Privacy Policy

This Privacy Policy explains how Braj World (“we”, “us”, the “Issuer”) collects, uses, discloses and protects personal information when you visit our website, create a customer account, make an Advance Visit Booking, or interact with our services.

This Policy should be read together with the Advance Visit Booking Terms & Conditions. By using the site or making a booking, you acknowledge the practices described here.

The data controller responsible for your personal information is the Issuer identified above for the proposed Braj World destination. A designated Grievance Officer is available for privacy-related requests and complaints (see “Contact Us”).

We collect information you provide and information generated when you use our services:

Consistent with Terms clause 37, we process personal information for the following purposes:

• booking and guest checkout using your email address and mobile number
• signing you in with a one-time passcode (OTP) sent to your registered email or mobile number
• payment and payment verification
• identity verification
• voucher administration and record-keeping
• referral programme administration, including crediting referral experience value and publishing a masked leaderboard
• fraud prevention and security
• redemption of eligible experiences after opening
• customer support and grievance handling
• legal and regulatory compliance
• transactional communications by email, SMS and WhatsApp (one-time sign-in codes, booking confirmations, your tickets/vouchers and certificate, alerts, and service and redemption updates)
• understanding and improving how the website is used, through aggregated analytics

We rely on the performance of your booking contract, our legitimate interests in operating and securing the service, your consent (where applicable), and compliance with law as the bases for processing.

Marketing or promotional messages are sent only where you have separately opted in, where required. Transactional messages relating to your booking — including one-time sign-in codes, booking confirmations, your tickets/vouchers and certificate, and service or redemption updates — are sent by email, SMS and/or WhatsApp to the details you registered. These are not marketing and may be sent as necessary to administer your voucher.

You can withdraw marketing consent at any time using the unsubscribe link or by contacting us; this does not affect essential transactional communications. If you no longer wish to receive WhatsApp messages, you may also tell us and we will use SMS/email instead.

Payments are processed by third-party payment providers. Sensitive payment credentials (such as full card or bank details) are collected and processed directly by the payment gateway under their own security standards and are not stored on our servers. We retain only the transaction reference and status needed to administer your booking.

We do not sell your personal information. We may share it with:

• service providers who help us operate the platform — including hosting and database services, our payment gateway (Razorpay, for card, UPI, net-banking and wallet payments), our email delivery provider and our SMS/WhatsApp messaging provider (used to send one-time sign-in codes, booking confirmations and ticket links), and website analytics (Google Analytics) — each under confidentiality obligations and only to the extent needed to provide their service
• professional advisers, auditors and insurers
• competent authorities, regulators or courts where required by law or to prevent fraud and abuse
• a successor entity in the event of a lawful reorganisation, subject to this Policy

We use strictly-necessary cookies and session identifiers to keep you signed in (after you verify a one-time passcode) and to secure the service. We also use Google Analytics to understand how the website is used (for example pages viewed, bookings started and completed, and referral shares) so we can improve it; this data is aggregated and is not used to identify you personally. You can control cookies through your browser settings; disabling essential cookies may affect sign-in and booking functionality.

We retain booking and voucher records for as long as your voucher remains valid and redeemable, and thereafter for the period required to meet legal, tax, accounting, dispute-resolution and fraud-prevention obligations. When no longer required, information is securely deleted or anonymised.

We apply reasonable technical and organisational measures — including access controls, encryption in transit, one-time passcode (OTP) sign-in with expiry and attempt limits, and anti-fraud checks — to protect personal information. No method of transmission or storage is completely secure; we encourage you to keep your registered email and mobile number secure and never share a sign-in code or QR code with anyone. Braj World will never ask you for a sign-in code by phone.

Subject to applicable law, you may request to:

• access a copy of your personal information
• correct inaccurate or incomplete details (note: name correction is not a means to transfer a voucher)
• request deletion where there is no overriding legal or contractual reason to retain it
• withdraw consent for optional processing such as marketing
• raise a grievance or complaint with our Grievance Officer

We will respond to verified requests within the timelines required by applicable law.

A parent or legal guardian may create a booking in the name of a minor and is responsible for that booking. We do not knowingly collect personal information directly from children without guardian involvement. Please contact us if you believe a minor’s information has been provided without appropriate authority.

Your information is processed on infrastructure that may be located in or outside your state or country. Where information is transferred, we take steps to ensure a comparable level of protection consistent with applicable law.

We may update this Policy from time to time to reflect changes in law, technology or our practices. Material changes will be notified through the website or registered communication channels, and the “Effective Date” above will be updated.

For any privacy question, request or complaint, contact our Grievance Officer:

• Grievance Officer: [●]
• Email: [●]
• Phone / WhatsApp: [●]
• Postal Address: [●]

Nothing in this Policy limits rights that cannot be waived under applicable data-protection or consumer law. If this Policy conflicts with mandatory law, mandatory law prevails.