Skip to content
Sign in

Legal

Privacy policy

Last updated: July 2026

We collect the minimum personal data needed to run your booking, we never sell it, and you can exercise your GDPR rights at any time.

1. Data controller

The company identified under “Who we are” below is the data controller. Privacy questions: connect@yotours.in.

2. What we collect & why

Booking data — lead traveller name, email, phone, country, traveller counts (and, where a venue requires it, traveller names): to perform the booking contract (GDPR art. 6(1)(b)).

Payment data — processed by our payment provider; card numbers never touch our servers.

Support data — messages you send us: legitimate interest in answering you (art. 6(1)(f)).

Technical data — server logs (IP, user agent) for security and fraud prevention: legitimate interest.

Usage measurement — to see where the booking process works and where it doesn't, we count the steps of a visit (pages opened, search used, date picked, payment started) and how fast each page loaded and responded. No cookie or browser storage is used: a one-way code is made from your IP address and browser type with a random value that is created each day and deleted the next day, so the code can't be traced back afterwards; neither the IP nor the browser type is kept. If you book, the steps of that visit are linked to your booking reference so we can count completed bookings. Not used for advertising or to build a profile of you. Legitimate interest (art. 6(1)(f)). Browsers sending Global Privacy Control or Do Not Track are not measured at all. When we test a new page design, each day's visit is shown either the current or the new design, chosen from the same kind of one-way code (nothing is stored in your browser), so we can compare which works better. The only exception is a preview link (ending in ?design=new), which sets the preview cookie described in our cookie policy.

Advertising measurement — if you arrive from a Google ad, the ad's click identifier from the link is kept with your booking reference (no cookie is used), so we can tell Google Ads that a booking happened and its value. No name, email or phone number is shared. For visitors in the EU, UK and Switzerland this is not shared. Kept for up to 120 days. Legitimate interest (art. 6(1)(f)).

3. What we don't do

We do not sell personal data, run third-party advertising trackers, or profile you. Marketing email is sent only if you explicitly opt in, and every message contains an unsubscribe link.

4. Processors & transfers

We use vetted processors to run the service: cloud hosting and content delivery (Vercel), database hosting (Neon), media storage, payment processing and transactional email providers. Where a processor is outside the EEA, transfers rely on adequacy decisions or standard contractual clauses.

5. Retention

Booking records are kept for the period required by French commercial and tax law (up to 10 years for accounting documents). Support correspondence is kept for 3 years after the last exchange. Server logs rotate within 90 days. Usage events are deleted after 90 days; daily per-visit totals after about 13 months.

6. Your rights

You can request access, correction, deletion, restriction, portability, or object to processing at any time by emailing connect@yotours.in. You may also lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.

Who we are

Wanderung Guides Private Limited
802 Escala, Grant Road Kharadi, Pune 411014, Maharashtra, India
CIN: U93090PN2017PTC171425

GSTIN: 27AACCW0427A1ZV

KvK: 75485176

+91 84484 48434 · connect@yotours.in