Customer Service
Log inSign up
ePayon Travel

Privacy Policy

Last updated: 30th July 2026

Preface

This Privacy Policy explains how Webs Techno Pvt. Ltd. (“ePayon”, “ePayon Travel”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you use our flight, bus, hotel, and tour-package booking services through www.epayon.travel, our mobile site, or our mobile applications (“Platform”).

This policy is framed in accordance with the Information Technology Act, 2000 and reflects the principles, obligations, and rights set out in the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

By using the Platform, you (“User”, “you”, or “your”) consent to this Privacy Policy and to your personal data being processed as described here. If you do not agree with any part of this policy, please do not use the Platform.

Airlines, bus operators, hotels, payment gateways, and other third parties you interact with through a booking made on the Platform follow their own privacy practices. We encourage you to review those separately.

Consent & Processing of Data

Your data is primarily processed in India, and in any other jurisdiction where a vendor engaged by us (e.g. a payment gateway or a travel supplier) processes it on our behalf to fulfil your booking. By agreeing to this policy, you give us your explicit consent to process your personal information for the purposes set out below.

You may withdraw this consent at any time by writing to us (see Contact Us below). Please note that a booking already involves sharing certain details (e.g. traveller names, contact details, GST details if provided) with the concerned airline, bus operator, or hotel — withdrawing consent after a booking is made may prevent us from completing, modifying, or supporting that booking.

Data Fiduciary under the DPDP Act

Under the DPDP Act, Webs Techno Pvt. Ltd. acts as a “Data Fiduciary” for the personal data collected through the Platform, and is responsible for obtaining valid consent, processing data only for legitimate purposes, and enabling you to exercise your rights as a “Data Principal”.

Information We Collect

We collect the following categories of information to provide our services:

  • Account & booking information — your name, gender, date of birth, mobile number, and email address, collected when you sign up (via OTP verification) or make a booking.
  • Traveller information— where you book for other passengers (e.g. family or colleagues), the details you provide for them, including, where relevant to a specific fare or airline, passport, PAN, student ID, or senior-citizen ID. By providing another traveller's details, you confirm you are authorised to share them with us and with the concerned airline, bus operator, or hotel.
  • Billing & GST information — your billing address, and, if you choose to add it, your company name, address, contact number, GSTIN, and company email for GST-compliant invoicing.
  • Payment information — your payment is processed by our payment-gateway partner directly; we do not store your card, UPI, or net-banking credentials on our servers.
  • Booking & transaction history — details of searches, bookings, cancellations, and support requests you make on the Platform.
  • Location information — with your device permission, we may use your approximate location to pre-fill your billing address; you can decline this or clear it at any time.

Information We Collect Automatically

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used. Persistent cookies remain on your device until removed via your browser settings; session cookies are cleared when you close your browser. You can configure your browser to refuse cookies, though some parts of the Platform may not work correctly without them.

We may also automatically collect technical information such as your device type, browser, IP address, and usage patterns on the Platform, for security, fraud prevention, and service improvement.

How We Use Your Information

  • To create and manage your account, and to search, book, and manage your trips.
  • To share the necessary booking details with the airline, bus operator, or hotel fulfilling your trip.
  • To process payments and refunds through our payment-gateway partner, and to issue GST-compliant invoices where requested.
  • To send booking confirmations, itinerary updates, and support communications (SMS/email/push notification).
  • To send you offers or promotional communications, which you may opt out of at any time.
  • To detect and prevent fraud, and to comply with applicable law.

Legal Basis for Processing

We process your personal data on the following legal bases recognised under the DPDP Act:

  • Consent — for optional features and promotional communications.
  • Performance of a contract — processing necessary to complete a booking you have requested.
  • Legal obligation — where processing is required to comply with applicable law (e.g. tax, aviation, or foreign-exchange regulations).
  • Legitimate use — for security, fraud prevention, and service analytics, under Section 7 of the DPDP Act.

Sharing of Information

We share your booking-relevant information with the airline, bus operator, or hotel you book with, and with our payment-gateway partner to process payment. We do not sell your personal information. We may disclose information where required by law, by a court order, or by a law-enforcement authority conducting a lawful investigation.

Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or outdated information.
  • Erase your data, subject to our legal and contractual obligations (e.g. records of a completed booking).
  • Grievance redressal for unlawful processing or a violation of your privacy rights.
  • Nominate a person to exercise these rights on your behalf in the event of your death or incapacity, once this is enabled under the DPDP Act.

You can exercise most of these rights from your account, or by contacting us (see below).

Data Retention

We retain your personal data only for as long as necessary to provide our services, to meet our accounting, tax, and regulatory obligations, and to resolve disputes. Once no longer required, we delete or anonymise it.

Security

We use reasonable technical and organisational safeguards to protect your data, including transmitting data between your device and our servers over an SSL-encrypted connection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Breach Notification

If a personal data breach is likely to affect your rights, we will notify you and the Data Protection Board of India (once constituted under the DPDP Act) as required by law.

Children's Privacy

The Platform is not directed at children under 18. We do not knowingly collect personal data from a child without verifiable parental or guardian consent, in line with the safeguards under the DPDP Act.

Third-Party Links

The Platform may link to third-party websites or services (e.g. an airline's own web check-in page). We are not responsible for the privacy practices of those third parties, and encourage you to review their own policies.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or in applicable law. The “Last updated” date above will change accordingly, and continued use of the Platform after an update constitutes your acceptance of the revised policy.

Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, 2000, any grievance regarding the processing of your personal data may be addressed to our Grievance Officer via the contact details below.

Contact Us

For any question about this Privacy Policy, or to exercise your rights over your personal data, please reach us at:

  • Phone: +91 33 3505 9955
  • Website: epayon.travel/contact
  • Registered entity: Webs Techno Pvt. Ltd., Kolkata, West Bengal, India