Privacy Policy

INTRODUCTION

This Privacy Policy (“Policy”) applies to the securing and processing of personal data by V2F Technology Private Limited operating the website Visa2Fly.com (hereinafter “V2F”) in connection with personal data provided by any person (“User”) who has purchased or intends to purchase or inquires about any product(s) or service(s) made by V2F through any of V2F’s interface channels including website, mobile site and mobile app (collectively referred herein as “Sales Channels”).

For the purpose of Privacy Policy:

References to "you" or "your" are references to the "User".
References to "we", "us", or "our" are references to "V2F".
References to "website" mean the website(s), mobile site(s), and mobile app(s).

PURPOSE OF THIS POLICY

We respect your need to understand how and why information is being collected, used, disclosed, transferred and stored. Thus we have developed this Policy to familiarize you with our practices. This policy sets out the way in which we process your information when you use our Website or other digital platforms in accordance with applicable data protection laws. It is important that you read this policy together with any other policies we may provide on specific occasions when we are collecting or processing your personal data, so that you are fully aware of how and why we are using your personal data. This policy supplements the other notices and is not intended to override them.

DEFINING CONTROLLER OF PERSONAL DATA

A “Controller” is a person or organisation who alone or jointly determines the purposes for which, and the manner in which, any personal data is, or is likely to be, processed. This notice is issued on behalf of V2F as controller. A “Processor” is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller. As the circumstances warrant, V2F may be Controller or Processor of your personal data.

TYPE OF PERSONAL DATA WE COLLECT

Personal data includes any information about any user from which that person can be identified. It does not include personal data where the identity has been removed (anonymous data).

You may be asked for personal data anytime you are in contact with V2F directly or indirectly through a third party.

We collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law, as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, used in accordance with this policy.

We do not collect any special categories of personal data about you through our Website (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

We collect, use, store and transfer different kinds of personal data about you. We have grouped together the following categories of personal data to explain how this type of information is used by us.

These terms are used throughout this Notice:

“Contact Data”: including your residential address, work address, email address and telephone numbers.

“Identity Data”: including your first name, last name, username or similar identifier, title.

“Website User Data”: usernames, passwords and other security-related information used by you in relation to our services.

“Transaction Data”: transactional history about your e-commerce activities and buying behaviour, and information pertaining to any other traveler(s) for whom you made a booking through your registered V2F account. In such case, you must confirm and represent that each of the other traveler(s) for whom a booking has been made has agreed to have the information shared by you disclosed to us, and further shared by us with the concerned service provider(s).

“Marketing and Communications Data”: including your marketing and communication preferences. We also track when you receive and read marketing communications from us, which information we use to improve our marketing services, provide you with more relevant information, and improve the quality of our marketing materials. Additional information about the personal data we process in connection with marketing is included with the marketing communications we send you.

“Public Domain or Third Party Data”: data available in the public domain or received from any third party including social media channels — including but not limited to personal or non-personal information from your linked social media channels (like name, email address, friend list, profile pictures, or any other information that is permitted to be received as per your account settings) as a part of your account information.

“Profile Data”: including information collected progressively when you visit our site, including your referral website, pages you visit, actions you take, patterns of page visits, and information from forms you fill in.

“Technical Data”: includes information collected when you access our website, mobile site or mobile app, such as your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you are using.

“Usage Data”: information about how you use our Website.

“Any Other Personal Data”: if you request V2F to provide visa-related services, then copies of your passport, bank statements, originals of the filled-in application forms, photographs, and any other information which may be required by the respective embassy to process your visa application. If you request V2F to provide foreign exchange (forex) related services, then passport copies, A2 form, air tickets or travel authentication documents to verify confirmed travel, or any other documents required to process your forex transaction.

MODES OF COLLECTING PERSONAL DATA

The only way we will get any kind of personal data is if you choose to give it to us in the following circumstances:

Direct interaction:

When you make an enquiry or quotation request, make a reservation, or purchase from our Website or through our customer service team — by email, letter, fax, on the phone, or in a physical store.
When you register with us, subscribe to our newsletter, enter lucky draws/competitions/surveys/feedback, send us queries, or register for promotions.
When you engage with us in any online or offline event, promotion, or page hosted by us on a third-party platform or location.
Through cookies on our Website.

Cookies and other technologies: We receive Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please check our cookie policy for further details of the information collected.

Third parties or publicly available sources: We receive Technical Data from analytics providers such as Google.

GROUNDS FOR PROCESSING OF DATA

“Performance of a contract”: where we need to perform a contract which we are about to enter into or have entered into with you as a party, or to take steps at your request before entering into such a contract.

“Legal or regulatory obligation”: where we need to comply with a legal or regulatory obligation that we are subject to.

“Legitimate interests”: where necessary for our interests, provided that your fundamental rights do not override such interests. This can mean, for instance, that it is in our interest to monitor how you are using our Website or client portals to ensure that the security of our Website, client portals, or systems is maintained. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.

“Consent”: we rely on consent as a legal basis for processing your personal data in relation to sending direct marketing communications to you via email or text message.

We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

USE OF PERSONAL DATA

We will only process (i.e., use) your personal data when the law allows us to — that is, when we have a legal basis for processing. We generally use the information to establish and enhance our relationship with our users for the following purposes:

While you make a booking: We may use your personal information available with us to ease your booking process. This information may include all the data provided by you earlier, i.e., contact data. We may also use the information of the traveler list as available in or linked with your account. This information is presented to the User at the time of making a booking to enable you to complete your bookings expeditiously.

We may also use your personal information for several reasons, including but not limited to:

Keeping you informed of the transaction status.
Sending booking confirmations via SMS, WhatsApp, or any other messaging service.
Sending any updates or changes to your booking(s).
Allowing our customer service to contact you, if necessary.
Confirming your reservations with the respective service providers.
Customizing the content of our website, mobile site, and mobile app.
Requesting reviews of products or services, or any other improvements.
Sending verification message(s) or email(s).
Validating/authenticating your account and preventing any misuse or abuse.
Contacting you on your birthday/anniversary to offer a special gift or offer.
Sending you important notices and communications regarding products and services you’ve availed, or changes to our terms and conditions and/or policies.
Sending information about products and services offered by V2F and its affiliates.
Sending you payment reminders and/or travel vouchers.
Sending newsletters to keep you updated on the travel sector. If you don’t wish to receive such communications, you may unsubscribe via the link in the email you receive.

We may share your personal data with third parties for the reasons cited below, including but not limited to:

Where it is necessary to process your booking, enquiry, or participation.
To fulfil the service offering and/or to make a booking, reservation, blocking, or any such activity initiated by the user.
We may share personal data with companies who provide services such as information processing, extending credit, fulfilling customer orders, delivering products to you, managing and enhancing customer data, providing customer service, assessing your interest in our products and services, and conducting customer research or satisfaction surveys. These companies are obligated to protect your information.
We may use your personal information for marketing promotions, research, and other programs.
As a registered user, you will receive our latest product and service announcements, offers, promotions, and event updates. You may unsubscribe from these at any time.
We may also use the personal data to improve our product offering, and to develop and deliver products, services, content, and advertising.
Personal data may also be used internally for research, analysis, and auditing.

V2F may from time to time launch promotions giving Users an opportunity to win travel and travel-related prizes. During such activity, the personal information collected by us may include contact information and survey questions. We use such information to notify contest winners, and survey information to develop promotions and product improvements.

V2F may launch travel referral or reward programs from time to time, through which users may win travel-related or other rewards. We may use your personal information to enrol you in the rewards program. Depending on the reward program, each time you win a reward, V2F may share your personal information with a third party responsible for fulfilling the reward to you. You may choose to opt out of such a reward program at any time. While rewarding any user, we may at times verify customer information on a selective basis for purposes such as fraud protection.

COLLECTION AND USE OF NON-PERSONAL DATA

Non-personal data is data which can never be used to identify an individual. We may collect information regarding customer activities on our various portals. This aggregated information is used in research and analysis, to improve and monitor products, and for various promotional schemes. It may be shared in aggregated, non-personal form with third parties to enhance customer experience, product offerings, or services.

COOKIES AND OTHER TECHNOLOGIES

We use cookies and other technologies to enhance your experience when you use our Website. To that effect, we have developed a cookie policy to familiarize you with our practices. You can access the cookie policy here.

LINKS

For your convenience, our Website provides links to other sites. When you click on one of these links, you are leaving our Website and entering another site. We are not responsible for such third-party sites. You should carefully review the privacy statements of any other sites you visit, because those statements will apply to your visit to those other sites.

WITH WHOM YOUR PERSONAL DATA IS SHARED

Group Companies (companies in the same group): In the interest of improving personalization and service efficiency, we may, under controlled and secure circumstances, share your personal information with our affiliate or associate entities.

If the assets of V2F are acquired, our customer information may also be transferred to the acquirer, depending on the nature of such acquisition. In addition, as part of business expansion/development/restructuring or for any other reason, if we decide to sell/transfer/assign our business, any part thereof, any of our subsidiaries, or any business units, customer information — including the personal information collected herein — shall be transferred accordingly as part of such restructuring.

Service providers and suppliers: Your information will be shared with the end service providers — airlines, hotels, bus service providers, cab rental, railways, or any other suppliers responsible for fulfilling your booking. By making a booking with V2F, you authorize us and consent to share your information with these service providers and suppliers. V2F does not authorize the end service provider to use your information for any purpose other than fulfilling their part of the service. V2F does not sell or rent individual customer names or other personal information of Users to third parties, except in sharing such information with our business/alliance partners or vendors engaged by us for providing various services, and for sharing promotional and other benefits with our customers from time to time based on their booking history with us.

Third-party vendors and business partners: We may also share certain filtered personal information with our corporate affiliates or business partners, who may contact customers to offer products or services — which may include free or paid products/services — that enable the customer to have a better travel experience or avail certain benefits specially made for V2F customers. Examples of such partners are entities offering savings/EMI on travel, co-branded credit cards, travel insurance, insurance cover against loss of wallet, banking cards, or similar sensitive information, etc. If you choose to avail any such services offered by our business partners, the services so availed will be governed by the privacy policy of the respective service provider.

V2F may share your personal information with a third party that V2F may engage to perform certain tasks on its behalf, including but not limited to payment processing, data hosting, and data processing platforms.

We may provide non-personal data to suppliers, advertisers, affiliates, and other current and potential business partners. We may also use such aggregate data to inform these third parties of the number of people who have seen and clicked on links to their websites.

Occasionally, V2F will hire a third party for market research, surveys, etc., and will provide information to these third parties specifically for use in connection with these projects. The information (including aggregate cookie and tracking information) we provide to such third parties, alliance partners, or vendors is protected by confidentiality agreements, and such information is used solely for completing the specific project and in compliance with applicable regulations.

DISCLOSURE OF INFORMATION

Where required, we will (subject to our professional obligations and any terms of business we may enter into with you) disclose your personal data to:

Any person or entity to whom we are required or requested to make such disclosure by any court of competent jurisdiction, or by any governmental, taxation, or other regulatory authority, law enforcement agency, or similar body.
Our professional advisers or consultants, including lawyers, bankers, auditors, accountants, and insurers providing consultancy, legal, banking, audit, accounting, or insurance services to us.
Service providers who provide information technology and system administration services to us.

USER GENERATED CONTENT

V2F provides an option for users to post their experiences by way of reviews, blog articles, ratings, and general poll questions. Customers also have the option to give feedback, ask questions about a service offered by V2F, or post answers to questions raised by other users. V2F may also engage a third party to contact you and gather your feedback about your recent booking with V2F. Though participation in the feedback process is purely optional, you may still receive emails or notifications (app, SMS, WhatsApp, or any other messaging service) inviting you to share your review(s). These reviews may be written (with or without images) or in video format. Reviews written or posted will be visible on V2F, and may also be visible on other travel or travel-related platforms.

The user-generated content that V2F collects may be of the following kinds:

Articles for the website or blog
Reviews and ratings
Questions and answers
Crowd-sourced data collection (poll questions)

Each User who posts a review, rating, Q&A, or photograph shall have a profile which other Users will be able to access. Other Users may be able to view the number of trips, reviews written, questions asked and answered, and photographs posted.

Each User shall be diligent and take due care to ensure that views expressed on the social media platform or V2F website are not derogatory or opposed to law, public policy, morality, religion, caste, creed, colour, sex, race, culture, ethics, customs, traditions, decency, good conscience, or third-party intellectual property. By uploading pictures, views, images, content, visuals, audio, or experiences on the social media platform or V2F website, you consent to V2F using, reproducing, copying, and uploading that content in any manner V2F deems fit, without any responsibility, liability, compensation, or cost due to you or any third party. V2F disclaims all disputes, responsibilities, liabilities, litigation, costs, expenses, or compensation arising with respect to or in connection with the use, reproduction, copying, or uploading of content contributed, shared, or expressed by you or on your behalf.

PERMISSIONS REQUIRED FOR USING OUR MOBILE APPLICATIONS

When the Visa2Fly app is installed on your phone, a list of permissions will appear, needed for the smooth functioning of the application. The permissions that Visa2Fly requires, and the data that shall be accessed and its use, are as below:

Android permissions:

Location: Enables us to provide the details of the nearest branch based on your location, in case you require physical assistance with a travel query.
SMS: If you allow us to access your SMS, we can send SMS related to OTPs and holiday package details to your mobile number.
Phone: The app requires access to make phone calls so you can reach our customer contact centers directly through the app.
Contacts: If you allow us to access your contacts, it enables us to provide social features such as sharing holiday packages with your friends.
Photo/Media/Files: The libraries in the app use these permissions to save and cache images and document data for faster use of the app the next time you browse with us. By saving image and document data locally, your phone doesn’t need to re-download the same data every time you use the app.

iOS Permissions:

Notifications: if you opt in for notifications, it enables us to send exclusive deals, promotional offers, and travel-related updates to your device.

INFORMATION PROTECTION AND SECURITY

Taking into account the costs of implementation and the nature, scope, context, and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing, including:

The pseudonymisation and encryption of personal data.
The ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
A process for regularly testing, assessing, and evaluating the effectiveness of technical and organisational measures for ensuring the security of processing.

We ensure that those who have permanent or regular access to personal data, or who are involved in processing personal data or developing tools used to process personal data, are trained and informed of their rights and responsibilities when processing personal data.

To protect your personal data and prevent unauthorized access, we have put in place appropriate security measures and certifications. Our site uses SSL, and users should ensure this is active to protect information transmission while transacting online.

We require any third parties processing your information to implement the same levels of protection with respect to your data. While no system is foolproof, including ours, we will continue using internet security procedures to help ensure your data remains safe with us. By opening, browsing, or using this site for transactions, or storing any data/information, you agree to comply with the latest revised privacy notice in effect at that time. If you use a social networking or other service that maintains your information, that use is governed by that service’s own terms of use and privacy notice.

DATA RETENTION

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for. This includes, for example, satisfying any legal, regulatory, accounting, or reporting requirements, carrying out legal work, or the establishment or defence of legal claims.

We will retain your personal data in our databases in accordance with our document management, retention, and destruction policy and applicable laws. This period may extend beyond the end of your relationship with us, but only as long as necessary for us to have sufficient information to respond to any issues that may arise later. For example, we may need to retain information to allow you to obtain credit for a trip you purchased but had to cancel. We may also need to retain certain information to prevent fraudulent activity, to protect ourselves against liability, to permit us to pursue available remedies or limit any damages we may sustain, or if we believe in good faith that a law, regulation, rule, or guideline requires it.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

How to Delete Your Account and Data

If you wish to delete your account and associated data, please follow these steps:

Send an Email Request - send an email to support@visa2fly.com with the subject line: "Account and Data Deletion Request."
Provide Necessary Details - in the body of your email, include your full name; the contact information you used during registration (e.g., email address or phone number); and a brief statement confirming that you want your account and data deleted.
Verification Process - to ensure the security of your data, we may request additional details to verify your identity before processing your request.
Confirmation of Deletion - once your identity is verified, we will proceed to delete your account and associated data. You will receive an email confirmation once the deletion process is complete.
Processing Time - please allow up to 30 days for your request to be processed.
Exceptions - in certain cases, we may retain specific data to comply with legal obligations or legitimate business interests, as outlined in this Privacy Policy.

If you have any questions or require assistance, please contact us at support@visa2fly.com

CHANGES TO THE POLICY

This notice is effective as of July 20, 2026. We reserve the right to update or change this Policy at any time, and we will provide you with the updated policy when we make any substantial updates, at the earliest, either through email or by providing a prominent notice of change on our Website. You should check the policy periodically. Your continued use of our Website after we post any modifications to the policy on this page will constitute your acknowledgment of the modifications and your consent to abide by and be bound by the modified notice.

YOUR RIGHTS

Under certain circumstances, you have rights under applicable data protection laws in relation to your personal data. It is our policy to respect your rights, and we will act promptly and in accordance with any applicable law, rule, or regulation relating to the processing of your personal data.

Details of your rights under the General Data Protection Regulation (GDPR) are set out below:

Right to be informed about how personal data is used — you have a right to be informed about how we will use and share your personal data, in a concise, transparent, intelligible, and easily accessible format, written in clear and plain language.
Right to access personal data — you have a right to obtain confirmation of whether we are processing your personal data, access to your personal data, and information regarding how your personal data is being used by us.
Right to have inaccurate personal data rectified — you have a right to have any inaccurate or incomplete personal data rectified. If we have disclosed the relevant personal data to any third parties, we will take reasonable steps to inform those third parties of the rectification where possible.
Right to have personal data erased in certain circumstances (“right to be forgotten”) — you have a right to request that certain personal data held by us is erased. This is not a blanket right to require all personal data to be deleted; we will consider each request carefully in accordance with applicable law.
Right to restrict processing of personal data in certain circumstances — you have a right to block the processing of your personal data if you are disputing its accuracy, if you have raised an objection to processing, if processing is unlawful and you oppose erasure and request restriction instead, or if the data is no longer required by us but you require it to be retained to establish, exercise, or defend a legal claim.
Right to data portability — in certain circumstances, you can request a copy of your personal data in a commonly used electronic format. This right applies only to personal data you have provided to us, and only where processing is based on your consent or is necessary for the performance of a contract carried out by automated means.
Right to object to processing of personal data in certain circumstances, including where personal data is used for marketing purposes — you have a right to object to processing based on legitimate interests or performance of a public-interest task (including profiling), direct marketing, or scientific/historical research or statistical purposes. You will be informed of this right at the point of data collection.
Right not to be subject to automated decisions where the decision produces a legal effect or a similarly significant effect on you.

You may exercise any of the above-mentioned rights by sending a request to legal@visa2fly.com

You will not have to pay a fee to access your personal data or exercise any of the other rights, unless your request is clearly unfounded, repetitive, or excessive — in which case we may charge a reasonable fee or refuse to comply.

If you have any questions, comments, or concerns about this Policy, you may contact legal@visa2fly.com

We may need to request specific information from you to help confirm your identity and ensure your right to access your personal data (or exercise any other rights). This is a security measure to ensure personal data is not disclosed to anyone without the right to receive it. We may also contact you for further information relating to your request, to speed up our response.

We try to respond to all legitimate requests within one calendar month. Occasionally it may take longer if your request is particularly complex or you have made multiple requests — in which case we will notify you and keep you updated.

Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Mr. Aman Sharma

Email: privacy.grievance@visa2fly.com

Nodal Officer

If your concern/query is not addressed within 7 business days of escalating to the Grievance Officer, or you are dissatisfied with the response from the Grievance Officer, you can reach out to our Nodal Officer. We will respond within 3 business days of receipt of your email.

Nodal officer email: visa2fly-nodal-officer@visa2fly.com

Facebook

This is to inform you that, after taking your consent, Visa2Fly will only fetch and use basic account details from your Facebook profile, such as your name, email ID, gender, and profile picture. We use this information solely for the purpose of sign-up and log-in on Visa2Fly. None of your activity linked to Facebook will be accessed by Visa2Fly.

Removing Facebook account details: if you wish to remove this data from our system, drop us an email from your registered email ID to support@visa2fly.com, and your data will be deleted within 72 hours. You will receive a confirmation email from us after deletion.

Please note: Visa2Fly will delete your user profile along with all your booking details. This data cannot be restored later. Please ensure you have secured all important data before deleting your profile.

Thanks,

Team Visa2fly