Legal information
This route records the current privacy status honestly while the legally reviewed business policy and contact details are still outstanding.
A complete, legally reviewed privacy policy was not included in the supplied business material. This notice describes the implemented enquiry workflow but still requires the business identity, contact, retention, and traveller-rights sections to be approved before production launch.
The Plan My Trip form stores the details a traveller submits: name, mobile and optional WhatsApp number, optional email, city, dates, party size, trip preferences, budget range, journey notes, enquiry source, and limited campaign parameters. It generates a reference number and does not create an account, booking, or payment.
Cloudflare Turnstile processes a verification token to reduce automated abuse. A one-way hash derived from the request network address is stored for short-window rate protection; the raw address is not stored in the lead record. Lead access is restricted to the administrative workspace protected by Cloudflare Access in production.
Enquiry data is used to review the requested journey, prepare a response, coordinate follow-up, and protect the form. The current build does not process online payment or add marketing analytics identifiers. Final retention periods, deletion procedures, processors, and traveller request channels still require business and legal approval.
Production may use Cloudflare Web Analytics for aggregate traffic and page-performance measurement after the privacy notice is approved. Cloudflare states that its RUM beacon does not use cookies or browser storage and discards the source IP address rather than storing it in its analytics databases. The final notice must still name this processor and describe the approved configuration.
The final policy must identify the business contact and legal entity, lawful processing basis, retention schedule, applicable processors, cookie use, cross-border handling if any, and the method travellers can use to request access, correction, or deletion.
