Privacy Policy

When you enquire or book, we collect your name, phone number, email address, city, and the details you choose to give us about the trip — number of travellers, dietary requirements, medical information relevant to your safety on the trip, and any notes you add.

Bookings are confirmed over WhatsApp and payment is arranged directly with us — by bank transfer or UPI. This website takes no card details and has no checkout, so there is no card number, CVV or UPI PIN for us to see or store. When you message us on WhatsApp, that conversation sits in your WhatsApp account and ours, under WhatsApp’s own terms.

We also collect standard analytics about how this website is used — pages visited, approximate location, device and browser. This is aggregated and is not used to identify you.

To answer your enquiry, to run your booking, to arrange the stays and permits your trip requires, to keep you safe on the trip, and to contact you about the departure you have booked.

Medical and dietary information is shared only with the host leading your trip and, where necessary, with the specific stay or kitchen that needs it. It goes no further.

We use your email for trip communications always, and for our monthly newsletter only if you have opted in. Every newsletter has a one-click unsubscribe.

Your host, and the specific stays, transport operators and activity providers on your itinerary — limited to what each of them needs. A homestay gets a name and a dietary requirement, not your phone number and medical history.

Our bank, for a transfer you send us. Our email and analytics providers, as processors under contract.

We do not sell your data. We do not share it with advertisers. We do not pass your number to other travel companies.

Booking records are kept for seven years, because tax and accounting rules in India require it. Enquiries that do not become bookings are deleted after 24 months. Medical and dietary details are deleted 90 days after your trip ends.

Email mistiiitales@gmail.com and you can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. We will respond within 30 days.

Deletion requests are honoured except where we are legally required to retain a booking record, in which case we will tell you exactly what we are keeping and why.

This site uses cookies for two things: remembering your preferences, and analytics that tell us which pages are useful. We do not use advertising cookies that follow you to other websites.

You can block cookies in your browser. The site will still work; some conveniences will not.

This site is served over HTTPS. Access to booking data is limited to team members who need it. Passwords, where accounts exist, are hashed and never stored in readable form.

If we ever suffer a breach that affects your data, we will tell you and the relevant authority within 72 hours of becoming aware of it.