What we collect when you use this website or plan a trip with us, why, who else sees it, and how to ask us to change or delete it. Written for the Digital Personal Data Protection Act, 2023, in plain language.
Last updated 25 September 2026.
Who we are
This website is run by Olio Holidays, an India-based tour operator. For the personal data described here, we are the data fiduciary: we decide why and how it is used, and we answer for it.
What we collect
When you send an enquiry
The enquiry forms ask for your name, email address and phone number, and optionally the kind of trip, destination, travel dates, number of travellers, budget and anything else you want to tell us. That is all a form collects. You choose what goes in the free-text box, so please leave out anything you would rather not share at this stage.
When you book
If you go on to book, we will ask for what the bookings themselves need: each traveller’s name as it appears on their passport, dates of birth, passport and visa details for international trips, your PAN where tax collected at source (TCS) applies, and any dietary, medical or accessibility needs you choose to tell us so that hotels and guides can plan for them. Payments are made to our bank account or through your bank; we do not collect or store card numbers on this website.
When you simply browse
Like every website, our server receives the technical details your browser sends, such as your IP address and browser type, and keeps them in short-lived logs used for security and to keep the site running. We do not use analytics or advertising trackers on this site.
Why we use it
- To reply to your enquiry and design, cost and revise an itinerary with you.
- To make the bookings you ask for with hotels, airlines, transport companies, guides and visa services.
- To look after you while you travel, including in an emergency.
- To meet our legal obligations, such as issuing GST invoices, collecting and reporting TCS, and keeping accounting records.
- To keep this website secure and working.
We process your details because you have asked us to plan or book a trip and have given them to us for that purpose, and where the law requires us to. We do not send marketing messages unless you have asked to receive them, and we never sell personal data.
Who else sees it
- The suppliers on your trip. A hotel needs your name to hold a room; an airline needs passport details to issue a ticket. Suppliers receive only what their part of the trip requires. For an overseas trip, this means your details are sent to businesses in the countries you are visiting.
- Service providers who run the website and our email. This site is hosted by Hostinger on servers in India, and enquiries reach us by email as well as being stored on the site.
- Government authorities, where the law requires it: tax authorities for GST and TCS, and immigration authorities for visas.
How long we keep it
We keep an enquiry for as long as it is useful for planning a trip with you, and delete it when you ask us to. Booking records, including invoices and tax documents, are kept for as long as Indian tax and accounting law requires. Server logs are kept for a short period and then overwritten.
How we protect it
The website runs only over an encrypted connection, access to enquiries and booking records is limited to the people handling your trip, and we ask the same care of the suppliers we share details with. No system is perfectly secure; if a breach affecting your data ever happens, we will tell you and the Data Protection Board of India as the law requires.
Children
Our services are booked by adults. When a parent or guardian books for a child, we use the child’s details only for that booking, on the basis of the parent’s or guardian’s consent.
Your rights
Under the Digital Personal Data Protection Act, you can ask us:
- for a summary of the personal data we hold about you and what we do with it;
- to correct, complete or update it;
- to erase it, where we do not need to keep it by law;
- to withdraw consent you have given, which stops future use (it does not undo bookings already made with suppliers);
- to deal with a grievance about how we have handled your data;
- to note someone who may exercise these rights for you if you die or become unable to.
We will reply as soon as we can, and in any case within the time the law allows. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Contacting us about your data
Send your request through our contact form and say that it is about personal data; it reaches the same people who look after bookings.
Changes to this policy
When what we do with personal data changes, this page changes with it, and the date at the top moves. Significant changes will be pointed out to you before they affect a booking in progress.