1. Data Controller

For the purposes of the GDPR, the Data Controller is:

Where personal data is submitted directly to travel vendors or other third parties, or further processed by them, those parties act as independent data controllers in accordance with their own privacy policies.

If you have any questions about this policy or your rights under GDPR, you may contact us at the email address above.

2. Scope of This Policy

This Privacy Policy applies to:

• Visitors to the GoDND website
• Users who submit enquiries through our forms
• Individuals who communicate with us via email, WhatsApp, or other channels

GoDND does not require users to create accounts or log in to use the website.

3. Personal Data We Collect

4. Legal Basis for Processing (GDPR – Article 6)

We process personal data only when we have a lawful basis to do so. These include:

1. Consent (Article 6(1)(a)) – When you voluntarily submit an enquiry or contact us.
2. Performance of a Contract or Pre-Contractual Steps (Article 6(1)(b)) – When processing is necessary to respond to your travel enquiry or coordinate with a vendor.
3. Legitimate Interests (Article 6(1)(f)) – To operate, secure, and improve our website and services, provided these interests do not override your fundamental rights.

You may withdraw your consent at any time by contacting us.

5. Purpose of Data Processing

• Responding to travel enquiries
• Connecting you with relevant travel vendors
• Sharing itinerary details and follow-ups
• Improving our platform and offerings
• Ensuring website security and preventing misuse

We do not use your data for automated decision-making or profiling.

6. Sharing of Personal Data

7. International Data Transfers

GoDND is based in India. If you are located in the EEA, your data may be transferred outside the EU.

Where applicable, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses
• Adequate security and confidentiality measures

8. Data Retention

We retain personal data only for as long as necessary to:

• Respond to enquiries
• Complete coordination with vendors
• Meet legal or regulatory obligations

When data is no longer required, it is securely deleted or anonymised.

9. Cookies and Tracking

We use cookies to:

• Ensure website functionality
• Analyse traffic and usage patterns

Where required by law, cookie consent is obtained. You can manage or disable cookies through your browser settings.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

• Unauthorised access
• Loss, misuse, or disclosure

However, no system can guarantee absolute security.

11. Your Rights Under GDPR

If you are located in the EEA, you have the right to:

1. Access your personal data (Article 15)
2. Rectification of inaccurate data (Article 16)
3. Erasure (Article 17)
4. Restriction of processing (Article 18)
5. Data portability (Article 20)
6. Object to processing (Article 21)
7. Withdraw consent (Article 7(3))

To exercise these rights, email us at hello@godnd.com.

You also have the right to lodge a complaint with your local data protection authority.

12. Children’s Data

GoDND does not knowingly collect personal data from individuals under the age of 18. If such data is identified, it will be deleted promptly.

13. Third-Party Links

Our website may link to third-party websites or vendor platforms. We are not responsible for their privacy practices and encourage you to review their policies separately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated 'Last updated' date.

15. Contact Us