Privacy policy

TechSlide IT Solutions Pvt Ltd (CIN U72900TN2022PTC151232), trading as My Divine Tours, of 2 Indra Nagar, Medical College Road, Thanjavur 613007, Tamil Nadu, India, decides how and why your data is used. Questions and requests go to care@mydivinetours.com.

We do not hold your card number, your UPI ID or your bank details. Those are entered on the payment gateway’s own page and never pass through our servers — we receive only the amount, the status and the gateway’s reference.

To take and fulfil your booking, to send you the voucher and invoice, to let you sign in and see your trips, to answer support requests, and to meet tax and accounting obligations under Indian law. We do not sell data and we do not share it for anyone else’s marketing.

These are the only third parties that receive customer data, and what each receives:

Drivers and guides assigned to your trip are given your name, telephone number and pickup point, because they cannot collect you without them.

We set one cookie of our own: a session cookie, when you sign in, so that the site knows it is you. It is HTTP-only — scripts running in your browser cannot read it, so a cross-site-scripting flaw cannot steal your session. It expires after 30 days, and you can end it sooner by signing out. There is no advertising cookie and no cross-site tracker set by us.

Where the business has enabled Google Analytics, that service sets its own cookies to count visits. You can block them in your browser without affecting your ability to book.

Booking and payment records are kept for eight years, which is the retention period Indian tax law expects for financial records. Support tickets are kept for three years. Sign-in sessions expire after 30 days; the emailed link that lets you set a password expires after fifteen minutes and works once.

If you close your account we remove your profile and contact details, but we must keep the financial record of bookings already paid for — we cannot delete an invoice we are required to hold.

You can see what we hold about you, correct it, ask for a copy, or ask us to delete it, subject to the retention above. Most of it you can do yourself from your account, including signing out of every device at once. For anything else, write to care@mydivinetours.com and we will respond within 30 days.

The site is served over HTTPS. Passwords are stored as scrypt hashes and cannot be read back by anyone, including us — which is why a forgotten password is reset rather than retrieved. Sessions are held server-side so that access can genuinely be revoked rather than merely expired.

No system is perfect. If you believe your account has been accessed by someone else, sign out of all devices from your account page and tell us immediately.

This site is not intended for children, and we do not knowingly create accounts for anyone under 18. Children travelling on a tour are named as travellers on an adult’s booking, which is the only circumstance in which we hold a child’s name.