Effective Date: 23/07/2025
Last Updated: 23/07/2025

tripbutter.com ("tripbutter", "tripbutter.com" "we", "our", "us") respects your privacy and is committed to protecting the personal data, that you share with us through our platform, website [(tripbutter.com; tripbutter)], mobile application(s), and related services (collectively, the "Platform").

This Privacy Policy outlines how we collect, use, disclose, transfer, and safeguard your personal information in compliance with the applicable laws of India, including the Information Technology Act, 2000 and the Rules framed thereunder.

1. SCOPE AND PURPOSE

1.1 This Privacy Policy applies to:

• All users of our website and platform, including registered users, vendors, partners, tour masters, travellers, and customers.
• All services offered through our platform, including all types of travel listing, booking facilitation, content display, and user interaction.

1.2 The Purpose of this Policy is:

We respect your need to understand how and why information is being collected, used, disclosed, transferred and stored. Thus, we have developed this Privacy Policy to familiarize you with our practices. This policy sets out the way in which we process your information when you use our website or other digital platforms in accordance with applicable data protection laws. It is important that you read this policy together with any other policies we may provide on specific occasions when we are collecting or processing your personal data, so that you are fully aware of how and why we are using your personal data. This policy supplements the other notices and is not intended to override them.

2. WHO IS THE "CONTROLLER" OF YOUR PERSONAL DATA

A "Controller" is a person or organization who alone or jointly determines the purpose of which, and the manner in which, any personal data is, or is likely to be, processed. This notice is issued on behalf of Adeptus Traveltech Private Limited as controller.

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.

As the circumstances warrant, Adeptus Traveltech Private Limited may be Controller and / or Processor of your personal data, which would not in any manner whatsoever, tantamount to breach of privacy.

3. INFORMATION WE COLLECT

We may collect the following categories of personal and sensitive personal data:

A. Personal Information / Contact Data

• Name
• Email address
• Mobile number
• Gender
• IP address
• Geolocation data
• Travel preferences
• Address (billing/shipping)
• Government-issued ID – Aadhar / PAN and any other required KYC Documents (where applicable for KYC/travel purposes)
• For Vendor/(s) – GSTIN Registration, other related documents etc.

B. Sensitive Personal Data

• Financial information: payment methods, UPI IDs, bank details (when required for bookings)
• Passwords or authentication credentials
• Travel records, history, passport details, A2 form, air tickets, or travel authentication documents.

C. Automatically Collected Information

• Device and browser information
• Access logs
• Clickstream data
• Cookies, tags, pixels (refer to Cookie Policy)

4. MODES OF COLLECTING DATA

• Direct Interaction
• Cookies and other technologies
• Third party and other publicly available resources.

5. LEGAL BASIS / GROUNDS FOR PROCESSING

We collect and process personal data under the following lawful bases:

• "Consent" for marketing, profiling, optional features
• "Performance of Contract" (for bookings, payments, services)
• "Legal or Regulatory Obligation" (for taxation, regulatory compliance)
• Legitimate Interests (analytics, fraud prevention, service improvement)

We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

6. USE OF YOUR INFORMATION / PERSONAL DATA

We use your data for purposes including but not limited to:

• Facilitation of travel-related services via third-party vendors
• Communication about bookings, confirmations, and alerts
• Customization and personalization of your user experience
• Sending promotional offers, newsletters, updates (if opted-in)
• Processing payments and refunds
• Internal analytics and platform optimization
• Compliance with legal obligations

"Non-personal data" is data which can never be used to identify an individual. We may collect information regarding customer activities on our various portals. This aggregated information is used in research, analysis, to improve and monitor products and for various promotional schemes. It may be shared in aggregated, non-personal form with third party to enhance customer experience, products offering or services.

7. INFORMATION SHARING & DISCLOSURE

This part of the policy covers as to who will have access to and / or will be shared your personal data including but not limited to, group companies of tripbutter.com, service providers suppliers, and vendors which also shall inter-alia include the following:

A. Third-Party Service Providers

• Travel service providers (hotels, airlines, tour operators, transport companies etc.)
• Payment gateways and processors
• Cloud hosting and data storage vendors
• SMS and email service providers
• Analytics tools (e.g., Google Analytics)

B. Government & Legal Authorities

We may disclose information in response to legal obligations, court orders, enforcement actions, or regulatory requirements.

C. Affiliates and Business Partners

Where services are co-branded or jointly offered, your data may be shared with our trusted partners and Service providers.

D. Merger or Acquisition

In the event of merger, acquisition, restructuring, or sale of business assets, user information may be part of the transferred assets.

8. DATA RETENTION

We retain your personal data:

• As long as your account remains active or as necessary to provide services
• For a period of 5 years post last transaction for tax and regulatory purposes
• Until withdrawal of consent or request for erasure, whichever is applicable
• Data no longer required will be anonymized or securely deleted.

9. CROSS-BORDER DATA TRANSFERS

Your information may be transferred to, and processed in, countries other than India where our servers or service providers are located. We ensure adequate safeguards such as contractual clauses, encrypted transfers, or adherence to applicable data protection standards.

10. USER GENERATED CONTENT

tripbutter.com provides an option to its users to share their travel experiences through reviews, blog articles, ratings, etc. Users also have the option to provide feedback or raise queries regarding services offered by tripbutter.com or respond to questions posted by other users on the platform.

tripbutter.com may also engage third-party agencies to contact you for feedback regarding your recent booking or travel experience with tripbutter.com. While participation in such feedback initiatives is purely voluntary, you may still receive emails, app notifications, SMS, WhatsApp messages, or alerts through other messaging services, inviting you to share your reviews. These reviews may be in the form of written feedback (with or without images) or in video format. The reviews and content posted by you may be displayed on the tripbutter.com platform and may also be visible on other travel or travel-related platforms.

The types of User Generated Content that tripbutter.com may collect include the following:

• Articles for website or blog
• Reviews and ratings
• Questions and answers
• Crowd-sourced data (poll questions)

Each user posting a review, rating, question, answer, videos or image may have a user profile that can be accessed by other users. Such profiles may display the number of trips taken, reviews written, questions asked and answered, and photographs shared.

All users must exercise caution and ensure that the views or content posted by them on the tripbutter.com platform or on associated social media platforms are not:

• Derogatory
• Contrary to law, public policy, or morality
• Offensive to any religion, caste, community, gender, culture, or nationality
• In violation of decency, good conscience, or public standards
• Infringing upon any third-party intellectual property rights, copyright, or privacy

By uploading or sharing pictures, videos, audio, text, experiences, or any form of content on the tripbutter.com platform or associated social media, you provide your consent to tripbutter.com to use, reproduce, copy, share, display, or publish such content in any manner deemed appropriate by tripbutter.com, without any liability, obligation, compensation, or cost payable to you or any third party.

tripbutter.com expressly disclaims any and all disputes, responsibilities, liabilities, costs, expenses, or claims arising in connection with the use, reproduction, copying, uploading, or display of such content as contributed, shared, or expressed by you, whether on your own behalf or otherwise, to any third party.

11. YOUR RIGHTS

Under applicable laws, you have the:

• (a) right to be informed about how personal data is used – you have a right to be informed about how we will use and share your personal data. This explanation will be provided to you in a concise, transparent, intelligible and easily accessible format and will be written in clear and plain language;
• (b) right to access personal data – you have a right to obtain confirmation of whether we are processing your personal data, access to your personal data and information regarding how your personal data is being used by us;
• (c) right to have inaccurate personal data rectified – you have a right to have any inaccurate or incomplete personal data rectified. If we have disclosed the relevant personal data to any third parties, we will take reasonable steps to inform those third parties of the rectification where possible;
• (d) right to have personal data erased in certain circumstances – you have a right to request that certain personal data held by us is erased. This is also known as the right to be forgotten. This is not a blanket right to require all personal data to be deleted. We will consider each request carefully in accordance with the requirements of any laws relating to the processing of your personal data;
• (e) right to restrict processing of personal data in certain circumstances – you have a right to block the processing of your personal data in certain circumstances. This right arises if you are disputing the accuracy of personal data, if you have raised an objection to processing, if processing of personal data is unlawful and you oppose erasure and request restriction instead or if the personal data is no longer required by us but you require the personal data to be retained to establish, exercise or defend a legal claim;
• (f) right to data portability – in certain circumstances you can request to receive a copy of your personal data in a commonly used electronic format. This right only applies to personal data that you have provided to us (for example by completing a form or providing information through a website). Information about you which has been gathered by monitoring your behaviour will also be subject to the right to data portability. The right to data portability only applies if the processing is based on your consent or if the personal data must be processed for the performance of a contract and the processing is carried out by automated means (i.e. electronically);
• (g) right to object to processing of personal data in certain circumstances, including where personal data is used for marketing purposes – you have a right to object to processing being carried out by us if (a) we are processing personal data based on legitimate interests or for the performance of a task in the public interest (including profiling), (b) if we are using personal data for direct marketing purposes, or (c) if information is being processed for scientific or historical research or statistical purposes. You will be informed that you have a right to object at the point of data collection and the right to object will be explicitly brought to your attention and be presented clearly and separately from any other information; and
• (h) right not to be subject to automated decisions where the decision produces a legal effect or a similarly significant effect – you have a right not to be subject to a decision which is based on automated processing where the decision will produce a legal effect or a similarly significant effect on you.

You may exercise any of the above-mentioned rights by sending a request to complaints@tripbutter.com. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

12. COOKIES AND TRACKING TECHNOLOGIES

Our platform uses cookies, beacons, scripts, and similar tools to:

• Maintain user sessions
• Measure traffic and engagement
• Personalize content and ads

You can manage cookie preferences in your browser settings.

13. SECURITY PRACTICES

We implement reasonable security practices and procedures, including:

• Secure Sockets Layer [SSL] encryption
• Secure servers and firewalls
• Two-factor authentication (2FA)
• Regular security audits and updates

However, no method of transmission or storage is 100% secure. You are advised to keep your credentials confidential.

14. THIRD-PARTY LINKS

Our platform may contain links to third-party websites. We are not responsible for the content, privacy practices, or terms of such external sites.

15. CHILDREN'S PRIVACY

We do not knowingly collect personal data from children below 18 years of age. If we discover that we have inadvertently collected such information, it will be deleted promptly. Needless to state that, in case of a child travelling with the Legal Guardian or otherwise, the child's Aadhar and Passport details/data shall be collected and kept by tripbutter.com.

16. INDEMNITY

You agree to indemnify and hold harmless tripbutter.com, its affiliates, directors, employees, agents, vendors and partners from any claims, damages, liabilities, losses, and expenses (including legal fees) arising from:

• Your violation of this Privacy Policy
• Your misuse or unauthorized use of the platform
• Infringement of intellectual property or privacy rights
• Breach of any applicable law or regulation

17. LIMITATION OF LIABILITY

To the maximum extent permitted by law, tripbutter.com shall not be liable for any direct, indirect, incidental, consequential, or special damages arising out of your use of or inability to use our services, including data breach or unauthorized access.

18. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any dispute shall be subject to the exclusive jurisdiction of the courts of Mumbai, Maharashtra.

19. CHANGES TO THIS POLICY

We may update this policy from time to time and this policy is effective 23rd July 2025. The latest version will always be posted on this page with the updated date. Where material changes are made, we will notify users via email or a platform banner.

20. CONTACT US

For any privacy-related queries or requests, please contact:

Adeptus Traveltech Private Limited
Registered Address:
418, Crystal Paradise,
Dattaji Salvi Road,
Off Veera Desai Road,
Andheri West, Mumbai - 400053
Email: contact@tripbutter.com
Phone: 8976821254