Privacy Policy

1. Who We Are

New Abhai Travels ("we", "us", "our") arranges cars, tempo travellers and buses for hire, with a driver, from 111-A/5, Ashok Nagar, Hotel Bliss Building, G.T. Road, Kanpur, Uttar Pradesh, India.

This policy explains how we handle personal data shared with us through this website, by phone, on WhatsApp or by email. It is published in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, and the Information Technology Act, 2000 with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. For the personal data you give us, we are the "Data Fiduciary" under the DPDP Act and you are the "Data Principal".

2. Personal Data We Collect

When you browse this website

You can use this website without telling us who you are. We don't run analytics or advertising tools. As with any website, our hosting provider and the services that deliver the site's fonts, styling and icons (Google Fonts and jsDelivr) automatically receive technical data such as your IP address, browser type and the page requested, so the page can be delivered to you. We don't use this data to identify you.

When you enquire

• Your name, mobile number, WhatsApp number and/or email address
• Trip details such as pickup and drop locations, dates, timings, number of passengers and the vehicle you're interested in
• Anything you type into the "Can't find your vehicle?" box. This isn't stored by the website; it is only placed into a WhatsApp message that you choose to send to us.

When you book

• A copy of a government-issued photo ID of the person booking. Where you use Aadhaar, please share a masked Aadhaar (only the last 4 digits visible). We don't need, and don't ask for, your full Aadhaar number or biometrics.
• Passenger names where a permit, checkpost or the law requires a passenger list
• Pickup address and contact details for the trip
• Records of payments made to us, such as the amount, date and transaction reference. We never ask for card numbers, CVV, UPI PIN, OTPs or net-banking passwords.
• The signed rental agreement for your booking

When you leave a review

Our review form is hosted on Google Forms. We receive what you submit there, such as your name, rating, comments and any photo or video you choose to share. We publish a review or testimonial on this website only with your consent, and you can ask us to remove it at any time.

3. Why We Use It

We process your personal data on the basis of your consent, or because you have voluntarily given it to us for a specific purpose, and where a law requires us to. We use it only to:

• Reply to your enquiry and confirm vehicle availability and rates
• Arrange a vehicle you asked for that isn't in our listed fleet, including checking with partner operators
• Confirm, plan and run your trip, including coordinating with your driver
• Keep booking, payment and tax records
• Handle cancellations, refunds, complaints and lost-property requests
• Meet legal requirements, such as permits, checkpost and police verification, and lawful requests from authorities
• Publish reviews and testimonials you've agreed to share

We won't use your data for anything unrelated to these purposes without asking you first. We don't send promotional messages unless you've asked to receive them.

4. Cookies & Device Storage

This website doesn't set any cookies of its own. It saves one small setting in your browser's local storage (fleetSwipeHintSeen) so the "swipe to see more" hint stops appearing on mobile once you've used it. This setting never leaves your device, contains no personal data, and is removed if you clear your browser's site data.

Links on this site to WhatsApp, Google Maps, Google Forms and Instagram take you to those services, which may set their own cookies under their own privacy policies.

5. Who We Share It With

We share only what is needed, and only with:

• Your driver. Your name, contact number, pickup point and itinerary, so they can carry out the trip.
• Partner vehicle operators. Trip details needed to arrange a vehicle we don't own or list, only when you have asked us to arrange one.
• Communication services you choose to use, such as WhatsApp (Meta), email providers and telephone networks, which carry our messages and calls.
• Professional advisers, such as our accountant, for tax and statutory compliance.
• Government, police, courts or transport authorities, where we are required to by law.

We don't sell, rent or trade your personal data, and we don't share it for anyone else's marketing.

Some of these services, such as WhatsApp and Google, may store data on servers outside India. Such transfers take place as permitted under the DPDP Act and any restrictions notified by the Government of India.

6. How Long We Keep It

• Enquiries that don't become bookings are deleted once they are no longer needed to answer you.
• ID proof copies are deleted after your trip is complete and any related payment, damage or dispute matter is settled.
• Booking, invoice and payment records are kept for as long as tax and accounting laws require.
• Published reviews stay up until you ask us to remove them.

After that, the data is deleted or anonymised, unless a law requires us to keep it longer.

7. How We Protect It

We follow reasonable security practices to protect your data from unauthorised access, misuse, loss or disclosure. Access is limited to the people who need it to handle your booking, ID copies are not shared beyond what's described above, and devices and accounts holding customer data are password-protected. No method of storage or transmission is completely secure, but if a personal data breach affects you, we'll inform you and the Data Protection Board of India as the law requires.

8. Your Rights

Under the DPDP Act, you have the right to:

• Access. Get a summary of the personal data we hold about you and who we've shared it with.
• Correction. Have inaccurate or incomplete data corrected or updated.
• Erasure. Have your data deleted when it's no longer needed, unless a law requires us to keep it.
• Withdraw consent. Withdraw consent as easily as you gave it. This doesn't affect anything done before you withdrew, but we may not be able to complete a booking without the details it needs.
• Grievance redressal. Have a complaint about your data handled by our Grievance Officer.
• Nominate. Name another person to exercise these rights for you in case of death or incapacity.

To use any of these rights, contact our Grievance Officer. We may ask you to confirm your identity before acting on a request, and we'll respond within 30 days.

9. Children

Bookings must be made by adults aged 18 or above. Where children travel as passengers, their details are provided by a parent or lawful guardian, who consents on their behalf. We don't knowingly collect personal data directly from children, and we don't track children or target them with advertising.

10. Other Websites

This website links to services we don't control, such as WhatsApp, Google Maps, Google Forms and Instagram. Their own privacy policies apply when you use them.

11. Grievance Officer

For questions, requests or complaints about your personal data, contact:

We'll acknowledge your complaint within 48 hours and resolve it within 30 days. If you're not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act. See our Grievance Redressal page for the full process.

12. Changes to This Policy

We may update this policy when our practices or the law change. The "Last updated" date at the top shows the latest version. Significant changes will apply only to data collected after the change, unless you agree otherwise.