Privacy policy

Who we are

This privacy policy explains how [Your registered business name], [Street address], Ramnagar, Nainital, Uttarakhand 244715, India, trading as JimCorbett.org (“we”, “us”), handles personal data. For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the “data fiduciary” for data you give us through this website, WhatsApp, phone or email.

We are an independent travel facilitator, not Corbett Tiger Reserve. Data you enter on the official portal corbettonline.uk.gov.in is handled by the Forest Department under its own policy.

What we collect

When you send an enquiry form, we collect:

• Your name and mobile number (with country code).
• Your travel dates (or preferred months and trip length if your dates are flexible).
• The number of adults and children, and children’s ages (needed for hotel and safari pricing).
• Trip details you choose to give: trip type (couple, family, group), the resort, zone, package or cab route you are interested in, whether you need transport, vehicle type, pickup point, budget, interests and any message.
• Technical data: the page you sent the enquiry from and a one-way hashed (scrambled) version of your IP address, used only to stop spam. We do not store your raw IP address with your enquiry.

When you book, we also collect what suppliers require: the names, ages, gender, nationality and photo ID details of each traveller for CTR permits, and ID for hotel check-in. If you contact us on WhatsApp, phone or email, we keep that conversation. We do not collect payment card details; payments are handled by your bank or UPI app.

Why we use it

• To reply to your enquiry, check availability and send you quotes.
• To make and manage bookings: permits, stays, packages and cabs.
• To contact you about your trip, including travel-day coordination and changes such as zone closures.
• To keep accounts, invoices and tax records as the law requires.
• To prevent spam and fraud, and to improve our service using overall, non-identifying statistics.

We process your data on the basis of your consent, which you give by sending an enquiry or booking, and for legitimate uses allowed by the DPDP Act such as complying with the law. We do not sell your data, and we will not send you marketing messages unless you ask for them.

Who we share it with

We share your details only as far as needed to arrange what you asked for:

• The specific partner you enquire about: for example the resort you chose, our cab operator for a cab request, or our safari operator for a safari request. We usually forward the enquiry to them over WhatsApp, including your name, phone number, dates, guest details and trip notes. They use it only to quote for and provide that service.
• Corbett Tiger Reserve’s permit system, when we book permits or rest houses for you, using the traveller names and ID details you provide.
• Service providers who help us run the business, such as our web host and, if we enable it, a CRM or automation tool that receives a copy of new enquiries. They act on our instructions.
• Authorities, if required by law, court order or to protect someone’s safety.

General enquiries that are not for a specific supplier stay with our team.

Reviews, partner applications and planning tools

• Reviews: if you write a review we collect your name, city (optional), travel month, trip type, rating and text. Only your name as you enter it, city, travel month and review are published, after our team approves them. A booking reference, if you add one, is used only to show a “Verified booking” badge and is never published.
• Partner applications: if a business applies to work with us, we collect its business and contact details and the information it provides about its services, to assess the application.
• Trip planner tools: the packing checklist and planner remember your choices in your own browser’s local storage, on your device only. That data is never sent to us, and you can clear it at any time from your browser settings.

Cookies, advertising and third-party services

Our own cookie. The website sets a session cookie that protects our forms against misuse. It expires when you close your browser.

Advertising. We use, or may use, Google AdSense to show advertisements on some pages. This helps keep our guides free. When ads are shown:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. See how Google uses data when you use its partners’ sites: policies.google.com/technologies/partner-sites.
• You can opt out of personalised advertising in Google’s Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info/choices.
• Where the law requires it (for example for visitors from the European Economic Area, the United Kingdom and Switzerland), a consent message lets you accept or refuse advertising cookies before they are used. You can change your choice at any time from the privacy link it shows.
• Ads are labelled “Advertisement”. We do not choose individual ads and do not endorse the advertisers.

Analytics. If we add website analytics, it will be used only for overall visitor statistics, and we will update this section first.

Some pages also load content from other services, which may receive your IP address and set their own cookies under their own policies:

• WhatsApp (Meta), when you tap a WhatsApp button.
• Google Maps, for the map on our contact page, and Google Fonts, for our typefaces.
• Wikimedia Commons, which hosts some of our wildlife photos.

Links to other websites, including the official CTR portal, are covered by those websites’ own privacy policies.

Storage, retention and security

Enquiries are stored on our own web server in India or with our hosting provider, and in the WhatsApp and email accounts our team uses. We keep enquiries for up to 24 months so we can help with repeat trips and resolve any disputes, and then delete them. Booking and invoice records are kept for as long as tax and accounting laws require (usually 8 years). Partners delete or keep data under their own obligations.

We protect data with HTTPS encryption, a password-protected admin area, limited staff access and spam protection. No system is perfectly secure; if a breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires.

Your rights

Under the DPDP Act you can:

• Access a summary of the personal data we hold about you and who we have shared it with.
• Correct or update inaccurate or incomplete data.
• Delete your data (“erasure”), unless we must keep it by law, for example invoices.
• Withdraw consent at any time. This does not affect what we did before, but we may not be able to continue a booking.
• Nominate someone to exercise your rights if you die or become unable to.
• Complain to us, and then to the Data Protection Board of India if you are not satisfied.

Email care@jimcorbett.org from the number or email you used, or quote your booking reference. We respond within 30 days.

Children

Our services are booked by adults. We collect children’s ages (and, for permits, their names and IDs) only from the parent or guardian making the booking, and only to price and arrange the trip. We do not knowingly collect data directly from anyone under 18. Our website is meant for adults planning travel and is not directed at children; we do not ask ad networks to target children.

Grievance officer and updates

Grievance officer: [Your registered business name], [Street address], Ramnagar, Nainital, Uttarakhand 244715, India. Email: care@jimcorbett.org. We acknowledge within 48 hours.

We may update this policy when our services or the law change. The date at the top of this page shows the latest version, effective 25 September 2026. Significant changes will be highlighted on this page.