Privacy
Privacy Policy
Last updated: [PUBLICATION DATE]
Who we are
BookMyOutings — the website bookmyoutings.com and the BookMyOutings Android app — is operated by [REGISTERED LEGAL ENTITY NAME], with its office at No. 480/B, 5th Floor, 18th Cross, 27th Main, HSR Layout, Sector 2, Bangalore, Karnataka 560102 (“BookMyOutings”, “we”, “us”). This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and the rights you have over it. It is published under the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 (the DPDP Act) and the rules made under it. For the personal data described here, we are the Data Fiduciary.
Who this policy covers
This policy covers three groups of people: guests, who browse the platform and send enquiries without creating an account; hosts, meaning venue owners and trip organisers who hold an account to list venues or trips; and people whose details are given to us by someone else, for example a guest named on a booking made by a friend. If you give us another person’s details, you confirm that they know and have agreed to it.
Information you give us when you enquire
For a venue enquiry we collect your name, mobile number, the type of occasion, the dates and time slot you want (for example Morning, Evening, Full Day or Overnight), the number of guests and any message you write. For a trip enquiry we collect your name, phone number, email address if you choose to give it, your preferred departure date, the number of travellers and your message. When you ask us to help plan an outing or trip we collect your name, mobile number, the city or destination, the kind of trip, an approximate group size, your dates and whether you prefer to be contacted by phone or WhatsApp. We may ask you to confirm your mobile number with a one-time code so that we only act on genuine enquiries.
Information recorded when a booking is made
Bookings are recorded by our team or by the host once your stay or trip is agreed. A booking record holds the guest’s name, phone number and email address, the venue or trip, the dates and time slot, the number of guests, the agreed amount, whether it has been paid, a booking reference and any notes about the arrangements. Our team also keeps notes of calls and follow-ups linked to your enquiry so that whoever helps you next knows where things stand.
Information from hosts
When a host creates an account we collect their full name, email address, mobile number and a password, which we store in protected form. Where a host or staff member asks our team to create the account for them, we also keep an encrypted copy of the password we set, so that an authorised administrator can pass the sign-in details on; we recommend changing it after the first sign-in. We also hold the content hosts publish: venue names, addresses and map locations, room types and prices, photographs and videos, trip itineraries, departure dates, meeting points and terms. A trip organiser’s name and the date they started hosting are shown publicly on their trip pages. We record which subscription plan a host is on.
Information collected automatically
When a host signs in we record the IP address and the kind of device used (website or Android app). We use this to keep accounts secure and to limit repeated sign-in or code attempts. The website gives each browser a random identifier; if a trip search finds nothing, we record that identifier with the place searched so we learn which destinations people are looking for. Our servers keep short technical logs for security and troubleshooting. At present we do not use advertising cookies, analytics or tracking tools, and we do not build profiles of visitors. If that changes we will update this policy first.
Your location
If you allow it, the website or app uses your device’s location to show venues near you and how far away they are. Location is only requested when you ask for nearby results, is sent with that search to return the results, and is not saved to any profile. You can refuse, or switch it off at any time in your browser or phone settings; the rest of the platform still works.
Why we use your information
We use your information to answer your enquiry; to pass it to the venue owner or trip organiser who can confirm availability and price; to call, message or email you about that enquiry or booking; to arrange, confirm, change or cancel a booking and handle any refund; to run host accounts, publish listings and provide subscription features; to prevent fake enquiries, fraud and misuse; to understand, in aggregate, how the platform is used so we can improve it; and to meet our legal obligations. We rely on the consent you give when you submit a form or create an account, and, where the DPDP Act allows, on legitimate uses such as complying with the law. We will send promotional messages only if you have separately agreed, and you can stop them at any time.
Who we share it with
We share your enquiry or booking details — name, phone number, email address, dates, group size and message — with the venue owner or trip organiser it concerns, because they cannot respond to you otherwise. Hosts may use these details only for your enquiry or booking. We also use service providers who handle data on our behalf: an email delivery service, Google (maps and place search, which receive the text you type into a location search, and web fonts, which receive your IP address when a page loads), our hosting and file-storage infrastructure, and an AI writing tool that helps hosts draft trip descriptions, which receives listing content only and never guest details. If you choose to continue a conversation on WhatsApp, your messages are also handled under WhatsApp’s own terms. We may disclose information where the law requires it, to protect people’s safety, or to a successor if our business is transferred. We do not sell or rent your personal data.
Transfers outside India
Some of our service providers, such as Google and WhatsApp, may process data on servers outside India. We permit this only as the DPDP Act allows, and not to any country the Government of India has restricted.
Data stored in your browser or device
For signed-in hosts we set one sign-in cookie that scripts cannot read, is limited to signing in and lasts up to seven days, and we keep basic account details for the open tab. For every visitor the website stores, on your own device: the name and mobile number you last entered, so the enquiry form is filled in for you next time; the random browser identifier described above; your saved venues, favourite trips, recent searches and last trip search; and small markers so that pop-ups do not keep reappearing. Of these, only the random identifier — and anything you submit in a form — is sent to us. You can remove all of it by clearing your browser’s site data.
The Android app
The app asks for internet and network access, so it can load content and tell you when you are offline, and optionally for location, as described above. A host’s sign-in is kept in encrypted storage protected by Android’s keystore. The app does not take part in phone backups or device-to-device transfers, and it checks with our server whether a newer version is required.
How long we keep it
We keep enquiries for [24 MONTHS] after the enquiry is closed; booking records for up to eight years, as accounting and tax law requires; host accounts for as long as they are active and [12 MONTHS] after closure; and sign-in records for [90 DAYS]. One-time codes expire within minutes and are deleted once used. When a retention period ends we delete the data or make it anonymous, unless the law requires us to keep it longer.
How we protect it
The platform is served only over encrypted connections. Access is limited by role: a host sees enquiries and bookings for their own listings and no one else’s, and our staff see only what their work needs. Authorised support staff may temporarily act within a host’s account to resolve a problem; such access is time-limited and recorded. No system is perfectly secure, but if a breach affects your personal data we will inform you and the Data Protection Board of India as the law requires.
Your rights
Under the DPDP Act you may ask for a summary of the personal data we hold about you and who we have shared it with; ask us to correct, complete, update or erase it; withdraw consent you have given; nominate someone to exercise these rights if you die or become unable to; and have a grievance addressed. Write to bookmyoutings@gmail.com with the subject “Privacy request”, from the phone number or email address we hold if possible, so that we can confirm it is you. We will respond as soon as possible and within 30 days. Withdrawing consent does not affect what was done before, but we may then be unable to continue with an open enquiry or booking. If you are not satisfied with our response you may complain to the Data Protection Board of India.
Children
The platform is meant for adults. Enquiries and bookings must be made by someone aged 18 or over. A group booking may include children, but their details should be given only by a parent or guardian. We do not knowingly collect personal data directly from children, and we do not track children or show them targeted advertising.
Grievance Officer
If you have a concern about your personal data, contact our Grievance Officer, [GRIEVANCE OFFICER NAME], at bookmyoutings@gmail.com or +91 89714 17385, or by post at No. 480/B, 5th Floor, 18th Cross, 27th Main, HSR Layout, Sector 2, Bangalore, Karnataka 560102. We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days.
Changes to this policy
We may update this policy as the platform or the law changes. The date at the top of this page shows when it last changed. If a change materially affects how we use your data, we will say so on the platform, and email hosts, before it takes effect.
Contact us
For any question about this policy or your personal data, contact BookMyOutings at bookmyoutings@gmail.com or +91 89714 17385, or write to [REGISTERED LEGAL ENTITY NAME], No. 480/B, 5th Floor, 18th Cross, 27th Main, HSR Layout, Sector 2, Bangalore, Karnataka 560102.