How Mahobat Tours & Travels protects your data across web services, Google tools, analytics pixels, and WhatsApp fleet dispatch.
Last Updated: September 28, 2026•ISO 9001:2015 Compliant
01
1. Overview & Privacy Commitment
Mahobat Tours & Travels (“Company”, “we”, “our”, or “us”), registered in Vadodara, Gujarat (operating since 1987, ISO 9001:2015 certified), is dedicated to upholding the strictest privacy and confidentiality standards. This Privacy Policy details our operational practices regarding the collection, storage, handling, and protection of information gathered through our web platform (mahobattravels.in), our digital booking forms, and direct communication channels.
By navigating our website, engaging with our interactive fleet calculators, or requesting a booking via WhatsApp or phone, you consent to the data practices described in this document.
02
2. Next.js Framework & Technical Server Logs
Our web application is engineered with the modern Next.js (App Router) framework and hosted on optimized edge cloud infrastructure. When you visit our website, our web servers automatically collect standard technical log information, including:
Your Internet Protocol (IP) address and approximate geolocation (city/country level).
Browser specification, operating system, and hardware architecture.
HTTP request headers, referrer URLs, and access timestamps.
Pages requested and edge cache transmission performance.
Why we collect this: Server logs are utilized exclusively to protect our infrastructure against cyber attacks (such as DDoS and brute-force inquiries), debug edge routing issues, and ensure sub-second response times for travelers across India. These technical logs are rotated regularly and never linked to personally identifiable information without a legal warrant.
03
3. Google Search Console & Webmaster Telemetry
We utilize Google Search Console to monitor, analyze, and optimize our organic search footprint. Google Search Console delivers aggregated diagnostic information, such as:
Keyword search queries leading users to our car rental and corporate travel pages.
Click-through rates (CTR), impression counts, and average search positions.
Indexing statuses, sitemap crawls, Core Web Vitals, and mobile usability reports.
Note: Google Search Console does not grant us access to individual search histories, personal identities, or IP addresses of searchers. All search data is received in anonymized aggregate form.
04
4. Google Analytics 4 (GA4) & Measurement
To measure how visitors interact with our fleet catalog, booking widgets, and route guides, we deploy Google Analytics 4 (GA4). GA4 employs first-party cookies and privacy-first measurement standards:
IP Anonymization: GA4 does not log or store full IP addresses; geographic data is resolved at coarse city/regional levels.
Session & Interaction Telemetry: Time on page, vehicle category clicks (e.g. Innova Crysta, Fortuner, Urbania), and conversion funnel progression.
Data Retention Window: User and event data retention is configured for standard analytical duration, after which it is automatically purged by Google servers.
From time to time, we may implement advertising tracking technologies such as the Meta (Facebook/Instagram) Pixel and Google Ads Conversion Tracking. These tools allow us to:
Measure the effectiveness of corporate travel advertisements placed on Facebook, Instagram, and Google Search.
Display relevant chauffeur and rental promotional announcements to travelers who have previously shown interest in Gujarat tours (e.g. Statue of Unity or Vadodara airport transfers).
Attribute phone calls and quote submissions to specific digital marketing campaigns without storing personal identity in cleartext.
6. WhatsApp Communication & Passenger Booking Data
When you initiate a reservation via our quick booking forms, WhatsApp floating action button, or telephone, you provide specific trip parameters including:
Passenger full name, corporate organization, and contact telephone number.
Vehicle category preference and billing instructions.
Strict Non-Disclosure & Zero Resale Policy
Your booking details and telephone numbers are transmitted directly via WhatsApp's encrypted communication protocol or secured internal dispatch channels. We NEVER sell, lease, or monetize customer contact lists. Information is used strictly to execute travel services, dispatch chauffeurs, generate GST invoices, and maintain legally required passenger manifests.
07
7. Cookie Policy & Browser Preferences
Cookies are compact data files placed on your computer or mobile device. Our website utilizes the following categories of cookies:
Strictly Necessary Cookies
Required for core website routing, CSRF protection, and responsive rendering.
Analytics & Performance
Google Analytics cookies (_ga, _gid) that calculate visit duration and bounce metrics.
You may disable or delete cookies via your browser settings (Chrome, Safari, Firefox, Edge). Note that disabling necessary session tokens may impair the visual responsiveness of certain interactive booking calculators.
08
8. DPDP Act (India) & Your Statutory Rights
In alignment with India's Digital Personal Data Protection Act (DPDP Act 2023) and applicable information technology standards, Indian and international customers retain the following rights regarding personal data:
Right of Access & Summary: Request a summary of the personal data we hold about your bookings.
Right to Rectification: Request corrections to erroneous telephone numbers, invoice billing titles, or GST numbers.
Right to Erasure: Request the deletion of non-statutory trip records, subject to commercial tax record retention rules (such as GST audit rules requiring invoice retention for 6 years).
Right to Grievance Redressal: Direct recourse to our designated Data Officer for rapid resolution.
09
9. Data Retention & Physical Safeguards
All digital communications and trip records are protected by industry-standard HTTPS encryption (TLS 1.3). Physical trip sheets and administrative records at our Alkapuri, Vadodara central operations facility are governed by ISO 9001:2015 controlled access protocols. Access is restricted exclusively to authorized booking executives and duty managers.
10
10. Data Protection & Grievance Redressal Officer
If you have questions regarding this policy, wish to exercise statutory data rights, or suspect any unauthorized handling of your information, please contact our designated grievance desk:
