Privacy Policy

Itinerika (“we”, “us”) is operated by [Legal entity name], registered at [registered office address], India. We run the Itinerika platform: this website, the traveller marketplace, and the CRM that partner travel agencies use to plan and sell trips.

This policy explains what personal information we collect, why we collect it, and what you can ask us to do with it. It covers travellers who send us an enquiry and staff at agencies who use the CRM.

We collect only what we need to answer an enquiry, run an account, and keep the service working.

• Enquiry details you send us: name, phone number, email address, destination, travel dates and traveller count.
• Account details for agency users: name, work email, agency name, and the content you create in the CRM (itineraries, invoices, client records).
• Payment details for paid plans, handled by our payment provider — we never see or store full card numbers.
• Technical data: IP address, browser and device type, pages visited and referring site, collected to keep the service secure and to understand which pages are useful.

We use personal information to:

• Reply to your enquiry and pass it to the travel agency best placed to plan that trip.
• Provide, maintain and improve the platform, including support and troubleshooting.
• Send service messages about your account, bookings or enquiries.
• Send marketing email only where you have opted in, and every such email carries an unsubscribe link.
• Meet legal, tax and accounting obligations.

When you send an enquiry through Itinerika, the details in that enquiry are shared with the partner travel agency handling it, so they can prepare a quote. We do not sell personal information to anyone.

We also use service providers who process data on our behalf under contract — hosting, database, email delivery, payment processing and analytics. They may only use the data to provide their service to us.

We may disclose information where the law requires it, or to protect the rights and safety of our users and our business.

Enquiry records are kept for [retention period, e.g. 24 months] so an agency can follow up and so we can resolve disputes. Account data is kept while the account is active and for [retention period] after it closes, except where we must keep records longer for tax or legal reasons.

You can ask us to show you the personal information we hold about you, correct it if it is wrong, delete it, or stop using it for marketing. Write to [privacy contact email] and we will respond within 30 days.

If you are unhappy with how we handled a request, you may complain to the relevant data protection authority.

Data is transmitted over HTTPS and stored on managed infrastructure with access limited to the people who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information, and we will tell affected users promptly if a breach puts their data at risk.

We use cookies and similar storage to keep you signed in, remember preferences such as a chosen filter, and measure how the site is used. You can block cookies in your browser; the site will still work, but some conveniences will be lost.

We may update this policy as the service changes. The date at the top always shows the current version, and we will flag material changes on the site. This version was published on 23 September 2026.