PRIVACY POLICY – Toorzi.com
Digital Personal Data Protection Act, 2023 & Information Technology Act, 2000 Compliance
Toorzi.com (“Toorzi”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and other applicable Indian laws.
This Privacy Policy explains how personal data is collected, processed, stored, shared, and protected when you use our website, mobile application, and related services (“Platform”).
By accessing or using Toorzi.com, you consent to the processing of your personal data as described in this Policy.
1Definitions (As per DPDP Act, 2023)
- Data Principal: The individual to whom the personal data relates (you, the user).
- Data Fiduciary: Toorzi.com, which determines the purpose and means of processing personal data.
- Personal Data: Any data about an identifiable individual.
- Processing: Collection, storage, use, sharing, or deletion of personal data.
- Consent: Free, specific, informed, unconditional, and unambiguous indication of agreement.
2Personal Data We Collect
Toorzi.com collects only such personal data as is necessary, lawful, and proportionate for providing its services.
a. Personal Information
- Name
- Age
- Phone number
- Email address (if provided)
b. Identity Verification (Aadhaar & OTP)
- Aadhaar-based OTP may be used solely for identity verification
- Aadhaar numbers, biometrics, or copies are NOT collected or stored
- Verification is transient and discarded immediately after confirmation
c. Optional User Content
- Profile photos or videos (optional)
- Reviews or shared media content
d. Booking & Transaction Data
- Booking details (hotel, travel dates, services)
- Transaction references (payments processed via secure gateways)
e. Technical Data
- IP address, device type, app usage logs
- Cookies and similar tracking data (see Section 9)
3Lawful Purpose & Use of Data
Personal data is processed only for lawful purposes, including:
- Providing booking, travel, and Tour Mate services
- Identity verification and fraud prevention
- Customer support and communication
- Improving platform performance and user experience
- Ensuring platform safety and legal compliance
- Fulfilling statutory and regulatory obligations
We do not process personal data for purposes unrelated to platform functionality without consent.
4Consent & Withdrawal
- Consent is obtained at the time of data collection through clear notice.
- Users may withdraw consent at any time, subject to legal or contractual obligations.
- Withdrawal may limit access to certain features or services.
5Aadhaar & Identity Data Compliance
- Aadhaar is used only for OTP-based verification.
- No Aadhaar numbers, documents, or biometric data are stored.
- Processing complies with applicable UIDAI and Indian legal guidelines.
- Verification data is not reused or retained.
6Data Sharing & Disclosure
Toorzi.com does not sell or monetize personal data.
Data may be shared only with:
a. Service Providers: Hotels, drivers, tour operators — only minimum booking-related information required for service delivery.
b. Legal Authorities: Government bodies, courts, or regulators when legally required.
c. Security & Compliance: To prevent fraud, investigate misuse, or enforce legal rights.
All recipients are expected to maintain appropriate data protection safeguards.
7Data Retention & Deletion
- Personal data is retained only for as long as necessary.
- Data may be retained longer where required by law, taxation, or dispute resolution.
- Upon fulfillment of purpose or valid deletion request, data is securely erased or anonymized.
8Rights of Data Principals (Users)
Under the DPDP Act, 2023, users have the right to:
- Access information about personal data being processed
- Correction and updating of inaccurate or incomplete data
- Erasure of personal data no longer required
- Withdraw consent at any time
- Grievance redressal
- Nominate another individual to exercise rights in case of incapacity or death
Requests may be submitted using the contact details below.
9Cookies & Tracking Technologies
Toorzi.com uses cookies to:
- Maintain session security
- Improve functionality and analytics
- Enhance user experience
Users may control cookies through browser or device settings.
10Data Security Safeguards
We implement reasonable security safeguards, including:
- Encrypted communication
- Access controls and authentication
- Periodic security reviews
However, no system is completely secure, and users acknowledge inherent digital risks.
11Children’s Data
Toorzi.com services are intended for individuals 18 years and above. We do not knowingly process personal data of children.
12Grievance Redressal Officer (DPDP Act Compliant)
In accordance with the DPDP Act, 2023, users may contact our Grievance Officer:
Name: Grievance Officer – Toorzi.com
Email:privacy@toorzi.com/support@toorzi.com
Websites:www.toorzi.com•www.toorzi.in
We shall address grievances within the time period prescribed under law.
13Policy Updates
This Privacy Policy may be updated periodically to comply with legal, regulatory, or operational changes.
Continued use of Toorzi.com after updates constitutes acceptance of the revised policy.