Privacy Policy

Last updated 18 October 2026

This policy explains what personal information Lemon Vacations collects when you enquire about or travel on one of our trips, why we need it, who we pass it to, and what you can ask us to do with it.

1. Who we are

This site is operated by Lemon Vacations. “We”, “us” and “our” mean Lemon Vacations.

2. What we collect

We only collect what a trip actually requires. Depending on how far you get with us, that is:

• Enquiry details — your name, email address, phone number, the destination and dates you are interested in, group size, and anything else you choose to tell us in a form, on WhatsApp, by email or on a call.
• Traveller details for a confirmed booking — full name as it appears on your passport, date of birth, nationality, gender, passport number and expiry, a passport scan or photograph, and your residential address. Airlines, hotels, permit authorities and visa offices will not accept a booking without these.
• Travel-related information — dietary requirements, medical conditions or mobility needs you disclose so we can plan safely, room-sharing preferences, emergency contact details, frequent-flyer numbers and insurance details.
• Payment information — the amount, date, mode and reference of payments you make. Card and net-banking credentials are entered on our payment gateway's own page and are never seen or stored by us.
• Website and communication data — pages viewed, approximate location derived from your IP address, device and browser type, and whether you opened or clicked an email we sent. See section 8.

Health information and government identity documents are sensitive personal data. We ask for them only when a trip, a visa or an insurer requires them, and we ask for them from you directly.

3. Why we use it

• To answer your enquiry and prepare a quotation or itinerary.
• To make and hold the bookings your trip is made of — flights, hotels, transport, permits, activities and insurance.
• To apply for visas and travel authorisations on your behalf where we have agreed to do so.
• To collect payments, raise invoices and receipts, and keep the accounting and tax records Indian law requires us to keep.
• To reach you before and during travel with documents, joining instructions and changes, and to reach your emergency contact if something goes wrong.
• To send you trip ideas and offers, where you have separately asked for them. Every such message carries a way to stop them.
• To handle complaints, defend claims and comply with a lawful request from a public authority.

4. Who we share it with

Running a trip means passing your details to the people delivering it. We share only what each of them needs:

• Travel suppliers — airlines, hotels, homestays, transport operators, cruise and rail operators, guides, activity providers and local ground handlers or destination management companies.
• Visa and immigration channels — consulates, embassies and their outsourced application centres, and immigration and customs authorities.
• Insurers and assistance providers, where a policy is arranged through us or a claim is made.
• Payment gateways and banks, to take payment and to make refunds.
• Our professional advisers — accountants, auditors and lawyers — under a duty of confidence.
• Our software providers, who host our booking system, website, email and messaging, and who process data only on our instructions.
• Public authorities, where we are required by law to disclose.

We do not sell your personal information, and optional advertising tools are used only with your permission as described below.

5. Transfers outside India

If your trip goes abroad, your details necessarily go with it. Airlines, hotels, ground handlers, visa centres and insurers in the destination country will receive what they need to carry, host or admit you, and the laws protecting personal data there may be weaker than in India. By asking us to make an overseas booking on your behalf, you are asking us to make that transfer.

6. How long we keep it

We retain personal information for the enquiry or booking purpose and for applicable legal, accounting or dispute requirements. Contact us for the retention period that applies to your records or to request deletion. Identity and travel documents should only be retained while needed for the service or a specific legal requirement.

7. How we protect it

Access to traveller records is limited to the members of our team who need it to do their job. Our website and booking system are served over encrypted connections, documents you upload are stored in access-controlled storage, and payment credentials never touch our systems. No system is perfectly secure, and we cannot guarantee the security of information you send us over an ordinary email or messaging app.

8. Cookies and analytics

Essential storage supports the website. If optional analytics or advertising is configured, it loads on our custom domain only after your permission through the privacy popup. You can turn off optional tracking or choose analytics and advertising separately using Change privacy choices on this page. Google Analytics measures visits and selected interactions; Meta Pixel measures advertising and selected interactions. These providers receive browsing and device information and may process it outside India. Tourify's preset events do not include the contact details or message you enter into enquiry forms. Our website stores your choice and its notice version on your device for up to 180 days; changing providers may ask you again. Clearing browser storage removes that preference. External services reached through WhatsApp or other links have their own privacy practices.

9. Your choices and your rights

You can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct anything that is wrong or out of date;
• delete information we no longer need — subject to the records we are legally obliged to keep;
• stop sending you marketing, at any time, without giving a reason; and
• withdraw a consent you have given us. Withdrawing consent for information a booking depends on may mean we can no longer hold that booking, and the cancellation terms will then apply.

Write to us through the contact page on this website and we aim to respond within 30 days and will explain any lawful exception or additional verification needed.

10. Children

We do not knowingly deal directly with anyone under 18. Where a child travels with us, their details must be handled through a parent or guardian with the required consent verification. The website enquiry form is intended for adults; do not submit a child’s identity documents through it.

11. Changes to this policy

We may update this policy as our services, our suppliers or the law change. The current version is always the one on this page, and the date at the top tells you when it last changed.

12. Grievances

If you are unhappy with how we have handled your personal information, contact us through the contact page on this website with “Privacy” in the subject line. We will acknowledge your complaint and tell you what we intend to do about it.