Privacy Policy

1. Introduction & Overview

This Privacy Policy describes how Plus530 Adventure ("Company", "we", "us", or "our"), operating overland expeditions, self-drive 4x4 convoys, and motorcycle adventure tours across India and neighboring Himalayan regions, collects, stores, uses, and safeguards personal data obtained through our website (plus530adventure.com), expedition booking forms, and direct offline communications.

This policy is formulated in compliance with applicable Indian data protection laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the principles of the Digital Personal Data Protection Act (DPDP Act), 2023.

By accessing our website, reserving an expedition slot, or submitting personal documentation for travel clearances, you consent to the data collection and processing practices described in this Privacy Policy.

2. Information We Collect

To plan, coordinate, and execute expeditions across remote, high-altitude, and wilderness terrains, we collect specific categories of personal information necessary for operational safety, legal permits, and convoy coordination:

• Personal Contact Information: Full legal name, email address, telephone / WhatsApp number, residential billing address, and designated emergency contact details (name, relationship, and 24/7 reachable phone number).
• Travel Permits & Regulatory Documentation: Government-issued identity proof (Aadhaar Card, Voter ID, or Passport), valid Passport and Visa copies for international cross-border expeditions (Bhutan, Nepal), and Driving License (with appropriate vehicle class endorsements: LMV for 4x4 vehicles, MCWG for motorcycles). This documentation is mandatory for obtaining Inner Line Permits (ILP) and Protected Area Permits (PAP) from district magistrates and military authorities in Ladakh (Leh, Nubra, Pangong, Changthang, Hanle, Umling La), Spiti Valley, Bhutan Green Tax clearances, and Nepal vehicle carnets.
• Vehicle Technical Details (Self-Drive Convoys & Motorcycle Tours): Vehicle Registration Certificate (RC), comprehensive motor vehicle insurance policy, valid Pollution Under Control (PUC) certificate, vehicle make/model, drivetrain specifications (4x4, AWD, low-range transfer case status), and tire condition.
• High-Altitude Medical & Health Disclosures: Overland expeditions frequently traverse extreme altitudes exceeding 10,000 to 19,000+ feet (such as Khardung La and Umling La). For expedition safety and rapid emergency medical response, we collect voluntary disclosures regarding pre-existing medical conditions (cardiovascular disorders, asthma, respiratory conditions, hypertension, allergies, recent surgeries) and dietary preferences or severe food allergies.

3. Payment Information & Gateway Security (Cashfree Payments Disclosure)

Online booking advances, expedition reservation deposits, and slot confirmations initiated on our website are processed securely through our authorized payment aggregator partner, Cashfree Payments India Pvt. Ltd. ("Cashfree").

• Payment Gateway Security Standards: Cashfree is certified under the Payment Card Industry Data Security Standard (PCI-DSS Level 1) and adheres to bank-grade 256-bit Transport Layer Security (TLS) encryption along with RBI-mandated card tokenization.
• Strict Zero-Card-Storage Policy: Plus530 Adventure strictly adheres to a zero-card-storage policy. We do NOT collect, process, record, store, or have access to any sensitive customer payment credentials—including complete debit/credit card numbers, CVVs, card expiry dates, net banking credentials, or UPI MPINs. All payment transactions are encrypted and transmitted directly from your web browser to Cashfree's secure payment infrastructure.
• Transaction Metadata Retained: We only receive and retain non-sensitive transaction confirmation metadata provided by Cashfree (such as Cashfree Order ID, Transaction Reference ID, payment method used e.g., UPI/Card, timestamp, transaction status, and amount paid) for accounting, invoicing, and booking validation purposes.

4. How We Use Your Information

We collect and process your personal information exclusively for legitimate, lawful, and expedition-critical operational purposes:

• Expedition Logistics & Accommodation: Reserving handpicked accommodations, homestays, luxury glamping sites, and wilderness camps; arranging convoy staging; and managing catering requirements.
• Government & Border Permit Issuance: Submitting verified participant manifests and vehicle details to district administration offices, tourism departments, forest departments, and military checkpoints for Inner Line Permits (ILP), Protected Area Permits (PAP), and cross-border clearances.
• Emergency Radio & Medical Coordination: Maintaining convoy safety manifests, two-way radio roster assignments, medical first-aid readiness, high-altitude oxygen cylinder provisioning, and emergency evacuation coordination with local healthcare centers or military facilities.
• Invoicing & Transaction Confirmations: Generating tax invoices, sending official booking vouchers, and dispatching expedition preparation packs via email and WhatsApp.
• Briefings & Customer Support: Providing packing checklists, vehicle preparation guidelines, convoy safety protocols, and real-time updates regarding weather, trail conditions, or route adjustments.

5. Information Sharing & Third Parties

We respect traveler confidentiality and uphold a strict no-sale policy. We never sell, rent, trade, or commercially monetize your personal information to third-party marketers or data brokers.

Information is shared strictly on a confidential, need-to-know basis with:

• Statutory Authorities: District magistrates, police checkpoints, border security personnel, forest rangers, and tourism departments solely for mandatory permit clearances and security compliance.
• Hospitality & Logistics Partners: Handpicked accommodations, local expedition crew, and safari trail marshals solely for check-in registration and logistical execution.
• Authorized Payment Aggregator: Cashfree Payments India Pvt. Ltd., for secure end-to-end payment processing.
• Legal & Law Enforcement Obligations: Law enforcement agencies or judicial authorities when required by applicable law, court order, or governmental regulation to protect life, health, or convoy safety.

6. Cookies & Website Analytics

Our website (plus530adventure.com) uses standard functional cookies and privacy-respecting performance analytics:

• Functional Cookies: Essential cookies required for website navigation, user session security, and proper display of expedition itineraries and interactive maps.
• Anonymous Performance Analytics: Aggregated, non-personally identifiable traffic metrics (such as page view counts, browser types, and load times) used solely to optimize website performance and responsiveness.
• Cookie Control: You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may impact certain interactive features of our website.

7. Data Retention & Traveler Rights

We maintain transparent data retention and traveler rights policies in accordance with Indian regulatory frameworks:

• Retention Period: Personal data and permit documentation are retained only for the duration required to complete expedition logistics and satisfy statutory tax, accounting, and legal audit mandates under Indian law (including GST and Companies Act guidelines). Following statutory retention periods, personal records are securely archived or permanently deleted.
• Right to Review & Correction: You have the right to inspect, review, and request corrections to any personal information we hold regarding your profile or booking.
• Right to Erasure: You may request the deletion of your personal data from our active databases, subject to our statutory obligations under applicable Indian laws.
• Marketing Opt-Out: You may opt out of receiving promotional communications or revoke photography media consent at any time by sending an email to [email protected].

8. Grievance Redressal & Contact Details

In accordance with the Information Technology Act, 2000 and the SPDI Rules, 2011, any inquiries, privacy concerns, or data protection grievances should be directed to our designated Grievance Officer: