Privacy Policy

1. Information We Collect

At GlobeGlance, we collect only the information necessary to provide our train booking services effectively and securely.

Personal Information You Provide:

• Full name, email address, phone number (including WhatsApp number for OTP verification)
• Date of birth, gender, and Aadhaar/PAN details (for IRCTC verification where required)
• Passenger details including PNR, berth preferences, and travel documents
• Payment information (handled securely by our payment partners)
• Profile information like photo (optional) and emergency contacts

Automatically Collected Information:

• IP address, device type, browser information, and operating system
• Usage data including pages visited, search history, and session duration
• Location data (approximate, for service optimization)
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your information for the following legitimate purposes:

• Processing train ticket bookings and PNR management
• Sending booking confirmations, e-tickets, and travel updates via email/SMS
• Personalizing your experience with travel recommendations and saved preferences
• Verifying identity and preventing fraudulent bookings
• Providing customer support and resolving complaints
• Analyzing usage patterns to improve platform performance
• Complying with Indian Railways regulations and legal requirements
• Sending promotional offers (with your consent)

3. Legal Basis for Processing

We process your data based on:

• Contractual necessity (to fulfill your booking requests)
• Legal obligations (IRCTC compliance, tax laws, RERA requirements)
• Legitimate interests (fraud prevention, service improvement)
• Your explicit consent (for marketing communications)

4. Data Sharing and Disclosure

Your data is shared only when necessary:

• Service Providers: Indian Railways/IRCTC for booking processing, payment gateways (Razorpay, Paytm), SMS providers
• Legal Authorities: When required by law, court orders, or government agencies
• Business Transfers: In case of merger, acquisition, or sale of assets

We never sell your personal data to third parties.

5. International Data Transfers

Our cloud hosting providers (AWS/Google Cloud) may store data on servers outside India. We ensure all transfers comply with India's Data Protection laws through Standard Contractual Clauses and adequacy decisions.

6. Data Security

Your data's protection is our priority:

• 256-bit SSL/TLS encryption for all data transmission
• Secure password hashing with bcrypt and multi-factor authentication
• Regular penetration testing and vulnerability assessments
• PCI-DSS Level 1 compliance for payment processing
• Employee access limited by role-based controls
• Data anonymization for analytics purposes

7. Cookies and Tracking Technologies

We use:

• Essential Cookies: For login sessions and security
• Performance Cookies: To analyze site speed and usage
• Functional Cookies: To remember your preferences
• Marketing Cookies: For personalized ads (with consent)

Manage cookies via our Cookie Settings or browser preferences.

8. Data Retention

We keep your data only as long as necessary:

• Active accounts: Until deletion request
• Booking records: 8 years (per Income Tax Act and Railways Act)
• Logs and analytics: 12 months
• Marketing data: Until consent withdrawal

9. Your Rights Under DPDP Act 2023

As an Indian user, you have these rights:

• Right to access your personal data
• Right to correction of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to withdraw consent
• Right to complain to the Data Protection Board

Exercise your rights: Email privacy@globeglance.com or use our Data Request Portal.

10. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect data from minors. Parents/guardians can contact us to delete any child's data.

11. Third-Party Links

Our site contains links to IRCTC, payment gateways, and other services. We are not responsible for their privacy practices.

12. Changes to This Privacy Policy

We may update this policy. Significant changes will be notified via email (30 days notice) and displayed prominently on our platform. Continued use constitutes acceptance.