Privacy Policy

1. Who we are

This Privacy Policy is issued by Urban Wings Travel, a proprietorship concern of Yash Kumar, having its registered office at 5, Wings Tower, Rasha Govind Marg, Jaipur, Rajasthan 302003, India. We are registered as a micro enterprise with the Ministry of Micro, Small and Medium Enterprises, Government of India under Udyam Registration Number UDYAM-RJ-17-0665346, under National Industry Classification code 79110 — Travel agency activities.

In this policy, "we", "us" and "our" mean Urban Wings Travel. "You" means any person who visits urbanwingstravel.pro, enquires with us, or engages us to arrange travel. For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary in respect of the personal data described below, and you are the Data Principal.

2. Personal data we collect

We collect only what we need to answer your enquiry and arrange the travel you ask us to arrange.

2.1 Data you give us directly

• Identity and contact data — name, email address, telephone or WhatsApp number, and postal address where an invoice or courier is required.
• Travel data — destinations, dates, number of travellers, budget indications, seat and meal preferences, and any accessibility, mobility, dietary or medical requirements you choose to tell us so that we can arrange travel that works for you.
• Passport and identity documents — passport copies, photographs, and supporting documents such as bank statements, employment letters, invitation letters and previous visa records, where these are required for ticketing, hotel registration or a visa application.
• Payment-related data — the fact and amount of a payment and the reference number. We do not collect or store full card numbers, CVV codes, UPI PINs or net-banking credentials. Card payments are handled entirely by PCI-DSS compliant payment gateways.
• Corporate account data — for managed accounts, traveller profiles, cost centres, approval hierarchies and travel policy parameters supplied by your employer.

2.2 Data collected automatically

• Technical data — IP address, browser type and version, device type, operating system, and referring page.
• Usage data — pages viewed, time on page and navigation paths, collected in aggregate.

See our Cookie Policy for how this is collected and how to control it.

2.3 Special categories

Some travel arrangements require health information — a mobility requirement, a medical clearance for a flight, or a dietary restriction arising from a medical condition. We collect this only where you provide it, use it only to make the arrangement, and share it only with the specific airline, hotel or operator that must know.

3. Why we process your data, and on what basis

4. Who we share your data with

Arranging travel necessarily means passing your details to the suppliers who will actually carry, accommodate or admit you. We share the minimum required, with:

• Airlines and Global Distribution Systems — name exactly as per passport, contact details, passport data and special service requests.
• Hotels, resorts and ground operators — names, arrival details and any requirement relevant to your stay.
• Consulates, embassies and visa application centres — the complete application file for the visa you have asked us to file.
• Transport operators and drivers — name, contact number, pickup details and flight number.
• Insurers — where you ask us to arrange travel insurance.
• Payment gateways and our bank — for processing and reconciliation.
• Professional advisers and authorities — where required by law, court order or a lawful request from a government agency.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

5. International transfers

International travel requires transferring data outside India — to the airline flying you, the hotel hosting you and the consulate deciding your visa. By asking us to arrange international travel you accept that these transfers are unavoidable and necessary to perform the service. We transfer only what the specific supplier requires, and only to countries not restricted for such transfers by the Central Government under the DPDP Act.

6. How long we keep it

7. How we protect it

• Transport encryption (HTTPS/TLS) across the website.
• Access limited to staff who need it for your booking, on a least-privilege basis.
• Passport and financial documents held in access-controlled storage and destroyed on schedule.
• No card data stored by us at any time.
• Confidentiality obligations in every staff contract.
• Breach response procedures, including notification to you and to the Data Protection Board of India as required under the DPDP Act.

No system is perfectly secure, and we will not claim otherwise. If a breach affecting your data occurs, we will tell you what happened, what was affected, and what we are doing about it.

8. Your rights

Under the DPDP Act you have the right to:

• Access — obtain confirmation of what we hold and a summary of processing.
• Correction — have inaccurate or incomplete data corrected or completed.
• Erasure — have data deleted where it is no longer needed and no law requires us to keep it.
• Withdraw consent — at any time, as easily as it was given. Withdrawal does not affect processing already carried out.
• Grievance redressal — raise a complaint with us and receive a response.
• Nominate — nominate a person to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these, write to [email protected]. We respond within 30 days. We may ask you to verify your identity first, because releasing travel data to the wrong person would be a worse outcome than a short delay.

Note that where you ask us to delete data we still need to arrange travel you have booked, we may not be able to continue with that booking.

9. Children

We do not knowingly collect data directly from anyone under 18. Where children travel, their details are provided by a parent or guardian who provides consent on their behalf, and we process that data only to make the travel arrangement.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made under it, and the Consumer Protection (E-Commerce) Rules, 2020:

Yash Kumar
Proprietor & Grievance Officer
Urban Wings Travel
5, Wings Tower, Rasha Govind Marg, Jaipur, Rajasthan 302003, India
Email: [email protected]
Telephone: +91 95809 18157

Complaints are acknowledged within 48 business hours and resolved within 30 days of receipt. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

11. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The "last updated" date at the top of this page always reflects the current version. Where a change materially affects your rights, we will notify you directly by email before it takes effect.

12. Contact

Questions about this policy or about how we handle your data: [email protected], or write to us at 5, Wings Tower, Rasha Govind Marg, Jaipur, Rajasthan 302003, India. Our registered email for service of formal notice is [email protected].