Privacy Policy

Version 2026-10-27 · Last updated 27 October 2026

In short
  • We collect what we need to run your booking: your name, contact details, booking and payment status.
  • We share your name, phone number and booking details with the operator who runs your activity, and nothing more.
  • We never sell your data, and we never see your card details or UPI PIN.
  • You can see, correct or delete your data at any time. Write to support@nomadway.in.

1. Who we are

Nomadway ("we", "us") runs nomadway.in and the Nomadway and Nomadway Partner apps, an online platform for booking adventure activities run by independent operators. This policy explains how we handle personal data of customers and operators, in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

2. What we collect

  • Account details: name, email, mobile number, country, and optionally gender and date of birth. If you sign in with Google, we receive your name and email from Google.
  • Booking details: the adventure, date, slot, number of adults and children, and any traveller names, ages or ID documents you choose to add.
  • Payment details: amount, status and transaction reference from our payment partner. Card numbers and UPI PINs are handled only by the payment partner.
  • Messages: help requests, emails and WhatsApp messages you send us, and reviews you write.
  • Device and usage data: IP address, browser or device type, app notification token, pages visited and how you reached us (for example the ad, social media platform or website that sent you), to keep Nomadway secure and working and to understand which of our ads are useful.
  • Enquiries: your name, phone, email and what you are looking for when you use our contact form or ask us to plan a trip, so we can reply and help you book.
  • Consent records: when you accepted our terms and this policy, which version, and from which IP address.

3. Why we use it

  • To create your account, take your booking and payment, and send your ticket, reminders and updates by email, WhatsApp, SMS or app notification.
  • To let the operator run your activity and check you in.
  • To process cancellations, refunds and payouts, and answer your help requests.
  • To prevent fraud, keep the platform secure and meet our legal, tax and accounting duties.
  • To improve Nomadway. We send marketing only if you have agreed to it, and you can opt out at any time.

4. Who we share it with

  • The operator of your booking: your name, phone number, number of guests, date, slot and any notes, so they can run the activity. Operators may use this only for your booking.
  • Service providers that help us run Nomadway: payment (PhonePe), cloud hosting and storage (Google Cloud), email, WhatsApp and app notifications (Meta, Google Firebase), and sign-in (Google). They process data only on our instructions.
  • Authorities, when the law requires it or to protect someone's safety.

We do not sell or rent personal data to anyone.

5. How long we keep it

  • Account data: while your account is open. When you delete your account, we remove or anonymise your personal details.
  • Booking, payment and invoice records: for as long as tax and accounting laws require (generally 8 years), even after you delete your account.
  • Traveller ID documents: only as long as needed for the booking and any dispute about it.
  • Security logs: for a limited period, then deleted.

6. Your rights and choices

  • See and correct your details in your profile, or ask us for a copy of the data we hold about you.
  • Delete your account from your profile or the app, or ask us to erase your data (subject to records we must keep by law).
  • Withdraw consent for marketing at any time; it does not affect bookings already made.
  • Nominate someone to act for you if you are unable to.
  • Complain to our Grievance Officer (below), and, if not resolved, to the Data Protection Board of India.

7. Security

We use encrypted connections, restricted access, private storage for documents and regular backups. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

8. For operators

We collect the business and contact details, PAN, GSTIN, bank or UPI details, licences, insurance and other documents you give us, to verify your business, list your adventures, pay you and meet tax rules. Bank details are shown masked and can be changed only by our team. You receive customer details only to deliver their booking and must keep them confidential, as set out in the Operator Terms.

9. Children

Accounts are for people aged 18 and over. When a parent or guardian books for a child, they give the child's details on the child's behalf and consent to their use for the booking.

10. Contact and grievance officer

Questions or requests about your data: support@nomadway.in.

Grievance Officer: Pathikrit Mitra, Nomadway, contact@nomadway.in. We acknowledge complaints within 48 hours and aim to resolve them within one month.

11. Changes to this policy

We may update this policy. The version and date are shown at the top. When it changes, we ask customers to accept the new version at their next booking and operators before they continue in their portal.