Privacy & Cookie Policy

Last updated: 20 July 2026

The trips we plan are personal — and so is the information you share to make them happen. This page explains, in plain language, what we collect, why we collect it, how we look after it, and the choices and rights you have. No jargon, no surprises.

VMF Holidays Pvt. Ltd. (“VMF Holidays”, “we”, “us”) is a travel company based in Goa, India, and we are the people responsible for your personal data — your “data fiduciary” under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”). This policy covers this website and the ways you get in touch with us.

Our Privacy Promise

Your trust is the most valuable thing we hold. So here is our promise to you:

We only ever ask for information we genuinely need to plan and deliver your trip.
We will never sell or rent your personal data — to anyone, for any reason.
We share your details only with the partners who actually make your trip happen (your hotel, airline or transport provider), and only the specific details they need.
Inside VMF, only the team members helping with your booking can see your information, and they are bound to keep it confidential.
We hold the companies that help us run our website to the same standard we hold ourselves.
You stay in control — you can ask to see, correct or delete your data, or withdraw your consent, at any time.

1. What We Collect — and Why

Things you tell us.When you send an enquiry, use the Trip Builder, download a sample itinerary, book a trip, or message us on WhatsApp, phone or email, you share details like your name, phone number, email, destination and travel preferences, dates, the number and ages of travellers, hotel and meal preferences, budget, and any notes you add. We use these to understand the trip you want and tailor it to you. When you book, we collect the further details needed to confirm your trip and arrange payment. We take payments directly — by bank transfer, UPI or cheque — so we don't collect or store card or bank-account numbers on this website.

Your Travellers Club account. If you join our Travellers Club, we store your name, email, phone and a password — the password only ever in encrypted (hashed) form, so no one at VMF can read it.

Things we notice automatically.When you browse the site, we collect your IP address and basic usage information (pages visited, roughly how long, and your device or browser type). We use this to keep the site secure and working properly, and — only if you agree to analytics cookies — to understand what's useful and improve it.

2. How We Use Your Information

We use what we collect to:

reply to your enquiry and put together itineraries and quotes for you;
keep in touch about your booking and your travel;
process payments and send confirmations;
look after you before, during and after your trip;
meet our legal, tax and accounting obligations;
keep this website secure and make it better;
and, only if you have opted in, send you travel ideas and offers you can unsubscribe from at any time.

We only ever use your data for the purpose you shared it with us for.

3. Your Consent — and How to Withdraw It

Where the law requires it, we process your data on the basis of the consent you give when you tick the box on a form or create an account. You can withdraw that consent as easily as you gave it, by emailing info@vmfholidays.com. We'll stop the relevant processing — although we may keep certain records where the law requires, and withdrawing consent doesn't undo anything done beforehand.

4. Who We Share It With

We do notsell or rent your personal data. We share it only where it's needed to run your trip and our services:

Travel partners — hotels, airlines, transport and activity providers — purely to fulfil your booking, and only the details they need.
Trusted service providers who run parts of our platform for us, under contract and to our standards: our database and hosting (Neon, Vercel), image delivery (Cloudinary), our email (Resend), and — only if you accept analytics cookies — Google Analytics.
Authorities, where we are legally required to disclose.

5. How We Protect Your Data

All traffic between you and our servers is encrypted using SSL/TLS.
Passwords are stored only as one-way hashes — we can't see or recover them.
Access to your details inside VMF is limited to the team members handling your trip.
The service providers we use are held to confidentiality and security commitments in our contracts.

6. How Long We Keep It

We keep your personal data only for as long as we need it — typically for the length of our relationship and a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements — after which it is deleted or anonymised. You can ask us to delete your data sooner at any time (see Your Rights).

7. Cookies

A cookie is a small text file a website stores on your device to remember things between visits. We use two kinds:

Essential cookies— needed for the site to work, such as keeping you signed in, remembering your light/dark preference, and attributing a referral. These don't require consent.
Analytics cookies(Google Analytics) — used only if you accept them via our cookie banner. You can decline and still use the full site, and change your mind at any time by clearing this site's storage in your browser.

We do not use advertising or tracking cookies.

8. Your Rights

Under the DPDP Act, you have the right to:

ask for a summary of the personal data we hold about you and how we use it;
have anything inaccurate or incomplete corrected or completed;
have your data erased when it's no longer needed;
withdraw your consent at any time;
nominate someone to exercise your rights on your behalf if you die or are incapacitated; and
raise a grievance with us and, if you're not satisfied, escalate it to the Data Protection Board of India.

To exercise any of these, just email info@vmfholidays.com— we'll respond within the timelines the law requires.

9. Children's Privacy

Our services are meant for adults. We do not knowingly collect the personal data of a child (under 18) without verifiable consent from a parent or guardian. If you believe a child has shared data with us without that consent, please contact us and we'll delete it.

10. Where Your Data Is Processed

Some of the trusted providers who help us run this site process data on servers that may be located outside India. Wherever your data is handled, we take steps to keep it protected in line with this policy.

11. Changes to This Policy

We may update this policy from time to time. If we make a material change, we'll post it on this page with a new “last updated” date, and we won't use your existing data in a materially different way without your consent.

12. Talk to Us — and Our Grievance Officer

We're happy to answer any question about your privacy, or help you exercise your rights. For anything — including a formal grievance — reach our Grievance Officer:

Grievance Officer, VMF Holidays Pvt. Ltd.
Mendes Vaddo, H. No 128/3/A, Nagoa, Bardez, Goa 403516, India
Email: info@vmfholidays.com
Phone / WhatsApp: +91 74993 22412