Ecozyra — Privacy Policy

Effective date: 22 September 2025
Last updated: 22 September 2025

Thank you for visiting Ecozyra (https://ecozyra.com/) — India’s platform for promoting eco-friendly and sustainable tourism by connecting travellers with local homestays, tour guides, trek leaders, taxi providers and agro-tourism hosts. Protecting your privacy is important to us. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and your rights. Please read it carefully.

1. Who we are / scope

Ecozyra is a listing and lead-generation platform (the “Platform”) that helps local tourism providers create profiles and receive leads from travellers. We are a technology marketplace: we connect users (travellers) with independent service providers (hosts, guides, trek leaders, local taxis, agro-tourism operators). We are not the service provider for any bookings and do not directly provide or perform the travel services listed on the Platform. Any contract for a tour, homestay, trek or transport is between the traveller and the service provider unless otherwise indicated.

If you are a traveller, a host or a provider using Ecozyra, this policy applies to the personal data you share with us through our website, mobile apps and communications.

2. Legal compliance — short note

India has adopted the Digital Personal Data Protection Act, 2023 (DPDP Act), which sets legal standards for processing digital personal data in India. We design our privacy practices to respect applicable Indian privacy requirements. For users in the European Union, United Kingdom, California or other jurisdictions with specific rules (for example GDPR or CCPA), we also provide additional rights and disclosures as described below. MeitY+1

Websites and services that process personal data are expected to publish a clear privacy notice explaining data processing activities — this policy fulfils that requirement for Ecozyra. oercs.berkeley.edu

3. What personal data we collect

We collect different categories of data depending on how you use the Platform:

Information you give us directly

  • Account details: name, email address, mobile number, profile photo, display name.
  • Provider verification / onboarding data: government ID (Aadhaar, passport, driver’s license), PAN for payouts, bank account / IFSC for transfers, GSTIN (if applicable), certificates (guiding, first aid), police verification documents.
  • Listing content: description, prices, availability, service area, images, sample itineraries, video introductions, reviews, languages spoken.
  • Messages & communications: messages you send through Ecozyra to other users, support requests and in-app chat logs.
  • Booking & lead information: when a traveller expresses interest or sends a booking request, we collect reservation details, dates, guest counts and any preferences provided. (Note: Ecozyra is primarily a lead/booking intermediary — payment details are typically exchanged between traveller and provider or through a payment partner; see section 6.)

Automatically collected information

  • Device & log data: IP address, browser type, device identifiers, operating system, pages visited, referral URLs and error logs.
  • Usage & analytics: how you interact with the site, search queries, clicks and preferences to help us improve the Platform. We may use analytics services to collect aggregated usage data.

Cookies & similar technologies

We use cookies, local storage and similar technologies for site functionality, preferences, analytics and targeted or contextual advertising. You can control cookies through your browser settings; the cookie banner on our site lets you manage non-essential cookies. (See section 8.)

4. How we use your data (purposes)

We process personal data for the following purposes:

  • To operate the Platform — create and manage accounts, profiles, listings, searches and lead flows.
  • To enable connections — send leads and contact information to providers when a traveller expresses interest or makes a booking request.
  • To verify providers — to run identity, document and KYC/verification checks, and to display verification badges.
  • Payments & payouts — to provide payment instructions and payouts to verified providers (when you provide bank/PAN/GST details).
  • Support & safety — to respond to user queries, investigate complaints and manage disputes.
  • Security & fraud prevention — to detect, prevent and address abusive or illegal behaviour.
  • Marketing & communications — with your consent, to send promotional offers, newsletters and product updates. You can opt out at any time.
  • Legal obligations — to comply with laws, tax and accounting obligations and to respond to lawful requests by public authorities.
  • Improvement & personalization — to analyze and enhance the Platform, personalize content and recommend relevant local services.

We rely on lawful bases such as contract performance (when necessary for lead delivery), consent (for marketing and certain optional features), legitimate interests (for security, fraud prevention and product improvement) and legal obligations (for KYC and tax). Where special rules apply (for residents in the EU/UK), we will identify the legal basis in our communications at the time of collection. GDPR

5. Sharing & disclosure — who we share data with

We share personal data only in limited circumstances:

  • With the providers: when a traveller sends a booking request or lead, we pass the traveller’s contact details and relevant trip information to the selected provider so they can respond.
  • Service providers: trusted third parties who help run the Platform (hosting, payment processors, analytics, email/sms delivery, KYC/verification providers). These parties are contractually bound to protect data and use it only for the agreed purposes.
  • Compliance & legal: if required by law, regulation or court order, or to protect the rights, property or safety of Ecozyra, our users or the public.
  • Business transfers: in the event of a merger, sale, reorganization or asset transfer, user data may be transferred as part of the business assets (we will notify users where required by law).

We do not sell personal data. If laws in certain jurisdictions (for example California) require additional disclosures, we will comply and provide users with the available opt-outs. TermsFeed

6. Payments & third-party processing

Ecozyra’s role is primarily to generate leads and host listings. Payment flows vary by provider: some providers accept payment directly; others use third-party payment gateways. If you make payments via a payment partner, they will collect payment information and process it under their own privacy and security terms. We recommend reviewing the payment provider’s privacy policy before making payments.

7. Retention

We retain personal data for as long as necessary to provide the Platform and for legitimate business purposes (for example to comply with tax and accounting obligations, resolve disputes and enforce agreements). Retention periods may vary by data type — for KYC documents and payout records we typically retain data for a minimum number of years required by law.

8. Cookies & trackin

We use essential cookies required for the Platform to function. For analytics, performance and advertising, we use optional cookies and tools (for example analytics providers). You can manage cookie preferences via our cookie banner or your browser settings. For EU/EEA visitors, we request consent for non-essential cookies in compliance with applicable law.

9. Security

We implement industry standard security measures (encryption in transit, access controls, periodic reviews) to protect personal data. No system is perfectly secure — if we detect a data breach affecting your personal data, we will follow applicable laws and inform affected users and regulators as required.

10. Children

We do not knowingly collect personal data from children under the age required by applicable law to give consent (for most jurisdictions, under 16). If a parent or guardian believes we have unintentionally collected a child’s data, please contact us and we will promptly delete such data as required.

11. Your rights & choices

Depending on your jurisdiction, you may have rights to:

  • access the personal data we hold about you;
  • correct or update inaccurate information;
  • request deletion of your personal data (subject to legal exceptions);
  • restrict or object to certain processing;
  • withdraw consent where processing is based on consent;
  • request data portability where applicable.

If you are an EU/EEA or UK resident, GDPR-style rights apply and we will provide the mechanisms to exercise them. If you are a California resident, CCPA/CPRA rights apply where relevant. We will respond to verified requests per applicable law. GDPR+1

To exercise your rights or make a privacy request, please contact our Privacy Team (see below). We may need to verify your identity before fulfilling certain requests.

12. Marketplace disclaimer — our liability & role

Ecozyra provides the Platform to connect travellers and local providers but is not a party to contracts between travellers and providers unless explicitly stated. We are not responsible for the accuracy of listings, the conduct of providers, or the quality or safety of services. We encourage travellers to check reviews, ask for provider credentials and purchase travel/evacuation insurance for adventure activities. We may, however, mediate disputes in good faith using the information we hold.

13. International transfers

Personal data may be processed or stored in India and in other countries where our service providers operate. If data is transferred internationally, we will adopt safeguards required by applicable law.

14. Contact, grievance officer & DPO

If you have questions, privacy requests, or complaints, please contact:

Privacy Team / Grievance Officer
Ecozyra
Email: info@ecozyra.com

15. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements or business operations. We will post the updated policy on our site with the effective date. Where required by law, we will notify users of significant changes.

16. Useful legal references & compliance notes

  • India’s Digital Personal Data Protection Act, 2023 governs data processing and rights for Indian residents; we design our practices to be consistent with its principles. MeitY+1
  • Sites and platforms that process personal data are expected to publish clear, accessible privacy policies describing data uses and disclosure practices. oercs.berkeley.edu
  • For residents of the EU/EEA and UK, GDPR requires clear disclosures at the time of data collection. For California residents, CCPA/CPRA provides specific consumer rights and disclosure obligations; we will comply for applicable user requests. GDPR+1

17. Practical tips for users

  • Travellers: prefer verified providers, request copies of guide/leader certificates, and consider travel/evacuation insurance for high-altitude treks.
  • Providers: keep KYC and insurance documents current; only share personal data of travellers as required for service fulfilment and in accordance with law.
  • Everyone: use strong passwords, do not share OTPs, and contact us immediately if you suspect unauthorized access.