Privacy Policy

When you sign up for an account, we collect your name, mobile number, and password. Your mobile number doubles as your WhatsApp number for booking confirmations and price-drop alerts. Email is optional at signup; you may add it later from your profile.

While making a booking, we collect passenger names (as on government ID), date of birth where required, contact email and phone, and payment details. Payment card information is processed and tokenised by our PCI-DSS compliant payment gateway (Razorpay) — Tatkal Flights does not store your full card number, CVV, or expiry on our servers.

If you book on behalf of others (family, colleagues, friends), we collect their name, age category, and any travel-document details the airline requires. By providing this information, you confirm that each co-traveller has agreed to have their information shared with us and the relevant service providers.

For certain bookings (international flights, government-mandated KYC, contactless airport check-in, or where the airline or regulatory body requires it), you may be asked to provide your PAN, Aadhaar, passport, or other government-issued identification. Such information is used strictly for the specified purpose, and we will never share it without your prior consent unless required by law enforcement, a court order, or any legal process.

We also collect transactional history, search history, click-through behaviour, and device/browser metadata — for example, the routes and dates you search, the flights you view, and the airline/fare combinations you select. This helps us improve the Website and personalise your experience.

We may receive information about you that is available in the public domain or shared by third parties such as social-login providers, only to the extent your account settings permit (typically name, email, profile picture).

We use your information to create and confirm reservations with airlines and other service providers, process payments, issue tickets and PNRs, and notify you of any subsequent updates, schedule changes, or cancellations through SMS, WhatsApp, email, or in-app notifications.

Your contact details allow our customer-service team to reach you about your bookings, respond to enquiries, and assist with refunds, cancellations, rescheduling, or other booking-related issues.

We use account-related information to authenticate sign-ins, validate phone numbers, detect and prevent fraud or abuse, and enforce our Terms of Service. This includes verifying that the wallet balance you redeem belongs to your account and that the Razorpay payment matches the order you placed.

We may invite you to take part in surveys or feedback questionnaires. Participation is entirely optional. Survey responses are typically aggregated and anonymised to inform product and service improvements.

We may send you fare-sale notifications, special offers, price-drop alerts, and loyalty / reward updates on WhatsApp, SMS, or email — based on your search history and travel preferences. You can unsubscribe at any time using the link in the message or by writing to us (see Section 9). For wallet-based reward programs, your transaction history is used to credit cashback or referral rewards.

We analyse aggregated, anonymised data on traffic patterns, popular routes, conversion funnels, and feature adoption to improve search relevance, page-load performance, and the overall user experience.

Cookies are small text files stored by your browser. We use cookies to keep you signed in, remember your preferences, deliver personalised offers, and measure the effectiveness of our pages. Most browsers accept cookies automatically, but you can change your browser settings to refuse them — note that blocking cookies may disable some features on the Website. Third-party advertising or analytics providers may also place cookies; the data they collect is anonymised and used in aggregate to measure ad effectiveness.

Each time you access the Website your session metadata is logged — including IP address, approximate geographic location, browser, operating system, referrer URL, and the pages and durations of your activity. We use session data to diagnose performance issues, secure our systems, and improve site reliability. This data does not personally identify you on its own.

To fulfil your booking, we share necessary information — typically passenger names, contact details, and itinerary — with the airline and any GDS or fare-aggregator partners involved in issuing your ticket. By making a booking, you authorise us to share this information with such service providers. Once shared, those providers act as independent data controllers under their own privacy policies; we encourage you to review them where applicable.

Payment information is shared with our payment gateway (Razorpay Software Private Limited) for transaction processing, fraud screening, and refund handling. Razorpay is PCI-DSS compliant and operates under its own privacy policy.

We may share your information, under controlled and secure circumstances, with group entities or affiliates to deliver coordinated services, support, and communications across our family of brands. If Tatkal Flights is acquired, merged, or restructured, your information may be transferred to the acquiring entity as part of the transaction.

We may share limited or anonymised information with vetted business partners (for example, co-branded card issuers, travel-insurance providers, or referral partners) so they can offer you complementary services. These partners are bound by confidentiality agreements and may use the information only to provide the agreed service.

We may engage third-party vendors for data hosting, server infrastructure, customer-support tooling, fraud detection, and analytics. These vendors process Personal Information only on our instructions and under written confidentiality / data-processing agreements.