Privacy policy

Last updated 22 October 2026 · Draft for legal review

This policy explains how [Legal entity name] ("Riva", "we") collects and uses personal data when you use rivaadventures.in or book with us. We process personal data in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

What we collect

• Details you give us: name, email, phone number, travel dates, number of travellers and trip preferences.
• Details needed to deliver a trip: names, ages and ID details of travellers, dietary and medical notes you choose to share.
• Payment records: amount, date and transaction reference. Card and bank details are handled by our payment gateway, not by us.
• Basic website data: pages visited and device type, collected through cookies or analytics tools if enabled.

How we use it

• To answer your enquiry and prepare a quote.
• To book and run your trip, including sharing the necessary details with tour operators, hotels, airlines, visa service providers and guides, some of whom are outside India.
• To send invoices, confirmations and trip updates.
• To send occasional offers, only if you opt in. You can unsubscribe at any time.
• To meet legal, tax and accounting obligations.

Who we share it with

We share data only with suppliers who deliver your trip, our payment gateway, our IT and email providers, and authorities where the law requires it. We do not sell personal data.

How long we keep it

Enquiry data is kept for up to 24 months. Booking and invoice records are kept for as long as tax law requires, currently up to 8 years.

Your rights

You can ask us to access, correct or erase your personal data, withdraw consent, or nominate someone to exercise these rights for you. Email hello@rivaadventures.in and we will respond within 30 days.

Grievance officer

[Name], Grievance Officer, [Legal entity name], [Registered office address, Bengaluru, Karnataka]. Email: grievance@rivaadventures.in

Changes

We will post any changes on this page with a new date at the top.