Privacy Policy

Who we are

Still Kashmir Private Limited is a private tour operator based in Srinagar, Jammu & Kashmir. We are the Data Fiduciary for the personal data described here. Registered office: [registered office address]. CIN: [to be added].

What we collect

When you enquire. Your name, WhatsApp number, travel month and, if you choose to give them, your email address, the number of people travelling and any note you add.

The context of your enquiry. The page, journey, experience, destination or category you enquired from, and the campaign that brought you to the site (for example a Google or Instagram link). This helps us understand what you were looking at before we reply.

When you book. The details we need to arrange your trip: the names, ages and nationality of everyone travelling, arrival and departure details, and identity or passport details where hotels, houseboats or the authorities require them. With your consent we also record dietary needs, accessibility needs or health information you share so we can plan safely.

When you pay. Payment confirmations and invoice details. Card and bank details are handled by the payment provider or bank, not stored by us.

When you message us. Your WhatsApp, phone and email conversations with our team.

Technical data. A one-way scrambled version of your IP address (used only to stop spam and repeated automated submissions), basic device and browser information, and, only if you accept them, analytics and advertising cookies.

How we use it

• To reply to your enquiry on WhatsApp, by phone or by email, and to prepare a plan and quotation.
• To book and deliver your journey: stays, transport, guides, activities and permits.
• To meet legal duties, such as GST invoicing, keeping accounts, and registering guests with the authorities where the law requires it.
• To keep the website secure and prevent spam and misuse.
• To understand how the website is used and improve it, only if you accept analytics cookies.
• To send you news or offers, only if you have asked us to. You can stop these at any time.

We rely on your consent, which you give when you send an enquiry or accept cookies, and on legitimate uses permitted by the Act, such as providing a service you have asked for and complying with the law.

WhatsApp

By sending an enquiry you agree that we may contact you on WhatsApp about your trip. WhatsApp is provided by Meta, and messages you exchange with us are also subject to WhatsApp's own privacy policy. If you would rather we used email or phone, tell us and we will switch.

Who we share it with

We never sell personal data. We share it only as needed to run your trip and this website:

• Travel suppliers: hotels, houseboats, homestays, drivers and transport operators, guides, trek partners and activity operators on your itinerary.
• Authorities: police, tourism or security authorities where permits or guest registration are required, for example for Gurez, Tulail, Keran, Machil, Teetwal and Karnah, or when foreign nationals stay in hotels.
• Service providers who work for us: Cloudflare (website hosting and security), Google (enquiry spreadsheet and, with consent, Google Analytics), Meta (WhatsApp and, with consent, the Meta Pixel), our email provider and payment providers. They may process data outside India, under their own safeguards.
• Others, when required by law: in response to a lawful request from a court or government authority.

Cookies

Cookies that the website needs to work, and the security check that stops spam, are always on. Analytics cookies (Google Analytics) and advertising cookies (Meta Pixel) load only after you accept them in the cookie banner. You can change your choice at any time by clearing this site's cookies in your browser, and the banner will ask again.

How long we keep it

• Enquiries that do not become a booking: up to [24 months] from our last conversation, then deleted.
• Booking, invoice and payment records: for as long as tax and company law require, currently up to eight years.
• Identity and passport copies: only as long as needed for the trip and any legal registration, then deleted.
• Marketing preferences: until you withdraw consent.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law;
• withdraw consent at any time (this does not affect anything we did before you withdrew it);
• nominate someone to exercise these rights for you if you are unable to;
• raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.

To use any of these rights, write to us at the email address on our Contact page. We will reply within 30 days.

Children

Our services are for adults. We collect information about children only from a parent or guardian, as part of a family booking.

Security

We use reasonable technical and organisational safeguards: encrypted connections, restricted access to enquiry and booking data, and trusted service providers. No system is perfectly secure; if a breach affecting you occurs, we will tell you and the Data Protection Board as the law requires.

Grievance Officer

[Name], Grievance Officer, Still Kashmir Private Limited, [registered office address]. Email: the email address on our Contact page. We acknowledge grievances within 48 hours and resolve them within 30 days.

Changes to this policy

We may update this policy as our services or the law change. The date at the top of this page shows when it was last updated. Significant changes will be highlighted on the website.