Privacy Policy

1. Introduction

Yatralo ("Yatralo", "we", "us" or "our") operates the website yatralo.com and related services that let you search, compare and book flights, hotels, trains, holiday packages and other travel services (together, the "Services").

This Privacy Policy explains how we collect, use, share and protect your personal information when you use our Services. By using Yatralo, you agree to the practices described here. This policy is designed to comply with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

2. Information we collect

Information you give us

• Account details — name, email address, mobile number and password.
• Traveller details — names, date of birth, gender, nationality, passport or government ID details where required by airlines, hotels or authorities.
• Booking details — travel dates, destinations, preferences, special requests and frequent flyer numbers.
• Payment details — processed securely by our payment partners. We do not store your full card number or CVV.
• Communications — messages, reviews, feedback and support conversations with us.

Information collected automatically

• Device and browser information, IP address and approximate location.
• Pages visited, searches made, links clicked and time spent on our Services.
• Information from cookies and similar technologies (see Section 5).

3. How we use your information

• To process and confirm your bookings and send tickets, vouchers and itineraries.
• To provide customer support, including changes, cancellations and refunds.
• To send important trip updates such as schedule changes, delays and check-in reminders.
• To personalise search results, recommendations and offers.
• To send promotional emails and messages, only where you have opted in. You can unsubscribe anytime.
• To detect and prevent fraud, abuse and security incidents.
• To comply with legal obligations and respond to lawful requests from authorities.
• To analyse usage and improve our website and Services.

4. Sharing your information

We never sell your personal information. We share it only as needed to deliver your trip and run our business:

• Travel suppliers — airlines, hotels, railways, transport and activity providers who fulfil your booking.
• Service providers — payment gateways, cloud hosting, email/SMS delivery, analytics and customer support tools, bound by confidentiality obligations.
• Legal and safety — government authorities, immigration or law enforcement where required by law.
• Business transfers — in connection with a merger, acquisition or sale of assets, with your information remaining protected under this policy.

5. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how our site is used and show you relevant offers. You can control or delete cookies through your browser settings, though some features may not work properly without them.

6. Data security

We use industry-standard safeguards including TLS encryption, access controls and PCI-DSS compliant payment processing to protect your data. While no system is completely secure, we continually review and improve our security practices.

7. Data retention

We keep your personal information only for as long as needed to provide the Services, meet legal, tax and accounting requirements, resolve disputes and enforce our agreements. After that, it is securely deleted or anonymised.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Withdraw consent for marketing communications at any time.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these rights, email us at neeraj@yatralo.com.

9. Children's privacy

Our Services are intended for users aged 18 and above. Bookings for minors must be made by a parent or legal guardian. We do not knowingly collect personal information from children without verifiable parental consent.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll notify you by email or through a notice on our website. The "Last updated" date at the top shows when it was last revised.

11. Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact our Grievance Officer: