Last updated: November 2026
This policy explains what personal data Novoya Travels (“we”, “us”), a sole proprietorship, collects, why we need it and the choices you have. We are based in Bengaluru, Karnataka (formerly Uttar Pradesh).
1. What we collect
- Enquiry details: your name, email address, company and the trip details you share with us through a form, the trip planner, email or Instagram.
- Booking details: traveller names, dates of birth, passport details, nationality, contact details, meal, medical or accessibility needs you tell us about, and payment records.
- Visa documents: what the embassy or visa centre requires, which can include passport copies, photographs, bank statements, income tax returns, salary slips and employer letters.
- Corporate details: employee traveller details, travel policy, billing details and GST information supplied by your organisation.
Please only share another person’s details if you have their permission. A parent or guardian must provide and agree to the use of a child’s details.
2. Why we use it
- To answer your enquiry and prepare itineraries and quotes.
- To make and manage bookings, and to support you before, during and after your trip.
- To prepare and submit visa applications you ask us to handle.
- To issue invoices and meet our tax, accounting and legal duties.
- To send travel ideas and updates, only if you sign up. You can unsubscribe at any time.
We do not sell your personal data.
3. Who we share it with
We share only what is needed to deliver what you asked for:
- Airlines, hotels, cruise lines, transport and activity providers, and insurers.
- Embassies, consulates, visa centres and immigration authorities.
- Payment, email, website hosting and form delivery providers who work for us.
- Your employer, where your travel is booked through a corporate account.
- Government or law enforcement bodies, where the law requires it.
Travel often means your data must go to suppliers and authorities outside India. Those countries may have different data protection laws.
4. Cookies and this website
This website does not use advertising or analytics cookies. It loads its fonts from Google Fonts, so your browser shares your IP address with Google when a page opens. If we add analytics later, we will update this policy first.
5. How long we keep it
We keep personal data only for as long as we need it for the purposes above, or for as long as tax, accounting or other laws require. Visa documents are kept only until your application and any follow-up are complete, then deleted, unless the law requires us to keep them longer.
6. How we protect it
We use reasonable technical and organisational safeguards and limit access to the people who need it. No system is completely secure, so please avoid sending passport copies or financial documents through Instagram or other social media.
7. Your rights
Under India’s Digital Personal Data Protection Act, 2023, you can ask us to:
- Tell you what personal data we hold and who we have shared it with.
- Correct, update or erase your data, unless the law requires us to keep it.
- Withdraw consent you have given. This may mean we can’t continue a booking or application.
- Nominate someone to exercise these rights on your behalf.
Email hello@novoya.in to make a request.
8. Questions and complaints
Our Grievance Officer is reachable at hello@novoya.in. If we don’t resolve your concern, you can complain to the Data Protection Board of India.
9. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date at the top.