Last updated: 15 September 2026
Your privacy matters. This Privacy Policy explains what data Nine One First collects, why we collect it, and what we do — and do not — do with it.
Information we collect
When you enquire, book, subscribe, or contact us, we collect:
- Identity & contact details — name, email, phone, postal address, passport number (where required for booking).
- Booking data — destinations, dates, traveller count, preferences, special requests, dietary needs.
- Payment data — paid via Razorpay or Cashfree. We never store full card numbers, CVV or UPI PINs on our servers.
- Device & usage data — IP address, browser type, pages viewed, approximate location.
How we use it
We use this data to:
- Plan, book, deliver and support your travel
- Send you quotations, confirmations, itineraries and post-trip follow-ups
- Meet legal obligations (tax, accounting, anti-fraud)
- Improve the Site (analytics) — aggregated, never personally identifiable
Sharing with third parties
We share only the data needed to deliver your trip:
- Hotels, airlines, tour operators, transfer operators, visa service partners — booking details required to confirm and deliver.
- Payment gateways — Razorpay or Cashfree, depending on which you choose.
- Government & visa authorities — passport and visa data, only where strictly necessary.
- Service providers — IT vendors under confidentiality agreements.
We do not sell your data. We do not share marketing data with ad networks.
International transfers
Some of our suppliers are based outside India. By booking, you accept that booking data may be processed in the country of the supplier. We use partners who maintain commercially reasonable security standards.
Data retention
We retain:
- Bookings — 7 years (accounting & tax)
- Marketing consent — until you unsubscribe
- Support correspondence — 2 years after last contact
Your rights
You can request to see, correct, delete, export your personal data, or withdraw consent, by emailing privacy@nineonefirst.com. We will respond within 30 days.
Cookies
We use cookies for:
- Essential — session, authentication
- Analytics — anonymous aggregate usage
- Preferences — currency, language
You may disable non-essential cookies from our cookie banner; the Site will still function.
Security
We use HTTPS, encrypted storage, role-based access and routine auditing. No system is perfectly secure; we will notify you without undue delay of any confirmed breach involving your data.
Children
We do not knowingly collect data from anyone under 16. Bookings made on behalf of children (under 18) are placed by their parent or guardian.
Updates to this policy
Material changes are notified via email and on-site. The "Last updated" date at the top will reflect the change.
Contact
Data Protection Officer: dpo@nineonefirst.com
Postal: Nine One First Travel Co., 12 Connaught Place, New Delhi 110001, India