Privacy Policy

This Privacy Policy explains how Offbit Holidays Private Limited collects, uses, stores, discloses and protects personal data when you interact with our website and services.

1. Introduction

Offbit Holidays Private Limited (“OBHPL”, “we”, “us” or “our”), having its registered office at Gajraj Chamber, 2nd Floor, Flat No- 2H & G, 86B/2 Topsia Road, Park Circus Connector, Kolkata – 700046, West Bengal, India, is committed to protecting the privacy and security of your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, www.offbitholidays.in, enquire about our services, purchase a membership, make a holiday booking, participate in our programmes, apply for employment or otherwise interact with us.

This Policy applies to customers, prospective customers, members, website visitors, job applicants, nominees, accompanying travellers and other individuals whose personal data we process in connection with our business.

2. Personal Data We Collect

Depending on your interaction with us, we may collect the following categories of personal data:

• Contact details: Name, email address, postal address, country and telephone number.
• Membership and service details: Membership ID, registration information, membership benefits, preferences and service history.
• Travel and booking details: Destination, travel dates, room requirements, guest details, accompanying travellers, children's ages and relevant booking preferences.
• Financial and transaction details: Payment records, transaction amounts, billing information and refund or redemption history. Payment credentials are handled according to applicable law and the arrangements of the relevant payment provider.
• Technical information: IP address, device and browser information, website usage data, cookies and similar technologies, where applicable.
• Feedback and communications: Enquiries, complaints, reviews, ratings, survey responses and correspondence with us.
• Recruitment information: CVs, qualifications, application details, interview records, references and other employment-related information.
• Identity and other relevant information: Date of birth, age, nationality, government-issued identification details and other information necessary for a specific service or legal requirement.

We endeavour to collect only personal data that is reasonably necessary for the relevant purposes.

3. How We Collect Personal Data

We may collect personal data directly from you through our website, membership applications, booking forms, emails, telephone calls, messages, supporting documents and other communications.

We may also receive relevant information from a person acting on your behalf, a referrer, a hotel, a travel partner or another service provider involved in fulfilling your request.

Technical information may be collected automatically when you visit our website, subject to applicable law and relevant cookie or tracking settings.

4. Purposes of Processing

We may process your personal data for the following purposes:

1. To provide and administer memberships, holiday accommodation benefits, travel bookings and related services.
2. To verify your identity and manage membership registration and account records.
3. To coordinate reservations, hotel check-ins, guest services and travel arrangements with relevant service providers.
4. To process payments, refunds, transactions and applicable membership benefits.
5. To respond to enquiries, feedback, complaints and customer support requests.
6. To send booking confirmations, service updates, administrative communications and other relevant information.
7. To improve our website, services, customer experience and business operations.
8. To maintain records, prevent fraud, protect our systems and address security concerns.
9. To meet applicable legal, regulatory, accounting and reporting obligations and establish, exercise or defend legal claims.
10. To assess job applications and manage recruitment processes.
11. To send promotional or marketing communications where permitted by applicable law and, where required, with your consent.

5. Legal Basis and Consent

We process personal data for purposes permitted under applicable law, including providing requested services, fulfilling contractual obligations, complying with legal requirements, pursuing legitimate business purposes where permitted, and relying on consent where required.

Where processing is based on consent, you may withdraw your consent in accordance with applicable law. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Sharing and Disclosure of Personal Data

We do not disclose personal data indiscriminately. Where necessary for the purposes described in this Policy, we may share relevant information with:

• Hotels, resorts, accommodation providers and travel partners.
• Payment gateways, banks and financial service providers.
• Website hosting, IT, cloud storage and customer-support providers.
• Professional advisers, auditors and legal representatives.
• Government authorities, regulators or law enforcement agencies where disclosure is legally required or permitted.
• Other parties where you have requested or authorised the sharing, or where otherwise permitted by applicable law.

Service providers receiving personal data are expected to handle it in accordance with applicable legal requirements and relevant contractual arrangements.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining membership and booking records, meeting legal and accounting obligations, resolving disputes and preventing fraud.

When personal data is no longer required, we will take appropriate steps to delete it, anonymise it or otherwise handle it in accordance with applicable law and our retention practices.

8. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.

However, no method of electronic transmission or storage is entirely secure. We cannot guarantee absolute security of information transmitted over the internet.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality, understand usage patterns, improve user experience and, where applicable, measure marketing performance.

You may be able to manage cookies through your browser settings. Disabling certain cookies may affect website functionality. Where required, we will seek consent before using non-essential cookies or similar technologies.

10. Third-Party Websites and Services

Our website may contain links to third-party websites, booking services, payment providers, maps, review platforms or other external services. These services may have their own privacy policies and practices.

We encourage you to review the applicable privacy policies before providing personal data to third parties. We are not responsible for the privacy practices of independent third-party services, except to the extent required by applicable law.

11. International Data Transfers

Where necessary to arrange international travel or use service providers located outside India, relevant personal data may be transferred across borders. Such transfers will be handled in accordance with applicable legal requirements.

12. Children's Personal Data

We may need limited information about accompanying children to arrange travel and accommodation. Where children's personal data is involved, we will handle it in accordance with applicable law and any required parental or guardian consent.

Parents or legal guardians should contact us if they believe that personal data relating to a child has been provided or processed inappropriately.

13. Your Privacy Rights

Subject to applicable law, you may have the right to request access to information about your personal data, correction or updating of inaccurate information, deletion where legally permissible, information about processing, withdrawal of consent where applicable, and access to available grievance-redressal mechanisms.

Requests may be subject to identity verification, legal obligations, retention requirements and other applicable restrictions.

14. Marketing Communications

We may send promotional offers, holiday updates and information about our services where permitted by law and, where required, with your consent.

You may opt out of promotional communications by following the unsubscribe instructions in the message or contacting us directly. We may continue to send essential service-related communications, such as booking confirmations and important account notices.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices or applicable law. The revised version will be published on this page with an updated revision date.

We encourage you to review this page periodically to remain informed about our privacy practices.

16. Contact and Grievance Redressal

If you have questions, concerns, requests or complaints regarding this Privacy Policy or the handling of your personal data, please contact Offbit Holidays Private Limited using the details below.