Privacy

Last updated: 24 September 2026

This page explains what Trailmark collects, why, who it goes to, how long we keep it, and how to have it corrected or deleted. It is written to be read, not skimmed past.

Who we are. Trailmark (trailmark.in) is a trading name of A TO Z DIGITAL (GSTIN 07ABIFA3032D1Z0), registered office 5/206, Lalita Park, Laxmi Nagar, New Delhi 110092. For the purposes of India’s Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the information described here.

What we collect when you send an enquiry

Everything you enter on our enquiry form, or on a Trailmark enquiry form inside Facebook or Instagram:

• Your name — to address you and prepare your quote
• Your mobile number — to call you and send your quote on WhatsApp
• Travel dates and number of nights — for availability and pricing
• Party size, and children’s ages — for room and safari jeep configuration
• Destination, stay preference, and whether you want transport — for quoting
• Anything else you choose to write in the message box

We ask for nothing else at the enquiry stage. Email and city are stored only if you give them to us later.

Children’s details are collected only from the parent or guardian making the enquiry, and only to configure rooms and, if you book, safari permits.

Enquiries made through Facebook or Instagram

If you send an enquiry using a Trailmark form inside Facebook or Instagram, Meta passes us the answers you submit on that form — your name, mobile number and the trip details you choose to give. Meta’s own handling of that information is governed by Meta’s privacy policy, not this one. Once it reaches us, it is treated exactly like an enquiry made on this website.

What we keep while we look after your enquiry

A record of our contact with you — when we called or messaged you, a short note of what was discussed, and the date we plan to follow up. It is how anyone at Trailmark picking up your enquiry knows where it stands.

Repeat enquiries. If you enquire again from the same mobile number, we link the new enquiry to the earlier one, so you do not have to explain your trip twice. Both are kept; neither is merged away.

Quotes. When we send you a quote, we keep a copy of it: the name it is addressed to, your travel dates, the number of nights and travellers, the stays and prices we offered, and any personal note we wrote to you. You can open it at a private link we send you, and download it as a PDF. The link is not listed or published anywhere, and the PDF is held in private storage, but anyone you forward the link to can open it — treat it as you would the quote itself.

What we collect automatically

Advertising attribution. If you arrive from an advertisement, we record which campaign and ad brought you, along with the click identifiers Google and Meta use to match an enquiry to an ad (gclid, wbraid, gbraid, fbclid, fbc, fbp), the page you landed on, the site you came from, and your browser’s user agent. This is recorded when you first arrive, not when you submit.

Your IP address is converted into a one-way hash before we store it, and is never stored in readable form. It is used only to improve the accuracy of that matching.

Cookies and similar technologies. This site uses:

• Google Analytics — to count visits and see which pages people use. It sets cookies named _ga and _ga_….
• The Meta pixel — to tell us whether a visit from a Facebook or Instagram ad led to an enquiry. It sets a cookie named _fbp, and _fbc when you arrive from a Meta ad.
• A saved draft of the enquiry form in your own browser, so you do not lose what you have typed if you leave the page. It is cleared when you send the enquiry, and discarded after 24 hours in any case.
• A short-lived confirmation cookie set when you send an enquiry, so the confirmation page can greet you by name without putting your details in the web address. It holds a signed reference number, not your details, and expires after 30 minutes.

We use no cookies for any other purpose, and none for selling or profiling beyond measuring our own advertising. You can block or delete cookies in your browser settings at any time; the site will still work.

What we collect if you book

A safari permit is issued in each traveller’s name and cannot be transferred, so the Uttarakhand Forest Department requires the full name, age, and government ID type and number of every traveller — Aadhaar, passport, voter ID, driving licence or PAN.

This is the most sensitive information we hold. We ask for it only once you have decided to book, only because a permit cannot be issued without it, and we delete it when you ask us to.

Why we are allowed to use it

We use your information on the basis of your consent, which you give when you send us an enquiry or make a booking. You can withdraw that consent at any time by writing to us (see “Your rights” below). Withdrawing it does not affect anything already done — a permit already issued, for example — but we will stop using your information from that point, except where we are legally required to keep a record.

Who we share it with

• Hotels and resorts — guest names, dates, room and meal plan, and any special requests, when we make your reservation.
• The Uttarakhand Forest Department portal — traveller names, ages and ID numbers, when a safari permit is booked.
• Google and Meta — conversion events and identifiers so we can tell which advertising works. With each event, Meta also receives your IP address and browser user agent, as its pixel would from your browser directly. Your mobile number, if sent at all, is sent only in hashed (one-way encrypted) form. Your name is never sent.
• The services that run this business on our behalf — Google Workspace (email), WhatsApp (messaging), Hostinger (website hosting) and Supabase (our database, hosted in Mumbai). They process your information only to provide their service to us.

We do not sell your personal data, and we do not share it for any purpose other than arranging your trip and measuring our own advertising.

Your information is stored in India. Where one of the services above processes it elsewhere, it does so under that provider’s own safeguards.

How long we keep it

Deletion is not yet automatic. Where a period is stated below, it is the longest we keep that information. Whatever the period, if you want your information removed, ask us and we will remove it (see “Your rights” below).

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what information we hold about you and who we have shared it with
• correct anything that is wrong or out of date
• delete your information, unless the law requires us to keep it
• withdraw your consent to our using it
• nominate someone to exercise these rights for you if you are unable to

How to ask. Write to our grievance officer:

We will acknowledge your request within 7 days and resolve it within 30 days. We may ask you to confirm your identity first, so that we never hand one person’s information to another.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We are a small business and have not been designated a Significant Data Fiduciary, so we have not appointed a separate Data Protection Officer; the grievance officer handles every request.

Changes to this page

If we change how we handle your information, we will update this page and the date at the top. If a change is significant, we will tell anyone with an open enquiry or booking directly.