LEXITRIP PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy explains how Bani Global Industries LLP (“Company”, “We”, “Us”, “Our”) collects, uses, shares, stores, and protects Personal Information of users (“You”, “Your”, “User”) who access or use the LexiTrip platform and associated travel services.

By accessing or using LexiTrip, you acknowledge that you have read, understood, and agreed to the practices described herein.

This Privacy Policy forms an integral part of LexiTrip’s Terms of Use and applies to all services including but not limited to:

• Flight booking
• Hotel reservation
• Bus, cab & train booking
• Visa assistance
• Holiday packages
• Payment processing
• Customer support
• API-based inventory services

2. DEFINITIONS

Personal Information

Any information that identifies or relates to an identifiable individual, including: Name, mobile number, email, address, ID proof, passport, travel data, payment details (tokenized), and device information.

Sensitive Personal Data or Information (SPDI)

As per IT Rules, includes:

• Passwords
• Financial information
• Biometric identifiers
• Passport numbers
• Aadhar/PAN (only when required)

Non-Personal Data

Aggregated, anonymized, or statistical data that does not identify an individual.

3. INFORMATION WE COLLECT

A. Information You Provide Directly

• Full name
• Gender
• Date of birth
• Email address
• Mobile number
• Postal address
• Passport / Visa details (international travel)
• Aadhar/PAN (when required for KYC or train bookings through IRCTC)
• Payment information (card details are tokenized, not stored)
• Travel preferences

B. Information Collected Automatically

• Device information
• IP address
• Browser type
• Operating system
• App version
• Geolocation (when permitted)
• Cookies & tracking technologies
• Session logs
• Crash logs
• API request logs

C. Information Received from Third Parties

• Airline/GDS API data
• Hotel aggregator data (Expedia, Booking.com, Agoda, STAAH, RateTiger)
• Bus and cab partners
• IRCTC-authorized aggregators
• Payment gateways
• Fraud detection partners
• Identity verification partners

4. PURPOSE OF DATA COLLECTION

We use your information for the following lawful and legitimate purposes:

A. Service Delivery & Booking Fulfilment

• Creating customer accounts
• Processing bookings for flights, hotels, trains, buses, taxis
• Generating PNRs, vouchers, and confirmations
• Updating itinerary changes

B. Identity Verification & KYC

Required for:

• IRCTC compliance
• International travel
• High-value bookings
• Fraud risk mitigation

C. Payment Processing

• Tokenizing card details
• Processing refunds
• Fraud screening
• Dispute management

D. Customer Support

• Responding to queries
• Providing updates
• Handling disputes

E. Legal & Regulatory Compliance

• Audit & taxation
• Fraud prevention
• Airport/airline/hotel reporting
• Law enforcement requests

F. Platform Optimization

• Improving system performance
• Debugging issues
• Enhancing user experience

G. Marketing (Only with Consent)

• Promotions
• Offers
• Travel alerts
• Custom recommendations

5. DATA SHARING & DISCLOSURE

Your data may be shared strictly on a “need-to-serve” basis with:

A. Travel Partners

• Airlines (Domestic & International)
• GDS & NDC partners (TBO, Mystifly, Sabre, Amadeus, Travelport)
• Hotels & channel managers
• Bus operators
• Cab aggregators
• Visa processing centers (VFS, BLS, Embassy partners)
• IRCTC authorized partners

B. Payment Processors

Razorpay, Cashfree, PayU, Paytm. Payment info is only tokenized; LexiTrip does not store full card details.

C. Government Authorities

Where required under:

• Court orders
• Law enforcement requests
• DGCA / Airline security rules
• IRCTC regulatory compliance
• Immigration authorities

D. Internal Business Purposes

• Affiliates
• Logistics
• Finance
• Security teams

E. Fraud Prevention Agencies

To protect users and the platform from suspicious activity.

6. DATA SECURITY & PROTECTION MEASURES

LexiTrip follows industry-standard security protocols including:

• SSL encryption
• PCI-DSS compliant payment flows
• Tokenization of sensitive payment data
• Role-based access control
• Two-factor authentication
• Secure cloud infrastructure
• Periodic penetration testing
• Regular CERT-In compliant logging
• Data minimization practices
• Internal access audits

No system is 100% secure; however, we implement all reasonable measures as mandated under Indian law.

7. DATA RETENTION

We retain data only for the period necessary for:

• Service fulfilment
• Legal & audit compliance
• Dispute resolution
• Taxation requirements
• IRCTC, DGCA, airline statutory timelines

Once retention expires, data is deleted or anonymized.

8. USER RIGHTS

Users may exercise the following rights by contacting the Grievance Officer:

• Access to personal data
• Correction or updation
• Withdrawal of consent
• Erasure (subject to statutory retention)
• Opting out of marketing
• Restriction of processing

Requests will be processed within statutory timelines.

9. COOKIES & TRACKING TECHNOLOGIES

We use cookies for:

• Session management
• Authentication
• Personalization
• Analytics
• Security monitoring
• Performance optimization

Users may disable cookies, but certain features may not function properly.

10. CHILDREN’S PRIVACY

LexiTrip does not intentionally collect data from individuals below 18 years. Minors may use the platform only under parental supervision.

11. CROSS-BORDER DATA TRANSFERS

Some travel partners (e.g., global airlines, hotel chains, visa centers) may be located outside India. By using the platform, you consent to such transfers strictly for service fulfilment.

All transfers follow reasonable security practices.

12. THIRD-PARTY LINKS

LexiTrip may contain links to third-party websites. We are not responsible for their privacy practices, content, or policies.

13. POLICY UPDATES

We may modify this Privacy Policy periodically. Updated versions will be posted with a revised “Effective Date.”

14. GRIEVANCE OFFICER

In accordance with the IT Act, the Grievance Officer is:

15. CONTACT INFORMATION

For privacy-related queries:

support@lexitrip.com