Privacy Policy

Shera Travels (“Shera Travels”, “we”, “us”, or “our”) is a travel company registered in Jammu & Kashmir, India, operating from Radio Colony Lawaypora, Srinagar, J&K – 190017 (GST: 01KODPS7232P1ZE). We arrange tour packages, hotel bookings, air ticketing, cab services, and visa assistance.

This policy applies to sheratravels.com and to enquiries you send us through WhatsApp, phone, email, or our advertisements on Facebook and Instagram. We are the data fiduciary responsible for your personal data under India’s Digital Personal Data Protection Act, 2023.

We collect only the information needed to respond to you and arrange your travel:

• Contact details — your name, phone number, WhatsApp number, and email address.
• Trip details — the destination you are interested in, intended travel dates, number of travellers, and any notes or special requirements you share with us.
• Enquiry source — whether you reached us through our website, a Facebook or Instagram ad, WhatsApp, or a referral. This helps us understand which of our channels are useful.
• Booking information — for confirmed bookings, the traveller details required by hotels, airlines, transport operators, and (for visa assistance) the relevant authorities. This can include government ID or passport details where a supplier legally requires them.
• Correspondence — messages you send us on WhatsApp, email, or our contact forms.

We do not ask for or store your card numbers, UPI PIN, net-banking credentials, or any other payment secrets on our website.

We receive your information when you:

• fill in an enquiry, booking, or newsletter form on our website;
• click a WhatsApp button on our site or on one of our ads and message us;
• call us or email us directly;
• submit your details through a lead form on a Facebook or Instagram ad.

In every case you provide the information yourself. We do not buy contact lists or scrape personal data from other sources.

• To reply to your enquiry and share itineraries, availability, and pricing.
• To make and manage your booking — reserving hotels, vehicles, flights, and permits on your behalf.
• To support you before, during, and after your trip.
• To send booking confirmations, reminders, and trip-related updates.
• To send occasional offers and travel updates — only if you asked for them, and you can stop them at any time.
• To meet our legal, tax, and regulatory obligations, and to resolve disputes.

We rely on your consent for marketing messages, and on the necessity of performing the travel services you asked for in every other case.

We never sell your personal information. We share it only where it is needed to deliver your trip:

• Travel suppliers — hotels, houseboat owners, airlines, transport and cab operators, guides, and activity providers involved in your booking.
• Authorities — where a permit, visa, or local registration requires traveller details, or where the law obliges us to disclose information.
• Service providers — the vendors that run our website, database, and customer records. They may process your data only on our instructions and may not use it for their own purposes.

We advertise our tour packages on Facebook and Instagram. Some of those ads invite you to start a WhatsApp conversation with us.

• When you message us from an ad, we receive the phone number and name you use on WhatsApp, along with your message.
• When you submit a lead form inside Facebook or Instagram, we receive the details you entered in that form.
• Meta Platforms shows our ads to audiences defined by interests and location. We do not upload your contact details to Meta to build advertising audiences.
• Meta’s own handling of your data is governed by its policy, available at facebook.com/privacy/policy.

Our website uses only the cookies needed for pages to load and function correctly. We do not use advertising cookies to track you across other websites.

If we add analytics or advertising measurement tools in future, we will update this policy and, where the law requires it, ask for your consent first.

Your enquiry and booking records are stored in our customer database, hosted by Supabase, and are accessible only to authorised Shera Travels staff through our internal CRM.

Our hosting and database providers may store data on servers outside India. Where that happens, we take reasonable steps to ensure your information continues to be protected to the standard described in this policy.

We keep enquiry records for up to three years from your last contact with us, so that we can pick up where we left off if you return. Booking and invoice records are kept for eight years, as required by Indian tax and accounting rules.

If you ask us to delete your data, we will remove it except where we are legally required to retain a record.

Under the Digital Personal Data Protection Act, 2023, you may ask us to:

• tell you what personal data of yours we hold and how we use it;
• correct anything that is wrong or out of date;
• delete your data where we are not required to keep it;
• stop sending you marketing messages;
• nominate someone to exercise these rights on your behalf.

Write to info@sheratravels.com and we will respond within 30 days. To stop marketing messages on WhatsApp, simply reply STOP.

Our website is served over HTTPS, and access to our customer database is restricted to authorised staff. We review who has access on a regular basis.

No system is completely secure. If a breach ever affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

Our services are meant for adults. We do not knowingly collect personal data directly from anyone under 18. Children travelling as part of a family booking are registered by a parent or guardian, who provides their details on their behalf.

We may update this policy as our services or the law change. The revised version will always appear on this page with a new “last updated” date. Significant changes will be highlighted on our website.

For any question about this policy, or to exercise the rights described above, contact our Grievance Officer:

If you are not satisfied with our response, you may raise a complaint with the Data Protection Board of India.