Privacy Policy

At BleuByte, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, share, and protect your personal information in compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 of India.

1. Information We Collect

We collect personal data to deliver a secure and smooth booking experience. This includes:

• Personal Identifiers: Name, age, gender, email address, and phone number.
• Account Details: Username, password hash, and preferences.
• Booking & Travel Data: Date and time of travel, boarding/dropping points, passenger details, seat choices, and booking history.
• Technical Data: IP address, browser type, device information, operating system, and cookie data.
• Payment Data: Payment transaction references, status (e.g. success, pending, failed). We do NOT store complete credit/debit card numbers or bank credentials on our systems; all transactions are securely processed by our third-party payment gateways.

2. Purpose of Collection

We collect and process your personal data for the following specific purposes:

• To verify your identity, process ticket bookings, and generate travel invoices.
• To send booking confirmations, SMS alerts, travel notifications, and boarding updates.
• To provide customer support and handle cancellation or refund requests.
• To prevent fraudulent bookings, detect security threats, and protect our systems.
• To analyze usage trends and improve website usability and coach layouts.

3. Data Storage and Retention

Your personal data is securely stored on encrypted servers in India. We retain your information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable tax, audit, and legal regulations in India. When personal data is no longer required, it is safely deleted or anonymized.

4. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We share information only under the following conditions:

• Service Providers: With third-party entities that process payments, host servers, or send SMS/email notifications. These providers are bound by strict confidentiality clauses.
• Legal Obligation: If required to do so by court orders, government authorities, law enforcement agencies, or under statutory audits.
• Business Transfers: In connection with any merger, sale of company assets, or financing of our business operations, subject to transition privacy agreements.

5. Cookies and Analytics

We use cookies and similar tracking technologies to enhance user session persistence, save your preferred settings, and analyze platform traffic (using tools like Google Analytics). You can configure your browser to reject all cookies, but doing so might disable certain essential functionalities of the ticket booking portal.

6. Security Measures

We implement robust technical and organizational security controls to safeguard your data. This includes secure database access controls, encrypted SQL transactions, firewalls, and SSL/TLS transmission protection. However, please note that no system can be 100% secure, and we cannot guarantee absolute security of transmission over the internet.

7. Your Rights

As a data principal under Indian data protection laws, you possess the following rights:

• The right to access and review the personal data we hold about you.
• The right to correct or update inaccurate or incomplete information.
• The right to withdraw your consent to data processing (which may limit our ability to provide services).
• The right to request the erasure of your personal data when it is no longer required for booking transactions or legal obligations.

8. Compliance with Laws

This Privacy Policy is designed to comply with all applicable Indian data protection frameworks, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the provisions of the Digital Personal Data Protection Act, 2023.