Privacy, in plain language.

Dev Travels Pvt. Ltd. ("Dev Travels", "we", "us") is a private travel concierge company registered in India, operating from Connaught Place, New Delhi, since 1987. For the purposes of applicable data-protection law, including the Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal information described in this policy.

Questions about this policy or your data can be sent to privacy@devtravels.in or to our postal address. A named person — not a form letter — will respond within five working days.

We collect only what a journey requires: your name, contact details and communication preferences; passport and identity details needed for bookings and visas; travel preferences, dietary and accessibility needs you share with us; payment information processed through our payment partners (we never store full card numbers); and correspondence with your specialist.

When you browse our website we collect standard technical information — pages visited, approximate location and device type — through privacy-respecting analytics. We do not run advertising trackers and we do not build marketing profiles.

Your information is used to design, book and operate your journeys; to arrange visas, insurance and documentation; to reach you with essential on-trip communication; and — only with your consent — to send occasional editorial writing and offers you can decline at any time with one click.

We do not sell personal information. We have never sold personal information. That sentence will survive every future edit of this page.

Operating a journey means sharing relevant details with the people who deliver it: airlines, hotels, guides, transport providers, visa processors and insurers — only the minimum each requires, under contract.

Some of these suppliers are outside India, which means your information crosses borders in exactly the way your trip does. We share nothing beyond what the booking requires, and we disclose suppliers on your itinerary so there are no surprises.

Booking records are retained for the period required by Indian tax and company law (currently eight years). Passport copies and visa documents are deleted within ninety days of your return unless you ask us to hold them for a future trip — many guests do, and we treat that as a standing instruction you can withdraw anytime.

Marketing preferences persist until you change them. Everything else is reviewed annually and deleted when it no longer serves a purpose.

You may ask us at any time to confirm what we hold about you, correct it, delete it, or stop using it for marketing. Write to privacy@devtravels.in from any address you've travelled with and we will act within fifteen days, usually far sooner.

If we ever fail you on these commitments, you may escalate to our founder directly — bharat@devtravels.in reaches his desk — or to the relevant data-protection authority.

Guest records live on encrypted systems with access limited to the specialists working on your journey. Staff sign confidentiality undertakings; suppliers are bound contractually; and we test our own defences with outside specialists annually.

No system is perfect, and we won't pretend otherwise. If a breach ever affects your data, we will tell you promptly, plainly, and with a phone number to call.

This policy was last updated in September 2026. When we change it, the date changes with it; for anything material we will write to past guests directly. Previous versions are available on request.