Legal

Privacy Policy

Last updated: 29 October 2026

1. Who we are and what this covers

OpenSky Travels and Events LLP ("OpenSky", "we", "us", trading as OpenSky Travels) is a limited liability partnership running a travel and events business in Kozhikode, Kerala, India. We plan and sell holiday packages and group events and run this website, openskytravels.in.

This policy explains how we handle personal data when you use the website, contact us by phone, email or WhatsApp, register for an event, or book a trip with us. For the data covered here, OpenSky decides why and how it is used. We follow the Information Technology Act, 2000 and the rules under it, and the Digital Personal Data Protection Act, 2023 as it comes into force.

2. What we collect

Information you give us

When	What we receive
Contact form	Your name, email address, phone number, the subject and your message.
Event registration forms	Your name, place, mobile number and the number of people. The form is an expression of interest, not a confirmed booking.
Package enquiry forms	The details you type (such as name, where you are travelling from, preferred dates and number of travellers) are used to prepare a WhatsApp message in your own browser. We receive them only if you press send in WhatsApp.
Calls, WhatsApp and email	Whatever you choose to tell us, including your contact details and travel preferences.
Making a booking	Traveller names, ages, contact details and pick-up city. For each traveller we also collect their ID card details (needed for tickets, hotels, permits and entry passes) and their blood group (so we can act quickly in an emergency). We collect nothing else about health unless the specific trip, package or event terms say so, and then only for that purpose. Blood group is health information, so we collect it only with your clear consent, which we record on the traveller form. Children's details are collected from a parent or guardian.
Payments	We accept payment by the methods we offer (for example bank transfer, UPI or cash); the bank or payment app handles your payment details. This website does not take card or payment details. We keep a record of what was paid, when and by whom.

Information collected automatically through the website

When you visit the site, the following is collected by our own server or by the tools we use:

Source	What is collected	Why
Our web server	Your IP address, the page you asked for, date and time, browser and device type, the page you came from, and whether the request worked.	To deliver the pages, keep the site secure and fix problems.
Google Analytics	A random visitor ID, pages viewed and time spent, device, browser and operating system, approximate location (city or region, derived from the IP address), how you reached the site, and basic actions such as clicks on buttons and links.	To understand how the site is used and which content helps visitors.
Google reCAPTCHA (contact form)	Your IP address, browser details and how the page was used (for example mouse and touch activity), sent to Google.	To block spam and bots.
Cloudflare Turnstile (event registration form)	Browser signals and your IP address, sent to Cloudflare.	To block bots without asking you to solve puzzles.
Google Maps and Google Fonts	Your IP address and browser details are sent to Google when the contact page map or the page fonts load.	To show the map and display text correctly.
Brochure downloads	The request (time, IP address, link used) is recorded in server logs. We do not ask for your details to download a brochure.	Security and preventing abuse of download links.
Your browser (cookies and local storage)	The items listed in section 5.	Security and showing banners only when useful.
Forms	Besides what you type, the time you submitted the form and a security token that proves the form came from our site.	Handling your request and preventing forged or duplicate submissions.

We do not use the website to collect payment card details, passwords from visitors, precise location or contacts from your device.

3. Why we use it

• To respond to you: answer enquiries, send itineraries and quotes, and follow up on a registration. We rely on your request and consent.
• To provide your trip or event: confirm bookings, arrange hotels, transport and permits with our suppliers, brief you before travel and support you during it. We rely on the contract between us.
• To keep things safe and fair: prevent spam and abuse on our forms, protect the website and investigate problems.
• To improve the website: measure traffic and see which content works, using aggregated statistics.
• To meet legal duties: tax, accounting and other records we are required by law to keep, and to answer lawful requests from authorities.
• To keep you informed: operational messages about your enquiry, booking or trip, and updates about events you registered for. Promotional messages about new trips only if you have agreed to receive them. You can say stop at any time.

We do not use your data for automated decisions that significantly affect you, and we do not sell it.

4. Who we share it with

We share personal data only as needed, and only with:

• Travel suppliers that deliver your trip, such as hotels and resorts, transport operators, drivers, guides and activity providers. They receive the details they need (for example names and group size).
• Service providers that help us run the website and the business:
  • Our hosting provider.
  • Google, for website statistics (Google Analytics), spam protection on the contact form (reCAPTCHA), the map on the contact page and web fonts.
  • Cloudflare, for the Turnstile check that tells people from bots on our event registration form.
  • Telegram, where we may send an internal notification about a new event registration (your name, place, phone number and number of people) to a private chat used only by our team.
  • WhatsApp (Meta), when you choose to contact us there. WhatsApp's own privacy policy applies to messages you send.
• Authorities and advisers where the law requires it, to protect our rights or safety, or to our professional advisers under confidentiality.
• A successor business if OpenSky is ever sold or merged, on the same terms as this policy.

Our suppliers and providers may use your data only for the purpose we gave it to them and under confidentiality or data-processing terms.

5. Cookies and similar technologies

Cookies are small files stored by your browser. We also use your browser's local storage for small preferences. Our site uses:

Name	Set by	Purpose	Lasts
csrftoken	OpenSky	Security: protects forms from forged submissions. Strictly necessary.	Up to 1 year
_ga, _ga_*	Google Analytics	Counts visits and shows how pages are used, in aggregated form.	Up to 2 years
Turnstile / reCAPTCHA cookies	Cloudflare, Google	Spam and bot protection on forms.	Session to a few months
osk_promo_*, osk_mdl_*, osk_reg_*	OpenSky (local storage)	Remember when you last saw an event banner or sign-up pop-up, and whether you registered on this device, so we do not keep showing it.	Until you clear your browser data

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google's browser add-on. The site still works without them, although the forms may need cookies to submit.

6. Where data is processed

Some of our providers (for example Google and Cloudflare) process data on servers outside India. We choose reputable providers and share only what each needs. By using the site or sending us your details you understand that your data may be processed outside India.

7. How long we keep it

Data	Kept for
Contact-form messages and enquiries	Up to 24 months after our last contact with you, then deleted or anonymised.
Event registrations that did not become bookings	Until 6 months after the event, then deleted or anonymised.
Booking, payment and invoice records	As long as the tax, accounting and LLP laws require (up to eight years).
Traveller ID card details and blood group collected for a trip	For one month after the trip ends, unless the law requires us to keep them longer.
Security and website logs	Only as long as needed for security and troubleshooting.

If you ask us to delete your data sooner we will do so, except for records we are legally required to keep.

8. How we protect it

The website is served over HTTPS. Access to the admin system is limited to authorised staff with their own logins, event and enquiry data is stored in a restricted database, and brochures are shared through short-lived links. No online system is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data we will tell you and the authorities as the law requires.

9. Your rights and choices

You can, at any time:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to delete it (subject to records we must legally keep);
• withdraw consent you gave us, for example to receive messages;
• nominate another person to exercise these rights on your behalf if you die or become unable to; and
• complain to us (section 13) and, if you are not satisfied, to the Data Protection Board of India once it is operating, or the authority that applies to you.

To use any of these rights, email info@openskytravels.in or message us on WhatsApp from the number we hold for you. We may ask you to confirm your identity first. We will reply within one month, or within the time the law requires if that is shorter. Withdrawing consent does not affect what we did before you withdrew it, and may mean we cannot continue a booking that needs that data.

10. Children

The website is meant for adults. We do not knowingly collect personal data directly from anyone under 18. A parent or legal guardian may give us a child's details when booking a family trip, and we use them only to arrange that trip. If you believe a child has sent us data without a parent's consent, tell us and we will delete it.

11. Other websites

Our pages link to other sites (for example Instagram, YouTube, WhatsApp and Google Maps). Their privacy practices are their own, so please read their policies.

12. Changes to this policy

We may update this policy as the site, our services or the law change. The date at the top shows the latest version. If a change is significant we will make it prominent on the site. Using the site after an update means you accept the updated policy.

13. Grievance officer

If you have a complaint about how your personal data has been handled, contact our Grievance Officer:

Nikhil KK, Grievance Officer
OpenSky Travels and Events LLP, 2nd Floor, Mattam Arcade, Pottammal, Kozhikode, Kerala 673016
Email: info@openskytravels.in (subject: "Privacy grievance")
Phone: +91 94974 34358

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.

For the terms that apply to using the website and booking with us, see our Terms of Service.

Contact us

OpenSky Travels and Events LLP
2nd Floor, Mattam Arcade, Pottammal, Kozhikode, Kerala 673016, India

Email: info@openskytravels.in
Phone / WhatsApp: +91 94974 34358, +91 94974 34396

Questions about this page, or a request about your data or a booking? Write to us with the subject "Privacy request" and we will reply within 7 working days.