Last updated: April 1, 2026
Your trust is the most important thing we earn. This policy explains exactly what data we collect, why we collect it, and the controls you have over it.
This Privacy Policy explains how Gujju World Tours (“we”, “us”, “our”) collects, uses and protects personal information when you use our website, mobile experience or services.
We comply with applicable data protection laws including the Indian DPDP Act, GDPR (where it applies to EU travelers), PIPEDA (Canada) and equivalent privacy frameworks.
Account information: name, email, phone number, country, password (hashed).
Booking information: traveler names, dates of birth, passport numbers, dietary preferences and other details required to make a booking.
Payment information: handled by PCI-DSS compliant payment processors. We do not store full card numbers on our servers.
Usage information: pages you visit, device type, IP address and cookies used to improve site performance.
Communications: messages you send to our team via email, chat, WhatsApp or contact forms.
To plan, book, deliver and support your trip.
To process payments and prevent fraud.
To communicate with you about your booking, account and (with consent) marketing offers.
To improve our website, products and customer service through aggregated analytics.
To comply with legal obligations and respond to lawful requests.
Travel suppliers (airlines, hotels, transport, tour operators) — only the minimum data required to fulfill your booking.
Payment processors — to handle transactions securely.
Government authorities — where required by law (e.g., visa applications, tax records).
Service providers — analytics, customer-support tools and cloud hosting partners under strict confidentiality obligations.
We never sell your personal information to advertisers or data brokers.
We use essential cookies to make the site work, plus optional analytics and marketing cookies that you can manage at any time via our cookie banner or your browser settings.
Disabling non-essential cookies will not affect your ability to make a booking.
Your information is stored on secure servers within India and the European Union, with encryption at rest (AES-256) and in transit (TLS 1.2+).
Access to personal data is restricted to staff who need it for their role and is logged for audit purposes.
Despite our efforts, no method of online transmission is 100% secure. If we ever become aware of a breach affecting your data, we will notify you and the relevant authorities promptly as required by law.
Booking records: kept for 7 years for accounting and tax compliance.
Account data: kept until you delete your account, plus 30 days for backup expiry.
Marketing data: kept until you unsubscribe, then anonymised.
You have the right to access, correct, port or delete your personal data, and to object to or restrict certain processing.
To exercise any of these rights, email privacy@gujjuworldtours.com. We will respond within 30 days.
Our services are not directed to children under 16. We do not knowingly collect personal information from children except as part of a family booking made by a parent or guardian.
Where we transfer personal data across borders (for example, to a hotel abroad to confirm your reservation), we rely on standard contractual clauses and supplier privacy commitments to maintain protection.
We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the site at least 14 days before they take effect.
For any privacy-related question, email privacy@gujjuworldtours.com or write to: Gujju World Tours, Privacy Office, Ahmedabad, Gujarat, India.

We're on a mission to bring you the world's most extraordinary travel experiences. From hidden gems to iconic landmarks, we take care of every detail.
hello@gujjuworldtours.com
Available 24/7 via WhatsApp