PRIVACY POLICY OF TRIP TURBO PRIVATE LIMITED

FOR THE SERVICE USAGE VIA WEBSITE AND MOBILE APPLICATION
WEBSITE: www.tripturbo.com
Last Updated: July 30, 2026

1. PREAMBLE

1.1. This Privacy Policy describes how Trip Turbo Private Limited (“Company”, “We”, “Us”, or “Our”) collects, uses, discloses, and protects Your personal information when You (“User”) access or use Our Services through Our Website or Mobile Application.

1.2. By using Our Services, You agree to the collection and use of information in accordance with this Privacy Policy. This Policy is a legally binding agreement between You and Trip Turbo Private Limited. It does not apply to the practices of companies that We do not own or control, or to individuals that We do not employ or manage.

2. INTERPRETATION AND DEFINITIONS

The words with an initial capital letter have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural.

2.1. "Account" refers to a unique account created for You to access Our Service or parts of Our Service.

2.2. "Business" refers to the Company as the legal entity that collects Your personal information and determines the purposes and means of the processing of Your personal information, or on behalf of which such information is collected, alone or jointly with others.

2.3. "Company" (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Trip Turbo Private Limited.

2.4. "Cookies" are small files placed on Your computer, mobile device, or any other device by a website, containing details of Your browsing history and other information, among their many uses.

2.5. "Device" means any device that can access the Service, such as a computer, a cell phone, or a digital tablet.

2.6. "Personal Data" is any information that relates to an identified or identifiable individual, including an individual’s name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

2.7. "Sensitive Personal Data" means categories of Personal Data that require heightened care, including passport, national ID, and other government-issued identification numbers; health, dietary, or accessibility information provided for travel purposes; and any other category treated as sensitive under applicable law.

2.8. "Sale" for the purpose of this Policy, means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, Your personal information to another business or a third party for monetary or other valuable consideration. The Company does not sell Personal Data as defined here.

2.9. "Service" refers to the Website and Mobile Application.

2.10. "Suppliers" means the third-party providers of Supplier Services (e.g., airlines, hotels, bus operators, activity organizers) whose offerings are listed on Our Platform. Suppliers who wish to list their services on the Platform are subject to a separate Supplier Agreement with Trip Turbo.

2.11. "Usage Data" refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
2.12. "Website" refers to tripturbo.com, accessible from https://tripturbo.com/

2.13. "Mobile Application" refers to the mobile software application developed by Trip Turbo Private Limited, available on iOS and Android platforms, to access and use the Company’s travel-related services.

2.14. "User" means You, the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

2.15. "Google Analytics Advertising Features" means the Google Analytics 4 (GA4) features We use that combine Our own visitor data with Google’s advertising data, including Google Signals, remarketing, and advertising reporting, as further described in Section 3.2.8.

3. COLLECTION OF PERSONAL DATA

3.1. The Company shall collect information for the purpose of providing the Services, as outlined below, to offer and deliver the service(s) chosen by You, and to fulfil Our legal obligations as well as Our obligations towards third parties under Our Terms and Conditions.

3.2.1  Registration on the Website and Mobile Application

Information which You provide while subscribing to or registering on the Website, including but not limited to Your personal identity (name, gender, marital status, age, etc.), contact details (email address, postal address, frequent flyer number, telephone and/or fax numbers), billing information, and payment history. When providing payment information, You will be interacting with Our secure third-party payment processors as detailed in Section 4.6.

3.2.2  Other Information

(a) Transactional history (excluding banking details) related to Your e-commerce activities and buying behaviour conducted on or through the Trip Turbo platform. The Company does not collect transactional data from activities carried out on third-party platforms outside of Trip Turbo.

(b) Your usernames, passwords, email addresses, and other security-related information used by You in relation to the Company’s Services.

3.2.3  User-Generated Content

Data either created by You or by a third party which You wish to store on the Company’s servers, such as image files, documents, etc.

3.2.4  Social Media Login Data

We may allow You to register or log in using identity services from Facebook, Google/Gmail, or other social media platforms. If You choose this option, We receive certain profile information from Your social network provider (typically name, email address, and profile picture), used only for the purposes described in this Policy. We do not control, and are not responsible for, Your third-party social media provider’s further use of Your information.

3.2.5  Information of Other Travelers

If You make a booking for other traveler(s) through Your Account, You will be providing Us with their Personal Data. It is Your sole responsibility to obtain explicit consent from each such traveler before providing their Personal Data to Us, and to inform them of this Privacy Policy.

3.2.6  Travel Documents and Identification

For domestic and, in particular, international bookings, certain Suppliers, airlines, immigration authorities, or regulatory requirements may require Us to collect passport details, national ID, visa information, date of birth, nationality, or other government-issued identification data. This information is collected only where necessary to complete a specific booking, is shared only with the relevant Supplier(s) and, where legally required, government or immigration authorities, and is treated as Sensitive Personal Data under this Policy — subject to the additional safeguards described in Section 4.9.

3.2.7  Mobile Application Data

If You use Our Mobile Application(s), We may collect the following where You grant permission through Your device settings: Location-Based Information (e.g., finding nearby hotels, relevant offers); SMS Messages for OTP verification; External Storage access for downloading tickets and itineraries; Camera access for profile pictures, document scanning, or ticket scanning (for Service Providers); Notifications for push alerts about offers, news, and booking updates; and Media Files (Read) for uploading travel documents or profile images. We may also automatically collect Device Information such as device ID, model, operating system, IP address, mobile network, and app usage data. You may change these permissions at any time in Your device settings.

3.2.8  Cookies, Analytics, and Advertising Tools

We and Our Service Providers use Cookies and similar tracking technologies (including web beacons and pixels) to understand how You use Our Service, remember Your preferences, provide functionality, analyze performance, and support advertising. Cookie types include Essential, Performance/Analytics, Functionality, and Targeting/Advertising cookies, and may be Session, Persistent, First-Party, or Third-Party. Where required, We present a cookie consent tool on Your first visit, and You may adjust Your browser settings to remove or reject cookies, though this may affect certain features.
We use the following third-party analytics and advertising tools, which may process Your data as described below:

Google Analytics (GA4) and Google Signals: We use Google Analytics 4 to understand how You use Our Service. Where Google Signals is enabled, and where You are signed in to a Google Account with Ads Personalization turned on, Google will associate Your visitation data on Our Service with information from Your Google Account to provide Us with aggregated, cross-device reporting and to enable remarketing and advertising reporting features (together, “Google Analytics Advertising Features”). This involves the use of first-party cookies (such as the Google Analytics cookie) together with third-party cookies or identifiers (such as Google advertising cookies). We do not use these features to identify You individually or to merge Personal Data with additional information collected through Google advertising products, except as permitted with Your consent where legally required.

How to opt out of Google Analytics Advertising Features: You can control Your ad personalization at adssettings.google.com, opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, or manage mobile app ad settings directly on Your device.

Meta Pixel and Conversions API (CAPI): We use Meta’s Pixel and Conversions API to measure and improve the performance of Our advertising on Meta platforms, such as Facebook and Instagram, including for remarketing purposes. This may involve sharing hashed or pseudonymized identifiers (such as a hashed email address) with Meta. You can manage Your ad preferences within Your Facebook or Instagram account settings under “Ad Preferences.”

We do not sell Your Personal Data to Google, Meta, or any other advertising partner for monetary consideration. Data shared with these platforms is used solely to measure and improve Our own advertising and analytics, subject to each platform’s own data processing terms.

3.3  Consent

It shall be understood that You have provided consent for processing Your Personal Data for one or more specific purposes when You opt to use the Services, including the permissions You grant for Mobile Application data collection, and the use of cookies, analytics, and advertising tools described in this Section, where consent is the lawful basis for such processing.

4. USAGE OF PERSONAL DATA

4.1. When You use Our Service, We collect and use Your Personal Data as described in this Policy. You may be asked to provide certain personally identifiable information that can be used to contact or identify You.

4.2. Personally identifiable information may include, but is not limited to: (a) email address; (b) first and last name; (c) phone number; (d) address, state/province, ZIP/postal code, city; and (e) Usage Data collected automatically, including IP address, browser type/version, pages visited, time and date of visit, time spent, unique device identifiers, and other diagnostic data.

4.3. The Company may share this information with the end service provider (Supplier) or any other third party for the provision and facilitation of the desired booking.

4.4. The Company shall redact all/any sensitive and confidential information contained in a bank statement or any other identity document submitted for the purpose of availing a service, promotional offer, or booking on the Website or Mobile Application, except where the unredacted information is required to complete the booking (for example, a passport number required by an airline or immigration authority).

4.5  Purposes of processing

  • To Book a Service: names, addresses, phone numbers, and age details are shared with related service providers, including airlines, hotels, bus, or activity services, to provide reservations and bookings to You or other travelers.
  • To provide news, special offers, and information about goods, services, and events similar to those You have already purchased or enquired about, unless You opt out via the unsubscribe link in Our emails, or by adjusting Your notification preferences in the Mobile Application.
  • For surveys conducted by Us to assess satisfaction with Our services.
  • To manage Your Account and Your requests.
  • For the performance of a contract: the development, compliance, and undertaking of the purchase contract for products or services You have purchased, or any other contract with Us.
  • To contact You by email, telephone, SMS, or push notification regarding updates, security notices, or informative communications related to Our Services.
  • For business transfers: in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.
  • For other purposes: data analysis, identifying usage trends, evaluating the effectiveness of Our promotional campaigns, operating Our loyalty program (including sharing limited redemption data with participating partners to fulfil TT Coins offers — see also Section 5.3(vi)), and improving Our Service, products, marketing, and Your experience.

4.6  Payment Processing and Security

Trip Turbo Private Limited does not directly process Your payments or store Your full credit/debit card numbers, bank account details, or other sensitive financial information. When You make a payment, You will interact with the secure checkout module of Our third-party licensed payment providers, who are responsible for securely handling Your transaction. We may receive transaction confirmation, payment status, a transaction ID, the payment method used, and in some cases a masked card number or associated name, for verification and record-keeping. We encourage You to review the privacy policy of any third-party payment provider You use. The Website maintains technical and organizational safeguards, including encryption and access controls, to protect Your Personal Data once in Our possession.

4.7  Data Retention

We retain Your Personal Data for as long as Your Account remains active, or as reasonably needed to provide You the Services, comply with Our legal obligations (including recordkeeping obligations under applicable tax, consumer protection, and civil aviation regulations), resolve disputes, and enforce Our agreements. Where Personal Data is no longer required for these purposes, We will take reasonable steps to delete, anonymize, or securely archive it.

4.8  Children's Data

The Company does not knowingly collect Personal Data from individuals under the age of 18. Where We become aware that We have collected such data without appropriate consent, We will take reasonable steps to promptly delete it. If You believe a minor has provided Us with Personal Data, please contact Us using the details in Section 10.

4.9  Sensitive Personal Data

Where We collect Sensitive Personal Data — such as passport numbers, national ID numbers, or health/dietary/accessibility information provided for a booking — We use it strictly for the purpose for which it was collected (typically, completing a specific booking or meeting a legal or Supplier requirement), limit access to personnel and systems that need it for that purpose, and do not use it for advertising or marketing purposes.

5. DISCLOSURE OF PERSONAL DATA

5.1. The Company shall not share Your details without Your prior consent unless required by a law enforcement authority for investigation, by court order, or in connection with a legal process.

5.2. Any information provided by You shall be strictly used for the specified and lawful purposes described in this Policy.

5.3  We may also disclose Your Personal Information where required to:

(i) conduct Our business;
(ii) meet regulatory, internal compliance, and audit requirements;
(iii) secure Our systems;
(iv) enforce or protect the rights or property of the Company or its affiliates, associates, employees, directors, or officers;
(v) identify, contact, or bring legal action against someone who may be causing interference with Our rights or property, or where anyone else could be harmed; or
(vi) fulfil Our loyalty program (TT Coins) obligations, which may involve sharing limited redemption data with participating partners solely to process a specific redemption.

5.4. Such disclosure and storage in accordance with this Policy may take place without Your knowledge. In such an event, the Company shall not be liable to You or any third party for damages arising from such disclosure and storage, except as required by applicable law.

5.5  Cross-Border Transfer

Because Our Suppliers and service partners (including airlines, hotel providers, and global distribution systems) may be located outside Nepal, Your Personal Data may be transferred to, stored, and processed in countries other than Nepal. Where We transfer Personal Data outside Nepal, We take reasonable steps to ensure it remains protected, including by: (a) requiring Suppliers to handle Personal Data under confidentiality and data-protection obligations set out in Our Supplier Agreements; (b) limiting the data shared to what is necessary to complete the relevant booking; and (c) using reputable service providers that maintain their own security and privacy safeguards.

5.6  Security Incidents

In the event of a security incident affecting Your Personal Data, We will take reasonable steps to investigate and mitigate the impact, and will notify affected Users without undue delay where required by law or where We determine there is a meaningful risk of harm.

6. RIGHTS OF USER

6.1. The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee that You can exercise Your rights.

6.2  You have the right, under this Policy and by law, to:

  • Access Your Personal Data, including a copy of the Personal Data We hold about You. Wherever possible, You can access, update, or request deletion of Your Personal Data directly within Your account settings.
  • Correct any incomplete or inaccurate Personal Data We hold about You.
  • Object to the processing of Your Personal Data where used contrary to this Policy.
  • Request erasure of Personal Data where there is no good reason for Us to continue processing it.
  • Withdraw Your consent to Our use of Your data going forward. If You withdraw consent, You may not be able to access certain functionalities of the Service.

To exercise any of these rights, contact Our Privacy Officer using the details in Section 10. We will respond to Your request within a reasonable time and in accordance with applicable law.

7. LINKS TO OTHER WEBSITES OR APPLICATIONS

7.1. Our Website may contain links to other websites or mobile applications that are not operated by Us. If You click a third-party link, You will be directed to that third party’s site. We are not responsible for the personal data collected by third-party sites linked from Our Website, as We have no control over and assume no responsibility for their content, privacy policies, or practices.

7.2. This Privacy Policy is the integral part of Terms and condition of the website.

8. CHANGES TO THIS PRIVACY POLICY

8.1. This Privacy Policy may change from time to time.

8.2. Any changes will be reflected by updating the “Last Updated” date and Policy Version at the top of this Privacy Policy. We encourage You to review this Privacy Policy periodically to stay informed of how We handle Your Personal Data.

8.3. Changes to this Privacy Policy are effective when posted on this Website page or Our Mobile Application.

9. GOVERNING LAW

9.1. This Privacy Policy is governed by and construed in accordance with the laws of Nepal, including the Individual Privacy Act, 2075 (2018), the Individual Privacy Regulation, 2077 (2020), the Electronic Transactions Act, 2063 (2008), and the E-Commerce Act, 2081 (2025), together with any successor legislation or implementing regulations.

9.2. Any disputes arising under this Policy that cannot be resolved directly with Our Privacy Officer shall be subject to the jurisdiction of the courts of Nepal, in accordance with the complaint procedures set out under the Individual Privacy Act, 2075 (2018).

10. PRIVACY OFFICER AND GRIEVANCE REDRESSAL

10.1. The Company has designated a Privacy Officer (Buddha Lama) responsible for overseeing compliance with this Policy and handling User requests and grievances relating to Personal Data.

10.2. If You have a concern about how Your Personal Data has been handled, We encourage You to contact Our Privacy Officer first, using the details below, so that We can investigate and resolve the matter directly. If You are not satisfied with Our response, You retain Your right to pursue the matter through the applicable legal process.

11. CONTACT US

If You have any questions about this Privacy Policy, or wish to exercise Your rights under Section 6, You can contact Our Privacy Officer:

By email: support@tripturbo.com
By mail: Trip Turbo Private Limited, Jwagal-10 Kupandole, Lalitpur, Nepal