Privacy Policy

This Privacy Policy explains how Braj World (“we”, “us”, the “Issuer”) collects, uses, discloses and protects personal information when you visit our website, create a customer account, make an Advance Visit Booking, or interact with our services.

This Policy should be read together with the Advance Visit Booking Terms & Conditions. By using the site or making a booking, you acknowledge the practices described here.

The data controller responsible for your personal information is the Issuer identified above for the proposed Braj World destination. A designated Grievance Officer is available for privacy-related requests and complaints (see “Contact Us”).

We collect information you provide and information generated when you use our services:

Consistent with Terms clause 37, we process personal information for the following purposes:

• booking and account creation
• payment and payment verification
• identity verification
• voucher administration and record-keeping
• referral programme administration, including crediting referral experience value and publishing a masked leaderboard
• fraud prevention and security
• redemption of eligible experiences after opening
• customer support and grievance handling
• legal and regulatory compliance
• transactional communications (confirmations, alerts, service and redemption updates)

We rely on the performance of your booking contract, our legitimate interests in operating and securing the service, your consent (where applicable), and compliance with law as the bases for processing.

Marketing or promotional messages are sent only where you have separately opted in, where required. Transactional messages relating to your booking are not marketing and may be sent as necessary to administer your voucher.

You can withdraw marketing consent at any time using the unsubscribe link or by contacting us; this does not affect essential transactional communications.

Payments are processed by third-party payment providers. Sensitive payment credentials (such as full card or bank details) are collected and processed directly by the payment gateway under their own security standards and are not stored on our servers. We retain only the transaction reference and status needed to administer your booking.

We do not sell your personal information. We may share it with:

• service providers who help us operate the platform (hosting, database, payment processing, identity/OTP verification, communications and analytics), under confidentiality obligations
• professional advisers, auditors and insurers
• competent authorities, regulators or courts where required by law or to prevent fraud and abuse
• a successor entity in the event of a lawful reorganisation, subject to this Policy

We use strictly-necessary cookies and session identifiers to keep you signed in and to secure the service, and may use limited analytics to understand and improve usage. You can control cookies through your browser settings; disabling essential cookies may affect sign-in and booking functionality.

We retain booking and voucher records for as long as your voucher remains valid and redeemable, and thereafter for the period required to meet legal, tax, accounting, dispute-resolution and fraud-prevention obligations. When no longer required, information is securely deleted or anonymised.

We apply reasonable technical and organisational measures — including access controls, encryption in transit, OTP/identity verification and anti-fraud checks — to protect personal information. No method of transmission or storage is completely secure; we encourage you to protect your account credentials and QR codes.

Subject to applicable law, you may request to:

• access a copy of your personal information
• correct inaccurate or incomplete details (note: name correction is not a means to transfer a voucher)
• request deletion where there is no overriding legal or contractual reason to retain it
• withdraw consent for optional processing such as marketing
• raise a grievance or complaint with our Grievance Officer

We will respond to verified requests within the timelines required by applicable law.

A parent or legal guardian may create a booking in the name of a minor and is responsible for that booking. We do not knowingly collect personal information directly from children without guardian involvement. Please contact us if you believe a minor’s information has been provided without appropriate authority.

Your information is processed on infrastructure that may be located in or outside your state or country. Where information is transferred, we take steps to ensure a comparable level of protection consistent with applicable law.

We may update this Policy from time to time to reflect changes in law, technology or our practices. Material changes will be notified through the website or registered communication channels, and the “Effective Date” above will be updated.

For any privacy question, request or complaint, contact our Grievance Officer:

• Grievance Officer: [●]
• Email: [●]
• Phone / WhatsApp: [●]
• Postal Address: [●]

Nothing in this Policy limits rights that cannot be waived under applicable data-protection or consumer law. If this Policy conflicts with mandatory law, mandatory law prevails.