Privacy Policy

Last updated: October 18, 2025

Quick summary (for clarity)

• • We only collect data needed to plan, book, and support your journey.
• • We do not sell your personal data.
• • Health and sensitive data is used only when you voluntarily share it for travel or medical support.
• • You can request access, correction, or deletion of your data anytime.
• • One accountable team owns your data across the GoBaby Travel OS.

GoBaby Travel, including all legal entities affiliated to the company ("Company" or "we"), respects your ("you" or "user") privacy and values our relationship with our business partners, clients, third parties having contractual relationship with Company ("third party" or "service provider"), and any party who purchases, intends to purchase, or inquires about any product(s) or service(s) made available by Company through any customer interface channels, including website, mobile site, mobile app, and offline channels such as call centers and offices ("Sales Channels").

We are committed to protecting your personally identifiable information ("personal information" or "personal data") by handling it responsibly and safeguarding it using appropriate technical and organizational measures. We follow appropriate standards to protect your privacy across our Sales Channels. This policy outlines the types of personal information collected on our Website, how this data is used/processed, safeguarded, and how users may exercise their rights with respect to personal information.

Scope of This Policy

This Privacy Policy applies to https://gobabytravel.com, Company pages, communications, and services ("Services"), including off-site Services such as our email services, customer care, support services, and various plugins on our digital properties. By using or accessing the Website or other Sales Channels, you agree to the terms of this Privacy Policy.

Important notes

• • This Privacy Policy does not apply to any website(s), mobile sites, or mobile apps of third parties, even if linked to our Website. Please review the privacy statements of any such third parties.
• • If you book travel services for family or a minor, you agree to inform the individual about the content of this privacy policy and obtain any legally required consent for the collection, use, disclosure, and transfer (including cross-border transfer) of personal information.

1. Personal Data We Collect

2. How We Collect Data

• Directly: From you, via registrations, bookings, forms, digital communications, business cards, service requests, webinars/events, account creation, and hosted applications.
• Indirectly: From travel agents, third-party websites, social media authentication, authorized representatives, public sources, and business clients.

3. Lawful Basis for Processing

We may process personal data under one or more of the following lawful bases:

• • Contractual obligations (service fulfilment and support).
• • User consent for specific purposes.
• • Legitimate interests (business operations, communications, security, fraud prevention).
• • Legal and regulatory obligations.

We comply with the Digital Personal Data Protection Act, 2023 (India), along with applicable international privacy regulations.

4. How We Use/Process Data

We use your personal data to:

• • Fulfil travel bookings and reservations.
• • Operate rewards, loyalty, and membership programs (manage accounts, points, benefits, personalized offers).
• • Improve user experience and site/app performance, including via analytics tools (such as Google Analytics, Appsflyer, Facebook Pixel, Microsoft Clarity, Crashlytics).
• • Provide customer support and resolve issues or complaints.
• • Communicate service updates, itinerary changes, and important notices.
• • Conduct marketing and remarketing (with opt-out options).
• • Comply with applicable laws, regulations, and reporting obligations.

Important: We do not sell or trade your personal information. If you choose not to provide certain data, you may not be able to access some services or features.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• • User authentication and site security.
• • Personalizing experience (language, region, saved preferences).
• • Analytics and performance tracking (including Google Analytics, Appsflyer, Facebook Pixel, Microsoft Clarity, Crashlytics).
• • Advertising and remarketing.
• • Site functionality (for example, remembering form inputs and survey responses).

You can control cookies through your browser settings. Blocking some types of cookies may impact your experience or certain features.

6. Sharing Your Personal Data

We may share your data with:

• • Travel service providers: wholesalers, tour operators, airlines, hotels, car rental firms, transfer companies.
• • IT vendors, hosting providers, analytics and software providers (including those listed above).
• • Payment processors and gateways (for example, PayU, PayPal).
• • Loyalty, rewards, and membership program partners (when you opt in).
• • Group companies, affiliates, and contracted service providers supporting our operations.
• • Government authorities, regulators, law enforcement, and courts where required by law.
• • Other organizations if our business is restructured, merged, or sold, subject to appropriate safeguards.

Third-party vendors serving ads may collect anonymized or pseudonymized visit data for marketing and measurement purposes.

7. Cross-Border Data Transfers

Information may be stored or processed in countries where our service providers or technology partners operate, including India and other jurisdictions, subject to appropriate safeguards and contractual protections.

Non-personal, aggregated, or anonymized information may be shared globally for analytics, research, and service improvement.

8. Data Security

We implement technical and organizational security measures designed to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure.

All online payments are processed by PCI-compliant payment providers. You are responsible for keeping your account credentials and devices secure.

9. Your Rights

Depending on applicable law, you may have the right to:

• • Request access to your personal data.
• • Request correction or updating of inaccurate or incomplete data.
• • Request deletion of your personal data (subject to legal or contractual obligations).
• • Restrict or object to certain types of processing, including direct marketing.
• • Request portability of certain data in a commonly used format.
• • Withdraw consent at any time, where processing is based on consent.
• • Request review of automated decision-making where applicable.

We may need to verify your identity before responding to a request and may retain certain data where required by law or for legitimate business purposes.

10. Data Retention

We retain personal data for the longer of: the period required to deliver services and maintain your relationship with us, the period required under applicable law or regulation, or the period necessary in connection with actual or potential litigation, investigations, or disputes.

Booking and transactional records are typically retained for up to 7 years to meet legal, tax, and audit requirements, unless a longer retention period is required by law or ongoing disputes. Certain minimal information may be retained in backup or archive systems for continuity and compliance purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date, and, where appropriate, notified to you through our Services.

12. Contact

For questions, access/correction requests, or privacy complaints, you can contact us at:

Annexure A: Cookie Notice

We use cookies to improve user experience, website functionality, analytics, and advertising. You can control cookies in your browser settings. For more information on specific third-party tools, please refer to their privacy and data practices:

You can contact [email protected] for more information about our cookies and analytics practices.

Policy coverage note

This policy also covers upcoming features such as rewards, loyalty, and memberships. When new features are launched, any material changes to data use will be reflected here.

Last Updated: October 18, 2025
Version 1.0