This policy explains what information Exotic Yatra collects when you visit this website or send us an enquiry, why we collect it, and how long we keep it.
Enquiries you send us
When you submit an enquiry we receive the details you enter (name, optional email address, WhatsApp number, city, number of travellers, chosen package and travel booking status). These details are delivered to our team by email and saved in our enquiry records so we can respond to your enquiry, plan your trip and follow up on bookings. Enquiry records can be viewed only by authorised staff after signing in to our secured admin system. They are kept separately from website visit records.
We keep enquiry records until you ask us to delete them. To request deletion, contact us using the details at the end of this page.
To confirm your WhatsApp number, we send a one-time passcode through the WhatsApp Business Platform (Meta).
Website visit records
When a page on this website loads, we record:
- the page visited, the time of the visit and the website domain;
- the referring website (domain and page path only; search terms and other query details are removed);
- your browser's user agent, and the device type and browser derived from it;
- Google Ads click identifiers (
gclid,gbraid,wbraid) and campaign tags (utm_source,utm_medium,utm_campaign,utm_term,utm_content) if they are present in the link you followed; - a random session identifier (see Cookies below);
- a hashed identifier derived from your IP address and, where enabled, your actual IP address (see below).
IP addresses. The public IP address your visit comes from is handled as follows:
- Hashed identifier (always): a keyed, one-way hash of the IP address (HMAC-SHA256 using a secret key held only on our server). The original address cannot be read back from it. It lets us recognise repeated visits from the same network and is kept with the visit record for 30 days.
- Actual IP address (only when enabled): collecting the actual IP address is a setting on our website. When it is switched on, the address is stored encrypted (AES-256) and kept for a maximum of 7 days, after which it is automatically deleted. It can be viewed only by authorised staff after signing in to our secured admin system, and only to investigate suspicious or invalid advertising clicks and misuse of the website. It is never shown on public pages or sent back to your browser. When the setting is off, the actual IP address is not stored; only the hashed identifier is kept.
Many people can share one IP address (for example on office or mobile networks), and an IP address usually identifies a network or internet provider rather than a person. We do not use IP addresses to block visitors automatically.
We do not record the contents of forms, passwords, OTPs or payment details in these records.
Why we collect visit records
- to understand how visitors reach the website and which campaigns bring enquiries;
- to identify unusual or potentially invalid advertising traffic, such as repeated ad clicks from the same network, so it can be reviewed;
- to protect the website against abuse and excessive automated requests;
- to note when a visit session results in a successful enquiry. This marker contains only the session identifier, the hashed IP identifier and the time, not your enquiry details.
These records are reviewed manually by authorised staff only. They are not used to automatically block visitors and are not sold.
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| ey_vsid | Random visit-session identifier used to group page views from one visit and to keep campaign attribution across pages. | 30 minutes after your last page view |
| ey_wa_otp, ey_wa_verified, ey_wa_otp_rl | WhatsApp number verification and limiting repeated passcode requests. | Up to 24 hours |
| Google Ads cookies | Set by Google to measure advertising and conversions (see below). | Set by Google |
Google Ads
This website uses the Google Ads tag to measure the performance of our advertising. When you submit an enquiry, your email address (if provided) and phone number are shared with Google for conversion measurement; Google's tag hashes this information before sending it. Google's use of this data is governed by Google's Privacy Policy.
How long we keep your information
- Enquiry records (the details you submit in the enquiry form): kept until you ask us to delete them.
- Your actual IP address (stored encrypted, and only when this setting is enabled): deleted automatically after a maximum of 7 days.
- Website visit records, including the hashed IP identifier, and enquiry markers: deleted automatically after 30 days.
Where data is processed
The website is hosted by Netlify, and enquiry and visit records are stored in a PostgreSQL database operated by our database hosting provider. Enquiry emails are delivered through our email delivery provider.
Contact
For questions about this policy or to make a request about your information, contact us at query@exoticyatra.com or +919147752663.