Legal

Privacy Policy

This policy explains what Cross Over Holidays LLP collects when you enquire about or book a trip with us, what we do with it, and the rights you have over it under Indian, EU and US law. Last updated 8 August 2026.

Who we are

Cross Over Holidays LLP ("we", "us", "our") is a registered limited liability partnership operating as a tour operator, with its registered office at 1st Floor, India Hotel Building, Opposite ICICI Bank, Jaigaon, Dist. Alipurduar, West Bengal 736182, India. For the purposes of the laws referenced below, we are the data controller (GDPR) / data fiduciary (India's Digital Personal Data Protection Act, 2023) / business (CCPA) responsible for the personal data described in this policy.

What we collect

We collect the information you give us directly, and nothing beyond that from third parties without telling you. This includes:

  • Your name, phone number and email address, when you contact us through the enquiry form, WhatsApp or a phone call.
  • Travel details you share for the purpose of planning a trip — dates, group size, destinations, and preferences.
  • Identity document details (passport number, Voter ID number) only where a permit or booking genuinely requires it, such as Bhutan entry permits or Sikkim protected area permits, and only the specific details the relevant authority asks for.
  • Payment confirmation details for advance payments and balances, handled through standard banking or UPI channels. We do not store full card numbers.
  • Technical and usage data collected automatically when you visit this website — pages viewed, approximate location, device and browser type, referring site — via cookies and similar technologies described below.

Where GDPR applies to you, we rely on one of the following bases for each use described in this policy: performance of a contract (planning and delivering your trip), your consent (non-essential cookies, marketing messages), our legitimate interest (keeping the site secure, improving our service), or a legal obligation (accounting and permit records). You can withdraw consent at any time without affecting the lawfulness of anything already done.

How we use it

Information you share is used to plan your trip, apply for the permits your itinerary needs, book hotels and transport in your name, and stay in touch with you before and during travel. We do not sell your information to anyone, and we do not use it for purposes unrelated to arranging your trip except where you have separately consented — for example, to advertising cookies described below.

Where a permit application requires sharing identity details with a government office — the Bhutan immigration authority at Phuentsholing, or Sikkim's protected area permit system, for example — we share only what that specific application requires, submitted on your behalf as part of the service you have asked for.

WhatsApp and messaging

Most of our communication happens over WhatsApp, because it is how our guests prefer to reach us before, during and after a trip. Messages sent to our WhatsApp number are used to plan and support your trip and are not shared with third parties beyond what is needed to deliver it — for example, forwarding your travel dates to a hotel to confirm a booking. WhatsApp is operated by Meta Platforms, Inc.; its own handling of message data is described in the WhatsApp Privacy Policy.

Third-party services we use

We use a small number of well-known platforms to run this website and reach travellers. Each is responsible for its own handling of the data it collects on its side:

Some of these providers are based outside India, including in the United States. Where personal data is transferred internationally, it is done under those providers' own published safeguards (such as standard contractual clauses).

Cookies and this website

This website does not currently run analytics or advertising cookies, and does not use cookies to track or profile visitors. If that changes — for example, if we start using Google Analytics or Meta/Facebook advertising tools — we will update this section first and add a way to choose which cookies you allow before any such cookie is set, not after.

How long we keep information

We keep booking and permit-related records for as long as is reasonably necessary for accounting, legal and dispute-resolution purposes, consistent with Indian record-keeping requirements for a registered business. Enquiry details from trips that were never booked are retained only as long as needed to follow up, and are not kept indefinitely.

Children's privacy

This website and our services are directed at adults arranging travel. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us using the details below and we will delete it.

Your rights

Depending on where you live, you have some or all of the following rights over the personal data we hold about you. Contact us using the details below to exercise any of them — we respond directly rather than through an automated process.

If you are in India (Digital Personal Data Protection Act, 2023): you have the right to access a summary of your personal data and the processing we carry out, to correction and erasure, to a readily available means of grievance redressal, and to nominate another person to exercise these rights on your behalf in the event of your death or incapacity. Our Grievance Officer can be reached at officecrossoverholidays@gmail.com or +91 99323 31789. You may also raise a complaint with the Data Protection Board of India.

If you are in the European Economic Area or UK (GDPR): you have the right to access, rectify, erase or restrict your data, to data portability, to object to processing based on legitimate interest, and to lodge a complaint with your local supervisory authority — see the European Commission's data protection guide for how to find yours.

If you are in California (CCPA/CPRA): you have the right to know what personal information we collect, to request its deletion, to opt out of its "sale" or "sharing" (we do not sell personal information, and only "share" it in the advertising-cookie sense described above, which you can decline), and to non-discrimination for exercising these rights. See the California Attorney General's CCPA page.

Keeping your data secure

We take reasonable technical and organisational steps to protect the personal data we hold, and our website is served over an encrypted (HTTPS) connection. No method of transmission or storage is completely secure; if we become aware of a breach affecting your personal data, we will notify you and the relevant authority where required by law.

Changes to this policy

If this policy changes in a way that affects how we handle your information, we will update the date at the top of this page. Continuing to use our services after a change means you accept the updated policy.

Contact us about privacy

Cross Over Holidays LLP, 1st Floor, India Hotel Building, Opposite ICICI Bank, Jaigaon, Dist. Alipurduar, West Bengal 736182, India.
Email: officecrossoverholidays@gmail.com
Phone: +91 99323 31789 / +91 63609 29813

Read our Terms and Conditions →