Privacy Policy — Weekender Holidays
Last updated: 13 July 2026
This Privacy Policy explains how M/s Weekender Holidays ("Weekender", "we", "us") collects, uses, and protects your personal data when you use our website at weekenderholidays.com. It applies to Indian residents and is aligned with the Digital Personal Data Protection Act, 2023 (India).
Who we are
M/s Weekender Holidays, Abhirup Bhalla, 91Springboard, 90B, Delhi–Jaipur Expressway, Udyog Vihar, Sector 18, Gurugram, Haryana 122015, India. Email: privacy@weekenderholidays.com. Phone: +91-8800591097.
What personal data we collect
We collect the following categories of data, depending on how you interact with us:
Account registration: Full name, email address, phone number, password (stored as a secure hash — we never see your actual password).
User profile (optional, you choose what to add): Address, city, state, pincode, country, nationality, date of birth, gender, GSTIN (if you need a tax invoice).
Booking data: Passenger name, email, phone number, nationality, pickup and drop-off location, date of travel, number of passengers, special requests, payment amount, and Razorpay order and payment IDs.
Travel companions (Participants feature, optional): First name, last name, email, phone, date of birth, gender, nationality, relation to you, and optionally passport number (used only if required for a specific tour manifest). If you add another person's details, please ensure they are aware and agree.
Enquiries and contact form: Name, email, phone, destination of interest, travel dates, budget range, message, and the page you came from on our site (referrer URL).
Login via Google or Facebook: Your name, email address, and profile picture as provided by Google or Facebook. We store a reference ID from Google or Facebook to link your account.
Wishlist (optional): When you tap the heart to save a cab or activity, we store the product type, product id, and the time you saved it, linked to your account, so we can show your saved list and (with analytics consent) measure wishlist intent.
Device and behavioural data (first-party analytics only): Browser type, device type, IP address (stored in hashed form for analytics), pages viewed, time spent, and booking funnel steps. We do not use third-party tracking pixels. This data is collected only with your explicit consent via the analytics consent banner.
Why we collect it and the legal basis
| Purpose |
Data used |
Legal basis |
| Processing your booking and sending your e-voucher |
Name, email, phone, nationality, booking details |
Contract fulfilment |
| Sending you booking confirmation, driver details, cancellation notices |
Email, phone |
Contract fulfilment |
| Sending OTP for login verification via WhatsApp |
Phone number |
Contract fulfilment (account security) |
| Fraud detection and preventing misuse |
IP address, device data, booking patterns |
Legitimate interest |
| First-party analytics to improve the booking experience |
Hashed IP, device, funnel events |
Consent (you can decline at any time) |
| Remembering products you save to your wishlist |
Product type, product id, liked-at |
Contract fulfilment (account feature) |
| Sending you travel deals and offers |
Email, name |
Consent (separate opt-in; you can withdraw at any time in Notification Settings) |
| Generating tax invoices (GST) where requested |
Name, address, GSTIN |
Legal obligation |
| Maintaining financial and tax records |
Tax invoices, booking amount, invoice identity |
Legal obligation (10-year retention) |
Who we share your data with
We share personal data only with the following parties and only to the extent necessary:
Razorpay Financial Solutions Pvt. Ltd. — processes your payment. Your payment details (card number, UPI ID) are handled directly by Razorpay; we do not receive or store them. Razorpay's privacy policy is at razorpay.com/privacy.
Google LLC — provides reCAPTCHA (bot detection at registration) and OAuth login (Sign in with Google). Google's privacy policy is at policies.google.com/privacy.
Meta Platforms (Facebook) — provides OAuth login (Sign in with Facebook). Meta's privacy policy is at facebook.com/policy.
WhatsApp (Meta Platforms) — we send your OTP for login verification via WhatsApp to the phone number you registered with.
Our email service provider — we send booking confirmations, vouchers, and notifications by email. Your name and email address are transmitted to our email delivery provider.
Our drivers and tour guides — your name, pickup location, and booking reference are shared with your assigned driver for service delivery. No other personal data is shared.
Some of these providers (Google, Meta) may process data on servers outside India. We share only the minimum data necessary and rely on their own data-protection commitments.
We do not sell, rent, or trade your personal data to any third party. We do not run third-party advertising pixels on this website.
How long we keep your data
| Data type |
Retention period |
| Financial and tax records (tax invoices, booking amount, invoice identity) |
10 years (required for GST and tax-audit compliance), then deleted |
| Account data |
Until you delete your account |
| Wishlist (saved products) |
Until you delete your account |
| Analytics events |
180 days, then automatically deleted |
| Contact form submissions |
2 years, then anonymised |
| Notification delivery logs |
1 year, then deleted |
| PDF vouchers and receipts on our servers |
90 days, then deleted |
| Password reset tokens |
24 hours |
When you delete your account: we immediately erase your profile, wishlist (saved products), saved travel companions (including any passport numbers), analytics history, enquiry and contact records, and the personal identifiers on your bookings. Indian tax law requires us to keep certain financial records — your tax invoices and the associated booking amount and invoice details (your name, and GSTIN if you provided one) — for 10 years from the date of the transaction, so that statutory business and tax audits can be met. These records are kept in minimised form (only what the law requires) and are automatically deleted once the 10-year period ends. Nothing else is retained. Deleting your account does not delete tax invoices you are legally entitled to have kept.
Wallet balance on account deletion. Where your Weekender Wallet holds a balance at the time you delete your account, it is handled as follows. Credit arising from a refund is returned to the original payment method used for the relevant booking wherever technically and lawfully possible; where automatic return is not possible — for example, where the payment provider's refund window has closed, or the payment was not made by card — deletion is suspended and we contact you so that the amount may be returned. Promotional credit — including cashback, referral rewards and goodwill adjustments — is forfeited upon deletion, and only with your explicit, recorded consent. Records of such refunds and forfeitures are retained, together with statutory tax and financial records, for the periods required under applicable law. Once completed, account deletion is permanent and cannot be reversed.
Your rights under the DPDP Act 2023
If you are an Indian resident, you have the following rights:
Right to access — request a copy of all personal data we hold about you. You can download this yourself at any time from Settings → Privacy & Data → Download my data, or by writing to privacy@weekenderholidays.com.
Right to correction — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your data. You can do this directly from your account via Settings → Delete Account, or by writing to privacy@weekenderholidays.com. Erasure removes all your personal data except the financial/tax records we are legally required to retain for 10 years (described above).
Right to withdraw consent — withdraw consent for marketing communications at any time via Settings → Notifications. Withdrawal does not affect transactional communications (booking confirmations, OTPs).
Right to grievance redressal — if you have a complaint about how we handle your data, email privacy@weekenderholidays.com. We will acknowledge within 3 business days and resolve within 30 days.
Right to nominate — you may nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, contact us at privacy@weekenderholidays.com with subject line "DPDP Data Request — [your right]".
Children and minors
Our services are not directed to persons under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, please contact privacy@weekenderholidays.com and we will delete it promptly.
Security
We implement reasonable technical and organisational safeguards to protect your personal data, including encrypted password storage, HTTPS on all pages, CSRF protection on all forms, and access controls restricting staff access to customer data. Payment card data is never stored on our servers — it is processed directly by Razorpay.
In the event of a data breach that is likely to affect your rights or interests, we will notify you and the Data Protection Board of India as required by law.
Changes to this policy
We may update this policy from time to time. We will notify registered users by email of material changes. The "Last updated" date at the top of this page always shows when it was last revised.
Contact us
M/s Weekender Holidays
privacy@weekenderholidays.com
+91-8800591097
91Springboard, 90B, Delhi–Jaipur Expressway, Udyog Vihar, Sector 18, Gurugram, Haryana 122015