Aliana Travels (“we,” “us,” or “our”) operates the website alianatravels.in. We take your privacy seriously. In accordance with India’s data protection laws (such as the Digital Personal Data Protection Act 2023), we provide this Privacy Policy to explain how we collect, use, and protect your personal information. This notice is written in clear English and will be updated when our data practices or legal obligations change.
Who we are
Our website address is http://alianatravels.in.
Comments
When visitors leave comments on our site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help detect and block spam. We may also send a hashed version of your email address to the Gravatar service to see if you are using a Gravatar profile; see Automattic’s privacy policy for Gravatar. Once your comment is approved, your profile picture (if any) may appear publicly next to your comment.
Media
If you upload images to our website, avoid including embedded location data (EXIF GPS). Visitors can download images from the site and extract any location metadata. We do not automatically strip EXIF data, so please remove it before uploading.
Cookies
If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These cookies are for your convenience so you do not have to re-enter your details for future comments; they expire after one year. If you visit our login page, we set a temporary cookie to check if your browser accepts cookies; this cookie contains no personal data and is discarded when you close your browser. When you log in, we set cookies to remember your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me” when logging in, your login persists for two weeks. Logging out will remove these login cookies. If you edit or publish an article, an additional cookie (containing the post’s ID) is saved for one day.
Embedded content from other websites
Pages on this site may include embedded content (for example, videos, images, or articles from other sites). Embedded content behaves as if you have visited the other website. Those websites (and the embedded services they use) may collect information about you, use cookies, and embed additional third-party tracking. They may monitor your interaction with embedded content if you are logged into their services.
Who we share your data with
In general, we do not sell or share your personal data with unrelated third parties. We may disclose information to service providers and partners who assist with site operations (for example, a spam detection service or our web host), and we may share data if required by law (for instance, with law enforcement pursuant to a legal order). For example, if you request a password reset, we will include your IP address in the reset email. Otherwise, we only share your personal data as necessary to provide the features of the site.
How long we retain your data
If you leave a comment, we will retain the comment and its metadata indefinitely so we can recognize and approve any follow-up comments automatically. Registered users’ personal information (if any) is stored in their user profile. All users can view, edit, or delete their personal information at any time (except for changing their username). Administrators can also view and manage user data. If you request deletion of your data or comment, we will remove it unless we are legally required to retain it (for example, for records or security purposes). Under India’s data protection laws, we commit to erasing personal data once the original purpose of processing has been fulfilled.
What rights you have over your data
You have certain rights regarding your personal data. In particular, you may:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct or update any inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (subject to any legal obligations to retain certain data).
- Consent withdrawal: Withdraw consent to data processing where we rely on consent (if applicable).
- Complain: Lodge a complaint with our designated Grievance Officer or the Data Protection Authority if you believe your data rights have been violated.
- Nominations: Under Indian law, you may nominate another person to exercise your rights on your behalf in case of your death or incapacity.
For example, if you have an account or have left comments, you can request an exported file of the personal data we hold about you, or ask us to erase it (except for data we must keep for legal or security reasons). These rights are consistent with India’s DPDP Act, which provides all individuals the right to access, correct, and erase their data.
Where your data is sent
We use certain third-party services to help manage our site. For instance, visitor comments may be checked through an automated spam detection service. Other interactions (such as analytics or payment processing) may involve data transfers to service providers in India or abroad. We do not share your data with advertisers or marketers without your consent.
Localization for India: To comply fully with Indian law, you may wish to add the following details: name and contact of your Grievance Officer (required by DPDP Act), the address of your business (to establish identity), and the availability of this notice in regional languages if needed. Also ensure you implement “reasonable security practices” as per the Information Technology Act, 2000, and mention any data retention schedules (for example, seven-year retention for tax records). Including these specifics (and updating the policy when rules change) will help meet Indian legal requirements.
Sources: This policy follows WordPress’s recommended privacy template (as cited above) and is framed to meet India’s new data protection standards. For more information on the DPDP Act requirements, see the referenced guidelines.