Legal
What personal data we collect, why, how long we keep it, and the rights you have over it.
Last updated 16 Jul 2026
Placeholder text — not legal advice, and not ready to publish
This page sets out the structure and the questions a lawyer needs to answer. It must be reviewed and completed by a qualified professional in your jurisdiction before the site goes live. Replace it from Admin → Legal Pages and clear the placeholder flag once it has been signed off.
eZyMiles is the data controller for the personal information described in this policy. Our registered address and contact details are set out at the end of this page.
PLACEHOLDER: insert the registered company name, company registration number, registered office address and, if applicable, the name and contact details of your Data Protection Officer.
Identity and contact data: name, email address, phone number, and postal address where relevant.
Traveller data: date of birth, nationality, passport number and expiry — collected only where a booking or a visa application genuinely requires it.
Booking data: destinations, dates, travellers, the price you paid, and correspondence about your trip.
Payment data: we do NOT store card numbers. Payments are processed by our payment gateway, which holds the card data. We retain only the gateway's transaction identifiers and the payment status.
Technical data: IP address, device type and pages viewed, used to keep the site secure and to understand which content is useful.
To perform the contract you enter into when you book: arranging flights, stays, activities, transfers and visa assistance.
To comply with legal obligations, including tax records and any statutory traveller reporting requirements.
For our legitimate interests: fraud prevention, service improvement, and responding to enquiries you send us.
With your consent: marketing emails and WhatsApp updates. You can withdraw consent at any time using the unsubscribe link or by contacting us.
Suppliers who must have it to deliver your trip: airlines, hotels, ground operators, activity providers and, for visa services, the relevant embassy or consulate.
Processors acting on our instructions: our payment gateway, email delivery provider, and cloud hosting and media providers.
PLACEHOLDER: list your actual processors and, where personal data leaves your jurisdiction, state the transfer mechanism relied on.
Booking and financial records are retained for the period required by tax and accounting law.
Enquiries that do not become bookings are retained for a limited period and then deleted.
PLACEHOLDER: state the actual retention periods and the criteria used to determine them.
You may request access to your data, correction of inaccurate data, erasure where the law allows, restriction of processing, portability, and you may object to processing based on legitimate interests.
You may also complain to the relevant data protection authority.
PLACEHOLDER: name the supervisory authority applicable to your jurisdiction and give the exact contact route for exercising these rights.
Questions about this policy or your data: hello@ezymiles.com, +91 79000 03279, Plot No. 337, Industrial and Business Park, Phase 2, Chandigarh – 160002.