Last updated: [date]
Who is responsible for your data
[Legal business name], [registered address], runs Known Roads and decides how your personal data is used.
What we collect
- Contact details: your name and email address, and your WhatsApp number if you choose to give it. Travellers don't have to give a phone number. Mentor applicants give us a phone number so we can arrange their interview.
- Trip details: your travel dates, destinations, group size and anything you tell us about your plans or preferences, such as preferring a woman mentor.
- Payment records: confirmation that you paid and how much. Card and UPI details are handled by our payment providers, not stored by us.
- Messages: what you send us, and feedback or ratings after your trip.
- Website use: [basic, anonymous visit statistics if you add an analytics tool; otherwise remove this line].
For mentor applicants we also collect the information needed to verify their identity. We record that verification passed and delete copies of ID documents once it is complete [confirm].
Why we use it
- To match you with a mentor, arrange your call and provide your plan.
- To take payment and keep the records the law requires.
- To handle questions, complaints and safety reports.
- To improve the service, using feedback and ratings.
We rely on your consent, on what's needed to provide the plan you asked for, and on our legal obligations. You can withdraw consent at any time, though we may then be unable to provide the plan.
Who we share it with
- Your mentor: your trip details when we ask whether they're free, and your name and email once they've accepted and you've paid. You book your call on your mentor's booking page ([Cal.com]), and the call takes place on Google Meet. Those services have their own privacy policies. If you gave us your WhatsApp number, your mentor gets it at the same time as your name and email. Otherwise your phone number is only shared if you give it to your mentor yourself.
- Service providers: our payment providers ([Razorpay / PayPal]), our website and database host (Cloudflare) and our email provider ([Resend]), who process data on our instructions.
- Authorities: when the law requires it.
We don't sell your personal data. Some providers store data outside India.
How long we keep it
We keep booking and payment records for as long as tax and accounting law requires, currently [8] years. Other personal details are deleted automatically 12 months after your trip (or after you sign up, if you didn't book), unless you ask us to delete them sooner. Copies of the emails we send you are kept for 90 days. A review you agreed to publish stays, without your name.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance with us. If you live in the European Union or the United Kingdom, you also have rights under the GDPR, including to object to processing and to complain to your local data protection authority.
To use any of these rights, email .
Children
Our plans are for adults. Travellers under 18 should be included in a plan booked by a parent or guardian.
Security
We limit who can see your data and use reputable providers. No system is perfectly secure, and we'll tell you and the relevant authorities if a breach affects you, as the law requires.
Grievance officer
[Name], [email]. We acknowledge complaints within 48 hours.
Changes
We'll post any changes on this page and update the date above.