The short version
To book travel for you we need your name, contact details and identity documents, and we have to pass some of that to the airline, hotel or operator carrying you. We do not sell your data to anybody. We never see your full card number. You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it.
The rest of this page is the detail.
1. Who is responsible for your data
GoGlobally Holidays Private Limited, at 2nd Floor, MG Road, Bengaluru 560001, is the data fiduciary for the personal data described here. Questions, requests and complaints go to hello@goglobally.local.
2. What we collect
You give us:
- Name, date of birth, gender, nationality
- Email address, phone number, postal address
- Passport number, expiry and issuing country; or another government ID where domestic travel requires one
- Traveller details for everyone in your booking
- Dietary requirements, mobility needs, and any medical information you choose to tell us so we can arrange it
- Frequent flyer and loyalty numbers, seat and meal preferences
- Messages, call recordings and chat transcripts when you contact us
We collect automatically:
- IP address, browser and device type, operating system
- Pages viewed, searches run, and what you clicked — see the Cookie Policy
- Approximate location derived from your IP address, used to default the currency and the nearest airport
We receive from others:
- Booking and ticketing confirmations from airlines, hotels and operators
- Payment outcomes from our payment gateway (approved or declined, and the last four digits — never the full number)
- Your name and email address from Google, if you choose to sign in with it
3. Sensitive data, and the care it needs
Passport numbers, and any health or dietary information you give us, get more protection than the rest: access inside the company is limited to the staff handling your booking, they are not used for marketing, and they are shared only with the supplier that actually needs them. A wheelchair request has to reach the airline; it does not reach anybody else.
4. Why we use it, and on what basis
- To perform the contract you asked for — making the booking, issuing tickets, meeting the supplier's identity requirements, supporting you during the trip, processing refunds.
- To comply with law — tax and GST records, invoices, anti-money-laundering checks, and immigration or security data a government requires an airline to collect (Advance Passenger Information, for example).
- With your consent — marketing emails, WhatsApp updates about offers, and the non-essential cookies described in the Cookie Policy. You can withdraw consent at any time without affecting a booking.
- For our legitimate interests — preventing fraud, securing the website, improving what we sell, and defending a legal claim. We balance these against your privacy and do not use them to justify anything intrusive.
5. Who we share it with
- Travel suppliers: the airline, hotel, bus operator, transfer company, insurer or visa centre your booking involves. This is unavoidable — a ticket cannot be issued without a passenger name.
- Payment gateways, to take the payment and handle refunds and chargebacks.
- Service providers who run things on our behalf: hosting, email delivery, SMS and WhatsApp messaging, analytics, our accountants and auditors. They act on our instructions and may not use your data for their own purposes.
- Government authorities, where the law requires it or a court orders it.
- A buyer of the business, if it is ever sold — with your data remaining subject to a policy at least as protective as this one.
We do not sell personal data, and we do not share it with data brokers or advertisers for them to use for their own purposes.
6. Data leaving India
Booking travel moves data across borders by its nature: an overseas hotel, an overseas airline, a foreign embassy processing a visa. Some of our own service providers also operate outside India. Where that happens we transfer only what is needed, under contractual protections, and only to the extent the law permits.
7. How long we keep it
- Booking records, invoices and tax documents: 8 years, which is what tax law requires of us.
- Passport and ID details: until the trip is complete and the retention period for the supplier's own records has passed; normally not more than 12 months after travel, unless a dispute is open.
- Marketing consent and preferences: until you withdraw them.
- Website analytics: 26 months.
- Call recordings: 12 months.
When a period ends we delete the data or anonymise it so it can no longer identify you.
8. Your rights
You can ask us to:
- Give you a copy of the personal data we hold about you, and tell you who we have shared it with
- Correct anything inaccurate or incomplete
- Delete data we no longer have a lawful reason to keep — we will explain if a tax or legal retention rule stops us
- Withdraw consent to marketing, instantly, through the unsubscribe link in any email or by writing to us
- Nominate someone to exercise these rights if you die or become incapacitated
Write to hello@goglobally.local with enough detail to identify you. We respond within 30 days. There is no charge. If we refuse, we say why, and you may escalate — see the Grievance Redressal page, and after that to the Data Protection Board of India.
9. Security
Traffic to the site is encrypted with TLS. Passwords are stored as salted hashes, never in a readable form. Access to booking data is restricted by role and logged. Card details are handled entirely inside a PCI-DSS compliant gateway — they do not reach our servers, which is why we cannot tell you your own card number.
No system is perfectly secure. If a breach affects your data we will notify you and the Data Protection Board as the law requires, and tell you plainly what happened and what to do about it.
10. Children
We do not knowingly collect data directly from anyone under 18. A child's details reach us from the adult booking the trip, which is how family travel works. If you believe we hold a child's data without a parent's involvement, tell us and we will remove it.
11. Marketing
If you have booked with us or asked us for a quote, we may email you about similar travel. Every message has a one-click unsubscribe, and acting on it stops the marketing without affecting anything you have booked. WhatsApp and SMS marketing is opt-in only.
12. Changes
We will post any update here with a new effective date, and tell you by email if the change is significant.
13. Contact
Privacy questions: hello@goglobally.local. By post: GoGlobally Holidays Private Limited, 2nd Floor, MG Road, Bengaluru 560001.
Effective from .