Legal
Privacy Policy
Last updated: 9 October 2026
This policy explains how Holidays With Shivam ("we", "us") handles your personal data when you visit holidayswithshivam.com, send an enquiry, or travel with us. It is written to meet the EU General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act (UAVG), and India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Who is responsible for your data
Data controller / Data fiduciary: Holidays With Shivam, operated by Shivam Vijhani — Amsterdam (Netherlands) and New Delhi (India).
Email: shivam@holidayswithshivam.com · Phone: +31 6132 33376 / +91 80763 72743
2. What we collect
- Enquiry details — name, email, phone/WhatsApp number, country, trip of interest, number of travellers and your message.
- Booking details — passport data, date of birth, nationality, visa information, emergency contact, payment records.
- Special category data — dietary or religious meal needs (e.g. Jain, vegetarian), medical or mobility needs — only with your explicit consent and only to arrange your trip.
- Communications — messages you send us via WhatsApp, email or phone.
- Technical data — basic server logs (IP address, browser type) needed to run the website securely.
3. Why we use it and our legal basis
- To answer your enquiry and prepare a quote — steps at your request before a contract (GDPR art. 6(1)(b)); consent under the DPDP Act.
- To book and deliver your trip with hotels, airlines, transport and local guides — performance of contract.
- To meet legal, tax and accounting duties (e.g. invoices, Indian TCS records) — legal obligation.
- To send news about future departures — only with your consent, which you may withdraw at any time.
- To handle health or dietary needs — your explicit consent (GDPR art. 9(2)(a)).
4. Who we share it with
Only those who need it to deliver your trip: hotels, airlines, cruise lines, ground handlers, guides, insurers and visa services; our host agency Fora Travel and its booking systems; payment providers; and WhatsApp (Meta) when you choose to contact us there. We never sell your data.
5. International transfers
Because we operate in both the Netherlands and India and travel worldwide, your data may be transferred outside the EEA. Where needed we rely on EU adequacy decisions, the European Commission's Standard Contractual Clauses, or transfers necessary to perform your travel contract (GDPR art. 49(1)(b)).
6. How long we keep it
- Enquiries that do not lead to a booking: up to 24 months.
- Booking and financial records: 7 years (Dutch fiscal retention), or longer if Indian law requires.
- Passport and health data: deleted within 6 months after your trip ends, unless needed for a claim.
7. Your rights
You may at any time ask to access, correct, delete, restrict or port your data, object to processing, or withdraw consent. Under the DPDP Act you may also nominate another person to exercise your rights. Email shivam@holidayswithshivam.com; we reply within one month.
If you are unhappy, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl), or in India to the Data Protection Board of India after first contacting our Grievance Officer.
8. Grievance Officer (India)
Shivam Vijhani · shivam@holidayswithshivam.com · +91 80763 72743. We acknowledge grievances within 72 hours and aim to resolve them within 30 days.
9. Cookies
This website currently uses no advertising or tracking cookies. If we add analytics or advertising tools, we will ask for your consent first and update this policy.
10. Security and children
We use reasonable technical and organisational measures to protect your data. Data of travellers under 18 is provided and managed by a parent or guardian.
11. Changes
We may update this policy; the date at the top shows the latest version.