Data Rights

Your rights, in outline

This page states, for each right the Digital Personal Data Protection Act gives you over your personal data, exactly how to exercise it: who to write to, what we check before we act, and how long we take. DPDP Rules 2025 r.14 requires us to publish the means of exercising a right, not merely its name.

What we collect and why is set out in full in our Privacy Policy, at /privacy-policy. Here is each right in outline, and where on this page to find how it actually works.

Access

A written account of what we hold against your enquiry or booking record: what was collected, when, and who has had reason to see it. Write to our Data Protection Contact naming your enquiry or booking reference, and we send it back to you in writing.

Correction

If a detail we hold is wrong, a misspelt name, a changed phone number, an old pick-up address, tell our Data Protection Contact and we correct it on your record. Where a document already carries the old detail, a quotation or an invoice already issued, the correction applies from that point on rather than rewriting something already sent.

Erasure

You may ask us to delete your personal data, and we act on it wherever nothing else requires us to keep it. Where a booking is still live, or a record behind it is one we are legally required to hold, we say plainly what we can delete now and what we must retain, and why: see Where erasure meets a retention duty, below.

Grievance redressal

If a request under this page is not handled to your satisfaction, that is itself a grievance, and it goes to our Grievance Officer on the same terms as any other complaint. The full escalation ladder is at /grievance-redressal.

Nomination

You may name another person, in advance, to exercise these rights on your behalf if you die or become incapacitated. How to register a nomination is set out under Nomination, below.

Withdrawal of consent

Where we act on your consent, you may withdraw it as easily as you gave it, through the same channel or by writing to the Data Protection Contact. Withdrawal stops what happens from that point on. How this works for a specific message channel, email, SMS or WhatsApp, is at /legal/communication-policy.

How to exercise a right

Write to our Data Protection Contact, or call. Say which right you are exercising, in your own words, and give us enough to identify your enquiry or booking: your name, your mobile number, and roughly when you contacted us.

Data Protection Contact

Sachin Jaglan, Data Protection Contact. Email sachin@om-travels.in · Phone +91 99966 69190 · Grand Trunk Road, Panipat, Haryana.

The same address and number that took your booking will take this request. There is nothing to fill in beyond your message: no separate portal to register on and no reference number you need before you start.

How we verify who you are

We check a data-rights request against the phone number or email already on your enquiry or booking record, because that is what identifies you to us in the first place. Where what you are asking for is straightforward, a summary of what we hold, say, that match is enough and we ask for nothing further.

Where a request is more consequential, an erasure that would touch a live booking, or a nomination being registered, we may ask one or two more questions to be sure it is genuinely you or your named nominee. We do not demand a document you would not ordinarily be asked for to complete a trip.

Turnaround

We acknowledge a request made under this page within 48 hours. We aim to give a substantive response within 30 days. Where a request needs more time than that, the outer limit we work to is 90 days, and we tell you at 30 days that more time is needed and why.

‘Acknowledged’ means an actual person confirms your request has reached us and tells you who is looking into it, within 48 hours of you writing in. ‘Substantive response’ means you have your answer: the summary you asked for, the correction made, or what we can and cannot delete and why.

This is a different clock from the one that answers a complaint about your trip itself, acknowledged within 24 hours and resolved within 15 days under our general Grievance Redressal process at /grievance-redressal. A request under this page specifically, asking what we hold, asking for a correction, an erasure or a nomination, works to the timeline above.

Nomination

You may name another person, in advance, to exercise these rights on your behalf if you die or become incapacitated, the same idea as naming a nominee for a bank account or an insurance policy. Write to our Data Protection Contact naming that person and your relationship to them. There is no special form; a written request is enough.

We record the nomination against your enquiry or booking record. If your nominee later writes to us to act on it, we confirm the circumstances, that you have in fact died or are incapacitated, and their standing to act, before treating their request on the same terms this page gives you.

Where erasure meets a retention duty

We honour an erasure request wherever nothing else requires us to hold the data. Where it does, a GST invoice, a tax record, or a record tied to a dispute that is still live, we tell you that plainly rather than decline the request outright or leave you to guess at the reason.

The commitment is purpose-based rather than a fixed period in years: a record is kept only for as long as the reason requiring it is still live, whether that is a statutory limitation period for a tax or accounting record or an ongoing dispute, and not after. Where part of what you have asked us to delete is not covered by any such reason, we delete that part now and tell you what remains, and why.

No fee, and no need to explain why

Exercising any right on this page costs nothing, and we do not ask you to justify why you are asking. Write in, and we act on it.

If you are not satisfied

If we have not resolved a request under this page to your satisfaction, raise it with our Grievance Officer in the first instance. The full escalation ladder and timelines are at /grievance-redressal.

Beyond our own process, you may complain to the Data Protection Board of India about how your personal data has been handled.

You do not have to have tried one before the other. Writing to the Grievance Officer first is usually quicker, and either route costs you nothing.