Legal
Privacy policy
Last updated 15 October 2026. Written to meet India's Digital Personal Data Protection Act, 2023, in plain language.
1. Who is responsible
The data fiduciary is Golden Dune Travel Services (PLACEHOLDER), Near Gadisar Circle, Gadisar Road, Jaisalmer, Rajasthan 345001, India. Contact: hello@jaisalmer.net.in.
2. What we collect
- Trip enquiries: your name, mobile/WhatsApp number, travel dates or preferred months, number of adults and children, children's ages, trip type, transport needs and pickup point, stay preferences, budget, interests, your message and the page you sent it from.
- Reviews: display name, rating, review text, travel month, trip type and (optionally) your booking reference.
- Partner applications: business and contact details you provide.
- Technical data: a hashed (not readable) version of your IP address and your browser type, kept with enquiries to prevent spam and abuse; server logs kept by our hosting provider.
We do not ask for payment details, ID numbers or passwords, and we do not want sensitive information in the message box.
3. Why we use it (purpose and consent)
We use enquiry data only to respond to your request and arrange the services you ask about, to follow up about that trip (including one message asking whether you would like to leave a review), to keep booking and payment records, and to protect the site from abuse. By sending the form you consent to this use. You may withdraw consent at any time (see section 7).
4. Who we share it with
- The suppliers we book for you (the hotel, camp, driver or guide on your confirmation) receive only the details they need to provide the service, such as names, dates, number of guests and pickup point. We do not broadcast enquiries to other businesses.
- Our hosting and email/WhatsApp providers, only to operate the service.
- Authorities, if the law requires it.
We never sell personal data.
5. How long we keep it
- Enquiries: up to 24 months after your trip date (for follow-up, accounts and tax records), then deleted or anonymised.
- Reviews: while published; hidden reviews are deleted within 12 months.
- Partner applications: for the duration of the partnership plus 3 years for accounting.
- Rate-limiting records: 24 hours.
6. Security
Data is stored on our server in files that are not publicly accessible, the site is served over HTTPS, forms are protected against forgery and spam, and access to enquiries is password-protected and limited to our team.
7. Your rights
Under the DPDP Act you can ask to access a summary of your data, correct or complete it, erase it, withdraw consent, and nominate someone to exercise your rights if you are unable to. Write to hello@jaisalmer.net.in or message +91 90000 00000 with your reference number if you have one. We respond within 30 days.
8. Grievance officer
Grievance Officer (PLACEHOLDER NAME), Golden Dune Travel Services (PLACEHOLDER), Near Gadisar Circle, Gadisar Road, Jaisalmer 345001 · hello@jaisalmer.net.in. If you are not satisfied with our response you may complain to the Data Protection Board of India.
9. Children
This site is meant for adults planning travel. We do not knowingly collect data from anyone under 18; children's ages entered by a parent or guardian are used only to size rooms, prices and vehicles.
10. Cookies and similar technologies
- Essential session cookie (
jsm_sid): keeps forms secure (anti-forgery token) and limits spam. It expires when you close the browser. - Browser storage: the trip planner saves your packing-list ticks in your own browser. Nothing is sent to us.
- Third-party resources: web fonts are loaded from Google Fonts, contact and hotel pages show OpenStreetMap embeds, the interactive maps load the Leaflet library from cdnjs (Cloudflare) and map tiles from OpenStreetMap when you scroll to a map, some hotel photos are loaded from the hotel's booking partner, and weather and flight data come from Open-Meteo and our flight-data provider (requested by our server, not your browser). These providers may see your IP address when your browser loads their files.
- Saved places (“My trip”): places you bookmark are kept only in your own browser (local storage). We never receive the list unless you send it to us in a quote request. Clearing your browser data, or “Clear list” on the My trip page, removes it.
- Affiliate links: when you click “Check price” on a hotel we record the click (time, hotel, booking site and the page you came from — no personal data) and send you to Agoda or Booking.com. Those sites set their own cookies to credit the booking to us, under their own privacy policies.
- We currently use no analytics or advertising cookies. If that changes, this section and our consent message will be updated first.
11. Advertising (Google AdSense)
We may show ads from Google AdSense on some guide pages. If we do:
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info.
- Learn how Google uses information from sites or apps that use its services.
- Visitors in the European Economic Area, the UK and Switzerland will be shown a consent message from a Google-certified consent management platform (Google's “Privacy & messaging” tool) before any personalised ads are served.
12. Changes
We will update this page when our practices change; the date at the top shows the current version.