Privacy Policy

01 Who we are

This website is owned and operated by Somu Holidays Tours and Travels ("Somu Holidays", "we", "us", "our"), the Data Fiduciary for the personal data described in this policy.

Registered / business address: #1406, 5th Main Rd, D-Block, 2nd Stage, Rajajinagar, Bengaluru, Karnataka 560010.

02 What we collect

We collect personal data you give us directly, including:

• Enquiry form submissions — name, phone number, pickup/drop location, travel dates, passenger count
• WhatsApp messages you send us to enquire, book or confirm a trip
• Call details when you phone us for a booking or support

We only collect analytics / usage data (such as pages visited or device type) if you accept cookies — see Section 5.

03 How we use it

• To prepare quotes, confirm bookings and assign a driver and vehicle to your trip
• To contact you about pickup timing, route changes or on-trip support
• To keep financial and legal records required under Indian law
• To understand how our website is used, only with cookie consent (Section 5)

04 Consent basis & right to withdraw

We process your personal data on the basis of the consent you give when you submit an enquiry form, message us on WhatsApp or call us. You may withdraw consent at any time by contacting the Grievance Officer in Section 10 — this does not affect the lawfulness of anything already done with your consent, and may mean we can no longer action an active booking.

05 Cookies

Essential cookies required for the site to function (e.g. remembering your cookie choice) are always on. Analytics cookies are only set after you click "Accept" on our cookie banner, and you can change your choice at any time.

06 Sharing

We share personal data only where needed to deliver your trip or run our business:

• With the driver assigned to your booking, so they can reach you
• With our website hosting and infrastructure providers
• With WhatsApp / Meta, when you choose to message us there
• With legal authorities, where required by law

We do not sell your personal data to anyone.

07 Retention

Booking and financial records are kept for up to 8 years, in line with Indian tax and accounting record-keeping requirements. Data from enquiries that do not turn into a booking is kept for a shorter period and deleted once it is no longer needed.

08 Security

This site is served over HTTPS. Access to your personal data is limited to the people who need it to run your booking, and we follow the "reasonable security practices" standard under the SPDI Rules, 2011 for any sensitive personal data we hold.

09 Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data, where it is no longer needed
• Withdraw consent at any time
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a grievance, and escalate it to the Data Protection Board of India if unresolved

To exercise any of these rights, contact our Grievance Officer below.

10 Grievance Officer

For any privacy question, complaint or data request, contact:

11 Children

Our services are intended for use by adults booking travel. We do not knowingly collect personal data from children under 18 except where provided by a parent or guardian as part of a booking (e.g. a child's name for passenger count).

12 Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top of this page will always show the latest revision.

13 Governing law

This policy is governed by the laws of India. Any disputes are subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka.