Privacy Policy for Adamvacations.com

Adam Vacations Private Limited (“Adam Vacations”, “we”, “us”, or “our”) operates the website www.adamvacations.com (the “Website”) and provides travel search and booking services that may also be made available through third-party travel platforms, including travel metasearch services and AI-powered platforms. This Privacy Policy explains how we collect, use, share, store, and protect personal data when you visit the Website, search for or book travel, create an account, interact with us through an AI-powered platform, or otherwise contact us.

We are committed to protecting your privacy in accordance with India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the “DPDP framework”), and — where applicable to visitors located outside India — the EU/UK General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

1. Who we are

For the purposes of the DPDP framework, Adam Vacations is the Data Fiduciary responsible for the personal data described in this policy.

Registered Office (India): Unit No. 16A-B / 17A, Ground Floor, Tower B-3, Spaze Itech Park, Sector-49, Gurgaon, Haryana 122018, India
Corporate Office (USA): 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA
Privacy contact: support@adamvacations.com
Toll-free (India): 1800-890-9456
Phone (USA): +1-872-244-6776
Website: www.adamvacations.com

2. Scope of this policy

This Privacy Policy applies to personal data we collect through the Website, through our booking and enquiry channels, and through integrations with third-party travel platforms. It does not apply to data collected offline, or to the practices of third-party services that are governed by their own privacy policies. In particular, your interaction within a third-party platform is governed by that platform provider’s own privacy policy; this policy covers the information that platform passes to us and what we do with it (see Section 6).
By providing your personal data to us, you confirm that the information is accurate and that you are authorised to share it.

3. Personal data we collect

We collect only the personal data necessary to provide the travel services you request. Depending on how you use our services, this may include:

• Travel search criteria — origin and destination airports, travel dates, passenger counts, cabin class, and airline preferences. This information is used to return flight availability and pricing and generally does not, by itself, identify you.
• Booking and passenger information — names, contact details, and the traveller information required to issue tickets and fulfil a booking, collected when you proceed to book on our Website. Account information (if you register for an account) — your name, contact details, address, and login credentials.
• Communications — the contents of messages, attachments, and any information you choose to provide when you contact our customer support by email, form, or phone.
• Transaction-related information — details necessary to process a booking or payment. Card and banking details are handled by our payment service providers through their secure systems and are not stored on our own servers.
• Technical and usage information (log files) — our hosting infrastructure automatically records standard log data such as IP address, browser type, internet service provider, referring/exit pages, and date/time stamps, used for security, site administration, and aggregate analytics, and not used to identify you personally.
• Referral information from travel platforms — where you reach us from a metasearch or AI-powered platform, we may receive the associated search criteria and the fact that you arrived from that platform (see Section 6).

We do not knowingly collect special or sensitive categories of data unless strictly necessary for a specific travel service (for example, passport details for ticketing) and provided by you for that purpose.

4. How we use your personal data

We use your personal data to:

• Process and fulfil your travel searches, bookings, ticketing, and itinerary requests;
• Respond to enquiries and provide customer support;
• Create and manage your account;
• Operate, maintain, secure, and improve our Website and services;
• Communicate with you about your booking and, where you have consented, about offers and updates;
• Detect, prevent, and address fraud, security issues, and technical problems; and
• Comply with applicable legal, tax, and regulatory obligations.

We process your personal data only for these specified purposes and will not use it for unrelated purposes without your consent.

5. Consent and your choices

Where the DPDP framework requires consent, we obtain it through a clear, affirmative action and tell you the purpose at the point of collection. For certain processing — such as fulfilling a booking you have requested or meeting a legal obligation — we may rely on a lawful basis other than consent (such as performance of a contract or compliance with law).

You may withdraw your consent at any time by contacting us using the details in Section 15. Withdrawal does not affect processing carried out before withdrawal and may mean we can no longer provide certain services to you. You may also opt out of marketing communications at any time.

6. Third-party travel platforms (metasearch and AI-powered)

Adam Vacations participates in third-party travel platforms so our fares and travel options can be discovered and compared more easily. These include travel metasearch and comparison services, and AI-powered platforms such as ChatGPT.

To enable this, we provide these platforms with fare, schedule, and availability information about our travel offerings. This commercial data does not, by itself, identify you.

When you reach Adam Vacations through such a platform:

• Travel search criteria — such as origin and destination airports, dates, passenger counts, and cabin or airline preferences — may be passed to us so we can return relevant availability and pricing for display.
• In most cases, when you select an Adam Vacations option you are redirected to our Website to review and complete your booking, at which point the rest of this Privacy Policy applies and your personal, contact, and payment details are collected by us there.
• Where a platform offers an in-platform booking option, we receive only the booking and passenger details necessary to issue your ticket and fulfil the booking. Payment is processed through secure systems and we do not store full card details on our own servers.
• When you arrive from such a platform, we may receive limited referral information, such as the search parameters and the source of the referral.
• We do not request, access, or store your broader account or conversation history from these platforms. We receive only the information necessary to perform the requested travel service.
• Information received through these integrations is used solely to provide travel search, booking, itinerary, and customer support services.

Your activity within the third-party platform itself is governed by that platform provider’s own privacy policy, which we encourage you to review.

7. Cookies and analytics

Our Website uses cookies and similar technologies to:

• Maintain website functionality and user sessions;
• Remember your preferences and settings;
• Analyse website traffic and performance;
• Improve user experience and service quality;
• Support security, fraud prevention, and troubleshooting; and
• Measure the effectiveness of our own marketing and promotional campaigns.

You can control or disable cookies through your browser settings, though some features of the Website may not function properly if cookies are disabled. Where required by law, we will obtain your consent before placing non-essential cookies.

8. How we share your personal data

We do not sell your personal data. We share it only as necessary to deliver our services, with:

• Airlines and travel suppliers — to fulfil your bookings;
• Global distribution systems (GDS) and travel technology providers — to source availability, pricing, and ticketing;
• Payment processing providers — to process transactions securely;
• Cloud hosting and infrastructure providers — who host our systems under appropriate security and confidentiality obligations;
• Customer support providers — who assist us in responding to you;
• Group and affiliated entities — including our corporate office in the United States and affiliated travel entities, for providing and administering your services; and
• Government or regulatory authorities — where required by applicable law, legal process, or to protect our rights, users, or the public.

We require all such recipients to handle your data securely and only for the purposes for which it is shared.

9. International data transfers

Because we operate across India, the United States, and other countries, your personal data may be transferred to and processed in jurisdictions outside the country where you are located. Where we transfer personal data internationally, we do so in accordance with applicable law — including any conditions prescribed under the DPDP framework for transfers outside India, and appropriate safeguards (such as Standard Contractual Clauses) for personal data of individuals located in the EU/EEA or UK.

10. Data retention

We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Indicative retention periods include:

• Travel search information: up to 90 days;
• Customer support communications: up to 24 months; and
• Booking and transaction records: for the period required by applicable accounting, tax, and regulatory requirements.

When personal data is no longer required, we delete or anonymise it in accordance with applicable law.

11. Data security

We maintain reasonable technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach affecting your data, we will notify you and the Data Protection Board of India as required under the DPDP framework.

12. Information you should not share

To protect your security, please do not provide payment card numbers, passwords, one-time passwords (OTPs), API keys, health information, government identification numbers, or other sensitive information through customer support forms or AI-powered travel search interfaces, unless specifically requested as part of a secure booking process on our Website. We will never ask for such information through an AI-powered platform.

13. Your rights

Subject to applicable law, you have the following rights in relation to your personal data.

Under the DPDP framework (India), you have the right to:

• Access a summary of the personal data we process about you and the related processing activities;
• Request correction, completion, or updating of inaccurate or incomplete data;
• Request erasure of your personal data where it is no longer needed;
• Nominate another individual to exercise your rights in the event of your death or incapacity;
• Withdraw consent at any time; and
• Have your grievances addressed by our Grievance Officer (see Section 15).

To exercise any right — including access, correction, deletion, or opting out of marketing — contact us at support@adamvacations.com. We will respond within the timelines required by applicable law.

14. Children’s data

Protecting children online is a priority for us.

• In India, we treat any individual under the age of 18 as a child. We do not knowingly process a child’s personal data without verifiable consent from a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
• For visitors in the EU/EEA, the minimum age for consent is 16 (or the lower age set by the relevant member state, not below 13).
• For visitors in the United States , we do not knowingly collect personal data from children under 13.

If you believe a child has provided us personal data without appropriate consent, please contact us and we will take reasonable steps to delete it.

15. Grievance Officer and contact

For any questions, requests, or complaints about this Privacy Policy or how we handle your personal data, please contact:

Grievance Officer: Peter Remedios

Adam Vacations Private Limited
Unit No. 16A-B / 17A, Ground Floor, Tower B-3, Spaze Itech Park, Sector-49, Gurgaon, Haryana 122018, India

Email: support@adamvacations.com
Toll-free (India): 1800-890-9456
Phone (USA): +1-872-244-6776
We will acknowledge and address grievances within the timelines prescribed by the DPDP framework. If you are not satisfied with our response, you may have the right to escalate your complaint to the Data Protection Board of India.

16. Additional rights for visitors in the EU/EEA and UK (GDPR)

If you are located in the EU/EEA or the UK, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise these rights, contact us at support@adamvacations.com.

17. Additional rights for California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you;
• Request deletion of your personal information;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of your personal information; and
• Limit the use and disclosure of sensitive personal information.

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and you will not be discriminated against for exercising any of your rights. To make a request, contact us at support@adamvacations.com.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Effective date” above and, where appropriate, notify you. We encourage you to review this page periodically.

19. Consent

By using our Website or services and providing your personal data, you acknowledge that you have read and understood this Privacy Policy. Where consent is required by law, we will obtain it separately through a clear affirmative action.