Privacy Policy

• Account details: name, email address, mobile number, password (stored only as a one-way hash) and sign-in method (including Google sign-in).
• Booking details for every traveller: name, title, gender, date of birth, nationality, passport number and expiry, and emergency contact.
• Trip details: destinations, dates, hotels, activities, transfers, flight numbers, pickup locations and special requests.
• Payment information: we record the method and status of payments. Card, UPI and bank details are entered on our payment partner’s secure page and are not stored on our servers.
• Technical data: IP address, browser type, device information and cookies needed to keep you signed in and secure the site.

• To create your account and verify your email or mobile number.
• To plan, price, confirm and manage your travel bookings with hotels, activity operators, transfer providers and other suppliers.
• To process payments, issue invoices and handle refunds.
• To contact you about your booking, changes, cancellations and support requests.
• To prevent fraud, secure the platform and meet legal and tax obligations.

We process your data because you have given consent, to perform our contract with you, or to comply with law. Marketing messages are sent only if you opt in, and you can withdraw consent at any time.

We share only what is needed to deliver your booking: hotel and activity suppliers (for example Hotelbeds and Viator), transfer and ground-handling partners, airlines where relevant, and payment processors such as Razorpay. Travellers’ names, dates of birth and passport details may be passed to suppliers because they require them for the reservation.

Service providers who host our systems or send email on our behalf act under our instructions. We do not sell your personal data. We may disclose data to authorities when the law requires it.

Travel suppliers may be located outside India. When your data is sent abroad to fulfil your booking, we share only what is necessary and use suppliers that apply appropriate safeguards.

We keep booking and payment records for as long as needed for the booking, accounting, tax and legal-claim purposes (generally up to 8 years). Account data is deleted or anonymised after you close your account, unless we must retain it by law.

We use encrypted connections (HTTPS), hashed passwords, access controls and monitoring. No online service is completely secure, so please keep your password private and tell us immediately if you suspect misuse.

We use essential cookies to keep you signed in and remember your Journey. We may use analytics cookies to improve the service. You can block cookies in your browser, but parts of the site may stop working.

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate data.
• Ask us to erase data we no longer need to keep.
• Withdraw consent for optional processing such as marketing.
• Nominate another person to exercise your rights if you are unable to.
• Make a complaint to us and, if unresolved, to the Data Protection Board of India.

To use any right, write to the contact below. We will respond within a reasonable time and may need to verify your identity first.

Bookings for travellers under 18 must be made by a parent or legal guardian, who consents to the processing of the child’s details for the booking.

Name: Mr. Subir Kr. Debnath · Email: info@unitedpanholidays.com. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.

We may update this policy from time to time. The date at the top shows when it was last changed. Continued use of the platform after an update means you accept the revised policy.