Last updated: 13 October 2026
This policy explains how [Registered business name], which operates The Machaan, collects, uses, shares and protects your personal information, in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
Information we collect
- Details you give us — name, phone number, email address, travel dates, destinations, number and names of travellers, and anything you write in a form, email or message.
- Booking and membership details — identity and travel documents where a supplier or the law requires them, membership details, and billing address.
- Payment information — the payment reference, amount, date, status and the last digits / type of payment method, received from our payment partner. We do not collect or store full card numbers, CVV, UPI PIN or net-banking passwords; these are entered only on our payment partner’s secure page.
- Website usage — basic technical data such as browser type and pages visited, as described in our Cookie Policy.
Why we use it
- To answer your enquiries and prepare quotations.
- To make and manage bookings and memberships, and send confirmations.
- To process payments and refunds, and to prevent fraud.
- To provide customer support and resolve complaints.
- To meet legal, tax, accounting and regulatory obligations.
- To send you offers or newsletters, only if you have agreed to receive them. You can unsubscribe at any time.
Who we share it with
We do not sell your personal information. We share it only as needed to provide the service you asked for:
- Payment partner — our RBI-authorised payment aggregator and its partner banks and card networks receive the details needed to process your payment or refund, for transaction tracking and fraud prevention, and as required by the Reserve Bank of India.
- Travel suppliers — hotels, airlines, transport and activity providers receive the traveller details needed to fulfil your booking.
- Service providers — hosting, email and communication providers that help us run the website and support, under confidentiality obligations.
- Authorities — government, regulatory or law-enforcement authorities when required by law.
By submitting a form or making a payment, you consent to this sharing for these purposes.
How long we keep it
We keep enquiry details for as long as needed to respond and follow up. Booking, payment and invoice records are kept for up to 10 years, as required by tax laws and our payment partner’s regulatory obligations. After that, data is deleted or anonymised.
Security
The website uses HTTPS encryption, and access to customer information is limited to staff who need it. Payments are handled on our payment partner’s PCI DSS-compliant systems. No online service can be completely secure; if a data breach affects you, we will inform you and the relevant authorities as required by law.
Your rights
- Ask for a summary of the personal information we hold about you.
- Ask us to correct or update inaccurate information.
- Withdraw consent or ask us to delete your information, unless we must keep it by law or for an active booking.
- Raise a grievance about how your data is handled.
To use these rights, email info@clubmachaan.com or our Grievance Officer (seeGrievance Redressal). We respond within 4 business days.
Children
Bookings must be made by adults. We collect information about children only as travellers on a booking made by their parent or guardian.
Changes
We may update this policy. The “last updated” date at the top shows when it was last changed.