DPDP Act Policy
My Travel Codee is committed to handling digital personal data responsibly and in accordance with applicable data-protection requirements.
The Digital Personal Data Protection Act, 2023 establishes a framework relating to processing of digital personal data and provides rights and obligations for data principals and data fiduciaries.
Personal Data We May Process
Depending on the services requested, we may process information such as:
- Name and contact information
- Company and employment-related details
- Passport, visa and identification information
- Travel preferences and itinerary information
- Billing and transaction information
- Information provided through forms, enquiries and communication
Purpose of Processing
We may process personal data for purposes including:
- Responding to enquiries
- Arranging and managing travel services
- Processing bookings and payments
- Coordinating with travel service providers
- Providing customer support
- Meeting legal and regulatory obligations
- Preventing fraud or misuse
- Maintaining business and transaction records
Consent and Other Lawful Uses
Where consent is required, we will seek consent through an appropriate notice or mechanism. Where processing is permitted on another lawful basis, we may process information as allowed under applicable law.
Data Security
We take reasonable security safeguards to protect personal data against unauthorised processing, loss, misuse or compromise.
Your Rights
Subject to applicable law, individuals may have rights relating to access to information, correction or updating of personal data, erasure where applicable, and grievance redressal. The DPDP Act specifically addresses these rights and grievance mechanisms.
Grievance Contact
Policy Updates
This policy may be updated to reflect changes in law, regulations, technology or our data-processing practices.
The Ministry of Electronics and Information Technology published the Digital Personal Data Protection Rules, 2025 and an enforcement timeline in November 2025