PRIVACY POLICY

Introduction:
Quest2travel.com India Pvt. Ltd. (hereinafter "Q2T") recognizes the importance of privacy of its users and also of maintaining confidentiality of the information provided by its users as a responsible data controller and data processor.

This Privacy Policy provides for the practices for handling and securing user's Personal Information (defined hereunder) by Q2T.

This Privacy Policy is applicable to any person ('User') who is authorized personnel on behalf of corporate to manage their business travel needs and purchase, intend to purchase, or inquire about any product(s) or service(s) made available by Q2T through any of Q2T's customer interface channels including its website, platform, mobile site, mobile app.

For the purpose of this Privacy Policy, wherever the context so requires "you" or "your" shall mean User and the term "we", "us", "our" shall mean Q2T. For the purpose of this Privacy Policy, Website means the website(s), mobile site(s), mobile app(s) and dedicated platform.

By using or accessing the Website, the User hereby agrees with the terms of this Privacy Policy and the contents herein. If you disagree with this Privacy Policy please do not use or access our Website.

This Privacy Policy does not apply to any website(s), mobile sites and mobile apps of third parties, even if their websites/products are linked to our Website.

This Privacy Policy is an integral part of your User Agreement with Q2T and all capitalized terms used, but not otherwise defined herein, shall have the respective meanings as ascribed to them in the User Agreement.

USERS OUTSIDE THE GEOGRAPHICAL LIMITS OF INDIA

Please note that the data shared with Q2T shall be primarily processed in India and such other jurisdictions where a third party engaged by Q2T may process the data on Q2T's behalf. By agreeing to this policy, you are providing Q2T with your explicit consent to process your personal information for the purpose(s) defined in this policy. The data protection regulations in India or such other jurisdictions mentioned above may differ from those of your country of residence.

If you have any concerns in the processing your data and wish to withdraw your consent, you may do so by writing to the following email id: sales@quest2travel.com. However, if such processing of data is essential for us to be able to provide service to you, then we may not be able to serve or confirm your bookings after your withdrawal of consent. For instance, if you want to book group booking, then certain personal information of yours like contact details, gender, dietary preferences, choice of room with smoking facility, any medical condition which may require specific attention or facility etc. may have to be shared by us with our vendors in each city where you will stay, and they may further process this information for making suitable arrangements for you during the travel. Such sharing and processing of information may extend to the hotel where you will stay or the tour manager who will be your guide during the travel.

A withdrawal of consent by you for us to process your information may:

• severely inhibit our ability to serve you properly and in such case, we may have to refuse the booking altogether, or
• Unreasonably restrict us to service your booking (if a booking is already made) which may further affect your trip or may compel us to cancel your booking.

TYPE OF INFORMATION WE COLLECT AND ITS LEGAL BASIS

The information as detailed below is collected for us to be able to provide the services chosen by you and also to fulfill our legal obligations as well as our obligations towards third parties as per our User Agreement.

"Personal Information" of User shall include the information shared by the User and collected by us for the following purposes:

• Registration on the Website: Information which you provide while registering on the Website, including but not limited to information about your personal identity such as name, gender, marital status, religion, age etc., your contact details such as your email address, postal addresses, frequent flyer number, telephone (mobile or otherwise) and/or fax numbers.
• Other information: We many also collect some other information and documents including but not limited to:

• Information pertaining any other traveller(s) for whom the booking is made through the registered Q2T account or Website. In such case, you confirm and represent that each of the other traveller(s) for whom a booking has been made, has agreed to have the information shared by you disclosed to us including but not limited to information to be shared by us with the ultimate service provider(s).
• If you request Q2T to provide visa related services, then copies of your passport, bank statements, originals of the filled in application forms, photographs, and any other information which may be required by the respective embassy to process your visa application.
• Your usernames, passwords, email addresses and other security-related information.
• Data either created by you and which you wish to store on our servers such as image files, documents etc.

HOW WE USE YOUR PERSONAL INFORMATION:

The Personal Information collected maybe used in the following manner:

While making a booking

While making a booking, we may use Personal Information shared by you. We may also use the information of travellers list as available in or linked with your account. This information is presented to the User at the time of making a booking to enable you to complete your bookings expeditiously.

We may also use your Personal Information for several reasons including but not limited to:

• confirm your reservations with respective service providers;
• keep you informed of the transaction status;
• send booking confirmations either via SMS or Whatsapp or any other messaging service;
• send any updates or changes to your booking(s);
• allow our customer service to contact you, if necessary;
• customize the content of our website, mobile site and mobile app;
• send verification message(s) or email(s);
• Validate/authenticate your account and to prevent any misuse or abuse.

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

Q2T will retain your Personal Information on its servers for as long as is reasonably necessary for the purposes listed in this policy . In some circumstances we may retain your Personal Information for longer periods of time, for instance where we are required to do so in accordance with any legal, regulatory, tax or accounting requirements.

Where your personal data is no longer required we will ensure it is either securely deleted or stored in a way which means it will no longer be used by the business.

COOKIES AND SESSION DATA

Cookies:

Q2T uses cookies to personalize your experience on the Website. Q2T's use of cookies is similar to that of any other reputable online companies.

Cookies are small pieces of information that are stored by your browser on your device's hard drive. Cookies allow us to serve you better and more efficiently. Cookies also allow ease of access, by logging you in without having to type your login name each time (only your password is needed);

Most web browsers automatically accept cookies. Of course, by changing the options on your web browser or using certain software programs, you can control how and whether cookies will be accepted by your browser. Q2T supports your right to block any unwanted Internet activity. However, blocking Q2T cookies may disable certain features on the Website, and may hinder an otherwise seamless experience to purchase or use certain services available on the Website. Please note that it is possible to block cookie activity from certain websites while permitting cookies from websites you trust.

Automatic Logging of Session Data:

Each time you access the Website your session data gets logged. Session data may consist of various aspects like the IP address, operating system and type of browser software being used and the activities conducted by the User while on the Website. We collect session data because it helps us analyse User's choices, browsing pattern including the frequency of visits and duration for which a User is logged on. It also helps us diagnose problems with our servers and lets us better administer our systems. The aforesaid information cannot identify any User personally. However, it may be possible to determine a User's Internet Service Provider (ISP), and the approximate geographic location of User's point of connectivity through the above session data.

WITH WHOM YOUR PERSONAL INFORMATION IS SHARED

Service Providers and suppliers:

Your information shall be shared with the end service providers like airlines, hotels, bus service providers, cab rental, railways or any other suppliers who are responsible for fulfilling your booking. You may note that while making a booking with Q2T you authorize us to share your information with the said service providers and suppliers. It is pertinent to note that Q2T does not authorize the end service provider to use your information for any other purpose(s) except as may be for fulfilling their part of service.

Q2T does not sell or rent individual customer names or other Personal Information of Users to third parties except sharing of such information with our business / alliance partners or vendors who are engaged by us for providing various services.

COMPANIES IN THE SAME GROUP:

In the interests of improving personalization and service efficiency, we may, under controlled and secure circumstances, share your Personal Information with our affiliate or associate entities. This will enable us to provide you with information about various products and services, both leisure- and travel-related, which might interest you; or help us address your questions and requests in relation to your bookings.

If the assets of Q2T are acquired, our customer information may also be transferred to the acquirer depending upon the nature of such acquisition. In addition, as part of business expansion/development/restructuring or for any other reason whatsoever, if we decide to sell/transfer/assign our business, any part thereof, any of our subsidiaries or any business units, then as part of such restructuring exercise customer information including the Personal Information collected herein shall be transferred accordingly.

DISCLOSURE OF INFORMATION

In addition to the circumstances described above, Q2T may disclose User's Personal Information if required to do so:

• by law, required by any enforcement authority for investigation, by court order or in reference to any legal process;
• to conduct our business;
• for regulatory, internal compliance and audit exercise(s)
• to secure our systems; or
• to enforce or protect our rights or properties of Q2T or any or all of its affiliates, associates, employees, directors or officers or when we have reason to believe that disclosing Personal Information of User(s) is necessary to identify, contact or bring legal action against someone who may be causing interference with our rights or properties, whether intentionally or otherwise, or when anyone else could be harmed by such activities.

Such disclosure and storage may take place without your knowledge. In that case, we shall not be liable to you or any third party for any damages howsoever arising from such disclosure and storage.

USER GENERATED CONTENT

Q2T provides an option to its users to post their experiences by way of reviews or feedbacks. The feedback process is purely optional..

The User Generated Content that Q2T collects may be of the following kinds:

1. Review and Ratings
2. Feedbacks

PERMISSIONS REQUIRED FOR USING OUR MOBILE APPLICATIONS

When the Q2T app is installed on your phone or tablet, a list of permissions appear and are needed for the app to function effectively. There is no option to customize the list. The permissions that Q2T requires and the data that shall be accessed and its use is as below:

Android permissions:

• Device & App history:We need your device permission to get information about your device, like OS (operating system) name, OS version, mobile network, hardware model, unique device identifier, preferred language, etc. Basis these inputs, we intend to optimize your travel booking experience, use OS specific capabilities to drive great in-funnel experiences using components of device's OS, etc.
• Identity:This permission enables us to know about details of your account(s) on your mobile device.

HOW WE PROTECT YOUR PERSONAL INFORMATION?

All payments on the Website are secured. This means all Personal Information you provide is transmitted using TLS (Transport Layer Security) encryption. TSL is a proven coding system that lets your browser automatically encrypt, or scramble, data before you send it to us. Website has stringent security measures in place to protect the loss, misuse, and alteration of the information under our control. Whenever you change or access your account information, we offer the use of a secure server. Once your information is in our possession we adhere to strict security guidelines, protecting it against unauthorized access.

YOUR RIGHTS QUA PERSONAL INFORMATION

You may access your Personal Information from your user account with Q2 T. You may also correct your personal information or delete such information (except some mandatory fields) from your user account directly.

CHANGES TO THE PRIVACY POLICY

We reserve the rights to revise the Privacy Policy from time to time to suit various legal, business and customer requirement. We will duly notify the users as may be necessary.

You may always submit concerns regarding this Privacy Policy via email to us at sales@quest2travel.com . Q2T shall endeavour to respond to all reasonable concerns and inquires.