This policy explains how Wrong Trip, operated by [REVIEW: legal name] ("we", "us"), collects and uses your personal data when you visit wrongtrip.com, contact us or book a trip. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. What we collect
- Contact details: name, phone number, email address and Instagram handle, when you message us or book.
- Booking details: date of birth, gender (for room pairing), passport details, flight details and an emergency contact.
- Health information you choose to share: medical conditions, injuries or allergies, so we can keep you safe.
- Payment details: the amount, date and UPI or bank transaction reference. We never see or store your UPI PIN, card details or bank login.
- Photos and videos: taken during the trip by our videographer and hosts.
- Website data: wrongtrip.com doesn't use cookies or tracking pixels. Our host (Netlify) and Google Fonts receive standard technical data such as your IP address and browser type to deliver the site. [REVIEW: update this if you add Google Analytics, the Meta Pixel or similar]
2. Why we use it
- To answer your questions and manage your booking and payments
- To book villas, activities and transport, and to pair rooms
- To keep the group safe and contact someone in an emergency
- To meet legal, tax and accounting requirements
- To share trip photos and videos with you, and to feature the group in Wrong Trip content, as described in our Terms
- To tell you about future trips, if you've agreed to hear from us (you can opt out any time)
3. Who we share it with
We only share what's needed, with:
- Our suppliers in Bali (villas, gyms, venues, surf school and transport providers), so they can deliver your trip
- Payment and banking providers that process your payments
- Our accountant and professional advisers
- Government or law enforcement authorities, when the law requires it
Some of these suppliers are in Indonesia, so your data may be transferred outside India for the purpose of delivering your trip. We never sell your personal data.
4. How long we keep it
We keep booking and payment records for as long as Indian tax and accounting law requires [REVIEW with your CA: typically 8 years]. Passport and health details are deleted within [REVIEW: e.g. 90 days] after the trip ends. Group chats and content may be kept longer, unless you ask us to remove you.
5. Your rights
You can ask us to access, correct, update or erase your personal data, or withdraw your consent, at any time. Withdrawing consent may mean we can't complete your booking. You can also nominate someone to exercise these rights for you, and raise a grievance with us or with the Data Protection Board of India.
6. Security
We keep your data in password-protected accounts with access limited to the hosts. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you if a breach affects you, as the law requires.
7. Age
Our trips are for adults aged 18 and over. We don't knowingly collect data from children.
8. Grievance officer and contact
Grievance Officer: Mohnish Doultani
Email: mohnish@wrongtrip.com · Phone: +91 99875 12903
Address: [REVIEW: postal address]
We'll acknowledge your request within 48 hours and resolve it within 30 days. [REVIEW]
9. Changes
We may update this policy. The latest version will always be on this page, with the date it was last updated.