Privacy Policy

TKB Hospiserve ("Trip Ka Baap", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have.

This policy applies to our website, platform, applications, and related services (together, the "Services"). By accessing or using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

We collect information in the following categories:

• Account information: name, business email address, job title, company name, and credentials when you register or are provisioned by an employer.
• Travel-related information: itinerary details, booking history, preferences, frequent-flyer numbers, travel documents (to the extent required to complete bookings), and expense data you submit.
• Usage information: pages visited, features used, device and browser data, IP address, and interaction logs collected through cookies and similar technologies.
• Communication information: messages, enquiries, and support requests you send to us, including recordings where permitted by law.
• Corporate account data: where we provide services to an enterprise customer, we may process data about that organization's employees in accordance with our agreement with the organization.

We use the information we collect to:

• Provide, operate, and maintain the Services;
• Process bookings, approvals, payments, and expense reconciliation;
• Deliver AI-driven assistance, including natural-language travel planning and policy validation;
• Personalize itineraries, recommendations, and preferences;
• Prevent fraud, abuse, and security incidents;
• Comply with legal and regulatory obligations; and
• Communicate with you about the Services, updates, and support.

We do not sell your personal information. We do not use your personal information to build profiles for unrelated third-party advertising.

Where applicable data protection laws (including the EU General Data Protection Regulation and India's Digital Personal Data Protection Act) require a legal basis, we process personal information based on:

• Contract: processing necessary to deliver the Services you or your organization requested;
• Legitimate interests: operating and securing our Services, improving quality, and preventing fraud;
• Legal obligation: compliance with applicable law; and
• Consent: where we ask for it, you may withdraw consent at any time without affecting the lawfulness of prior processing.

We share information only in limited circumstances:

• Travel suppliers and service providers: to complete bookings you or your organization request (airlines, hotels, rail, ground transport, and payment processors).
• Enterprise customers: where we provide services to an organization, we share relevant travel and spend data with that organization as the data controller.
• Service providers: vendors who help us operate the Services under confidentiality obligations.
• Legal and safety: when required by law, court order, or to protect the rights, property, or safety of Trip Ka Baap, our users, or the public.
• Corporate transactions: in connection with a merger, acquisition, or sale of assets, with notice where reasonably possible.

We use cookies and similar technologies to operate and improve the Services. Please see our separate Cookie Policy for details on the cookies we use and how to manage them.

We retain personal information only as long as necessary for the purposes described in this policy, to satisfy legal, accounting, or reporting requirements, or as agreed with enterprise customers. When information is no longer needed, we delete or anonymize it in accordance with our retention schedule.

We operate globally and may process personal information in countries other than your own. Where we transfer personal information across borders, we apply appropriate safeguards, including standard contractual clauses or equivalent mechanisms, and comply with applicable local laws, including data residency requirements where offered.

We implement technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security assessments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any of these rights, contact us at the details below. We will respond within the timeframe required by applicable law. You may also lodge a complaint with your local supervisory authority.

The Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

The Services may contain links to third-party websites, suppliers, and content. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your information, please contact:

TKB Hospiserve
Email: [email protected]