6. Data location and transfers

Some technology or travel suppliers may process information outside your state or outside India. Where cross-border processing occurs, we take reasonable steps to use appropriate contractual, technical and legal safeguards and comply with applicable transfer restrictions.

7. Retention

We retain personal data only for as long as it is needed for the stated purpose, an active account or booking, support, accounting, fraud prevention, dispute resolution and applicable legal requirements. Data is then deleted, anonymised or securely archived according to operational and legal retention needs.

8. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data from unauthorised access, alteration, disclosure or loss. No internet service can guarantee absolute security, so users should also protect login codes and promptly report suspicious activity.

9. Cookies and analytics

The website may use essential storage and cookies for authentication, preferences, security and performance measurement. Browser settings can restrict cookies, but some account or booking features may then not function correctly.

10. Your choices and rights

We may need to verify identity before acting on a request. Some requests may be limited where information must be retained for bookings, security, legal claims or statutory duties.

• Request information about personal data processed by BHLI.
• Ask us to correct, complete or update inaccurate personal data.
• Request erasure where retention is no longer required or otherwise mandated by law.
• Withdraw consent and opt out of optional marketing communications.
• Raise a grievance and, where applicable, nominate another person to exercise rights under law.

11. Children and third-party links

A parent, guardian or authorised adult should provide and manage information for a child traveller. Our website may link to supplier websites governed by their own privacy practices; please review those notices before submitting data directly to them.

12. Updates and privacy contact

We may update this policy when services, technology or legal requirements change. The current version and effective date will remain available on this page.