DPDP Compliance

Indian Travel Express is committed to respecting your rights under the Digital Personal Data Protection Act, 2023 (DPDP). This page explains how we comply with India’s data protection law and how you can exercise your rights as a data principal.

Scope and Applicability

The DPDP applies to the processing of digital personal data within India. While Indian Travel Express does not require user registration or maintain a database of personal information, we may collect limited, non-identifiable data through automated means such as cookies and web analytics to improve site functionality and user experience. This data is processed in compliance with the DPDP’s principles of lawfulness, purpose limitation, and data minimization.

Your Rights Under DPDP

As a data principal, you have the following rights under the DPDP:

• Right to access your digital personal data processed by us
• Right to correction of inaccurate or incomplete data
• Right to withdrawal of consent for any processing based on consent
• Right to grievance redressal if you believe your rights have been violated

Please note: Since we do not collect personally identifiable information through registration or forms, most rights apply only to data automatically collected via cookies or analytics tools.

How We Comply

Indian Travel Express complies with the DPDP by:

• Collecting only minimal, non-identifiable data necessary for site operation
• Not storing personal data in databases or user profiles
• Using third-party analytics tools that anonymize data by default
• Providing clear notice about data collection via our Privacy Policy
• Not sharing data with third parties for commercial purposes

Data We Process

We may process the following types of digital personal data:

• IP addresses (anonymized)
• Browser type and device information
• Pages visited and time spent on site
• Cookie identifiers (for session and preference management)

This data is aggregated and anonymized. No names, emails, phone numbers, or other identifiers are collected or stored.

Legal Basis for Processing

Our processing is based on legitimate interest under Section 5(2) of the DPDP, to ensure the website functions properly, enhances user experience, and supports site security and analytics. We do not rely on consent for this limited processing, as it is not intrusive and does not involve sensitive personal data.

How to Exercise Your Rights

To exercise your rights under the DPDP, please contact us at:

Email: [email protected]

Include in your message:

• Your name (if known)
• A description of the data you wish to access or correct
• Any relevant details about your interaction with our website

We will respond within 30 days of receiving your request.

Response Timeframes

Under the DPDP, we are required to respond to your requests within 30 days. If we need additional time, we will notify you with a reason for the delay.

No Discrimination Policy

We will not deny you access to our website, charge you different prices, or provide you a different quality of service because you exercised your rights under the DPDP.

Updates and Changes

We may update this DPDP Compliance page periodically to reflect changes in the law or our practices. The latest version will always be posted here with an updated effective date.

Contact Information

For any questions, requests, or complaints regarding your data under the DPDP, please contact:

Name: Ethan Whittaker
Email: [email protected]
Address: 134 Meadowbank Rd, Meadowbank, Auckland 1072, New Zealand

You also have the right to file a complaint with the Digital Personal Data Protection Authority established under the DPDP if you are unsatisfied with our response.