Privacy & Data Protection Policy
Payments Processed Securely by Razorpay — Zero Financial Data Stored
Yamuna River Tourism takes consumer financial privacy seriously. We explicitly clarify that all online digital payments, UPI authorizations, and card transactions are processed exclusively by our RBI-licensed Payment Aggregator partner: Razorpay Software Private Limited.
🔒 We NEVER collect, process, capture, or store your Credit Card numbers, Debit Card numbers, Expiry Dates, CVV codes, NetBanking credentials, or UPI PINs on our servers.
When checking out, your payment data is encrypted using military-grade 256-bit Secure Sockets Layer (SSL) encryption and transmitted directly to Razorpay and your card-issuing bank under strict PCI-DSS Level 1 compliance standards.
Information We Collect
When you interact with the Yamuna River Tourism portal or book admission passes, we collect only the minimal personal identifiable information (PII) required to deliver digital ticketing services:
- Contact Information: Full Name, Email Address, and Mobile Phone Number for ticket issuance, confirmation alerts, and entrance validation.
- Ticketing Data: Date of visit, pass tier (Adult, Child, Catamaran Cruise, Speedboat), headcount, total price paid, and unique cryptographically signed Pass IDs.
- Gateway Reference Tokens: Razorpay Order ID, Razorpay Payment ID, and transaction completion status (PAID/FAILED). No raw card or bank account details are ever transmitted to our database.
- Turnstile Telemetry: Physical turnstile gate barrier ID, entrance timestamp, and scan verification state (VALID / USED / REJECTED) recorded for crowd safety and capacity control.
How Your Information is Utilized
We process collected data solely for the following legitimate purposes:
- Generating verifiable QR code tickets and thermal receipt slips for admissions.
- Real-time automated barrier unlocking at physical optical turnstiles at Sonia Vihar Ghat.
- Transmitting automated booking receipts, e-passes, and emergency weather notices via SMS or email.
- Investigating disputed transactions and coordinating authorized refunds via Razorpay.
- Fulfilling statutory accounting, tax, and GST audit requirements mandated by Indian authorities.
We DO NOT sell, rent, monetize, or trade your personal data to any third-party marketing companies, ad brokers, or unsolicited telemarketers.
Cookies & Technical Storage
Our web application utilizes strictly necessary HTTP-only authentication cookies and local state storage to:
- Authenticate visitors and park staff sessions (
auth_token). - Preserve your selected booking pass choices during the checkout session.
- Maintain dark/light UI display settings and terminal sound alert toggles.
We do not use invasive third-party cross-site tracking cookies. You may disable cookies in your browser settings, though doing so may prevent you from logging into your account or accessing your booked passes.
Data Retention, Protection & Visitor Rights
4.1. Security Architecture: We employ end-to-end HTTPS encryption, parameterized database queries, salted credential hashing, and continuous firewall monitoring to safeguard user accounts.
4.2. Retention Timeline: Ticket transaction records are retained for a period of up to 7 years in accordance with Indian commercial tax, GST, and corporate governance regulations. Expired QR validation tokens are archived periodically.
4.3. Your Legal Rights: Under the Digital Personal Data Protection (DPDP) Act 2023, you have the right to request a summary of your personal data held by us, request correction of inaccurate data, or request account closure. For privacy inquiries or requests, contact us at: privacy@yamunarivertourism.in.