This page is a starting draft describing how this website actually handles data, based on its real
functionality. It has not been reviewed by a lawyer and should not be treated as final legal advice —
please have it reviewed before relying on it for compliance purposes (e.g. GDPR for EU visitors).
Privacy Policy
Last updated: 19 September 2026
IWIS Global ("we", "us") operates this website to sell private Agra and Taj Mahal tours. This policy
explains what information we collect when you use it, and how it's used.
Information we collect
Booking details: when you book a tour, we collect your name, email address, and phone number, along with your chosen tour, travel date, and traveler count.
Payment: payments are processed by Razorpay. We never see or store your card, UPI, or bank details — Razorpay handles that directly, and we only receive confirmation that a payment succeeded.
Account information (optional): if you sign in with Google or Apple, we receive your name, email address, and (for Google) profile photo from that provider, so you can view your booking history.
Preferences: your chosen language and currency are stored in cookies on your device so the site remembers them on your next visit.
Contact via WhatsApp or email: if you message us on WhatsApp or by email, that conversation is governed by WhatsApp's (Meta's) or your email provider's own privacy practices, not this policy.
How we use this information
To process and confirm your booking, and to contact you about it.
To let you sign in and view your booking history, if you create an account.
To respond to questions you send us.
To meet legal and accounting obligations (e.g. retaining payment records).
We do not sell your personal information, and we do not run advertising trackers or analytics scripts on this site.
Who we share it with
Razorpay — to process payments.
Google / Apple — only if you choose to sign in with them.
Cloudflare — our hosting and database provider; your requests pass through their infrastructure to reach our servers.
We don't share your information with anyone else for marketing purposes.
Cookies
This site uses a small number of cookies, all for functionality rather than tracking or advertising:
currency and lang — remember your preferred currency and language.
customer_session — keeps you signed in, if you have an account.
admin_session — staff-only, used to access the booking management system.
oauth_state — a short-lived cookie used only during Google/Apple sign-in, deleted immediately after.
Data retention
We keep booking records for as long as needed for accounting, legal, and customer-support purposes. You can ask us to delete your account and associated personal data by contacting us — see below.
Your choices
You can book a tour as a guest without creating an account. If you do sign in, you can stop using that
account at any time, and can ask us to delete your data by contacting us.
