Privacy Policy

GoaThrills ("we", "our", "us") is a Goa-based Destination Management Company (DMC) providing Goa tour packages, Goa holiday packages, activities, cruises, stays, transfers, corporate retreats and B2B ground handling services. Our registered office is located at Office No. 6, 21/6, Holiday Beach Street, Khobra Vaddo, Calangute, Goa 403516.

This Privacy Policy applies to all users of our website, WhatsApp communication, phone, email and in-person interactions, including travellers booking Goa family packages, Goa couple packages, B2B agents for Goa, corporate clients and partners.

By using our services or booking any Goa tour package, you agree to the collection and use of your information as described in this Privacy Policy.

This policy covers:

• Personal data collected when you browse our website or book Goa tour packages.
• Information shared when booking Goa group packages, Goa family packages, Goa couple packages, Goa corporate packages and Goa honeymoon packages.
• Data collected via our website forms, WhatsApp, phone calls, emails and in-person interactions.
• Data collected via our B2B Portal for travel agents, tour operators and corporate partners.
• Data collected through cookies, analytics and third-party tools when you visit our website.

This policy does not apply to third-party websites or services linked from our site. Please review their privacy policies separately.

We collect only the information necessary to confirm, deliver and support your bookings. This includes:

We collect data through multiple channels when you interact with GoaThrills:

1. Website forms | when you enquire about Goa tour packages, book activities, submit the Smart Trip Planner AI or apply for B2B partnership.
2. WhatsApp | when you chat with our team to plan Goa family packages, Goa couple packages or Goa group packages.
3. Phone calls | when you call us to discuss itineraries, prices or custom trips.
4. Email | when you send us enquiries about North Goa tour packages, South Goa tour packages or any other service.
5. In-person | when you visit our Calangute office for booking or pickup.
6. Cookies & Analytics | when you browse our website (see Section 6).
7. Payment gateways | when you pay for your booking through UPI, bank transfer, card or other accepted methods.
8. Third-party referral platforms | when you reach us through travel review sites, OTA partners or B2B referrals.

We use your personal data only for legitimate business purposes related to delivering your Goa tour packages and services:

• Confirming and processing bookings for Goa tour packages, Goa family packages, Goa couple packages, Goa group packages, Goa corporate packages and Goa honeymoon packages.
• Coordinating with hotels, drivers, cruise operators, activity vendors and other third-party service providers.
• Sending booking confirmations, vouchers, itineraries and trip updates via WhatsApp and email.
• Providing customer support before, during and after your trip.
• Processing payments and issuing invoices/receipts.
• Improving our website, services and user experience based on aggregated analytics.
• Sending offers, travel inspiration and newsletters (only with your consent).
• Complying with legal, tax and regulatory obligations.
• Preventing fraud, abuse and unauthorized use of our services.
• Managing B2B relationships with travel agents, tour operators and corporate clients.

We use cookies and similar tracking technologies to improve your experience when you browse our website and book Goa tour packages.

You can control or disable cookies through your browser settings at any time. Disabling essential cookies may affect website functionality. For complete details, please read our Cookie Policy.

We share your personal data only with parties required to deliver your booked services. These include:

• Hotels & resorts | to confirm your stay, room type and guest details.
• Transport providers | to arrange airport pickups, private cabs, tempo travellers or luxury buses.
• Activity operators | for scuba diving in Goa, watersports in Goa, sunset river cruise Goa, Dudhsagar Falls tour, Grand Island boat trip, bungee jumping, flyboarding, kayaking and adventure tourism Goa.
• Cruise operators | for dinner cruises, sunset cruises and party cruises.
• Payment gateways | to process UPI, card, bank transfer, crypto or wallet payments securely.
• Communication platforms | WhatsApp, email providers and SMS services to send confirmations and updates.
• Analytics tools | to understand website traffic and improve user experience.
• Legal authorities | when required by law, court order or government request.

All payment transactions made through GoaThrills for Goa tour packages, Goa group packages, Goa corporate packages or any other service are processed through PCI-DSS compliant payment gateways. This means:

• We do not store your full card number, CVV or complete banking credentials on our servers.
• Payment details are handled directly by our verified payment partners.
• We retain only transaction reference numbers, amounts and dates for accounting and legal purposes.
• For B2B agents for Goa, invoicing and payment terms are governed by separate partner agreements.

We accept payments via UPI, bank transfer (NEFT, RTGS, IMPS), debit and credit cards, crypto (on request for select international bookings), cash at our office with receipt, and select digital wallets.

We take the security of your personal data seriously and implement industry-standard measures to protect it from unauthorized access, alteration, disclosure or destruction.

• HTTPS Encryption | All data transmitted between your browser and our website is encrypted using TLS/SSL.
• Secure Servers | Hosted on reputable hosting providers with regular security updates.
• Access Controls | Internal access to personal data is restricted on a strict need-to-know basis.
• Verified Vendors | Third-party service providers are carefully selected and bound by confidentiality.
• Secure Development | Our website follows secure coding practices and regular security audits.
• Protection Layer | Anti-copy, anti-scrape and anti-DevTools protections are in place.

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any confirmed data breach as required by law.

We retain your personal data only as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations, resolve disputes and enforce our agreements.

• Booking data | Retained for the duration of the trip and up to 7 years for tax and accounting compliance.
• Marketing data | Retained until you withdraw consent or unsubscribe.
• Analytics data | Retained in aggregated/anonymized form indefinitely.
• B2B partner data | Retained for the duration of the partnership plus statutory retention periods.

After retention periods expire, data is securely deleted or anonymized.

Depending on your location, you may have the following rights under the India Digital Personal Data Protection Act (DPDP Act 2023), EU GDPR, UK GDPR or other applicable laws:

To exercise any of these rights, please email us at info@goathrills.com or WhatsApp us at +91 81779 09198. We aim to respond within 30 days.

We may send you travel inspiration, offers and updates about Goa tour packages, new activities and exclusive deals. These are sent only with your consent.

• Opt-Out via WhatsApp | Reply STOP to any marketing WhatsApp message.
• Opt-Out via Email | Click the unsubscribe link at the bottom of marketing emails.
• Opt-Out via Contact | Email us at info@goathrills.com to be removed from marketing lists.

Our website may contain links to third-party sites such as Google Maps, Instagram, Facebook, YouTube, LinkedIn and payment gateways. We are not responsible for the privacy practices of these sites.

We encourage you to review the privacy policies of any third-party service you use through or in connection with our services.

Our services are not intended for children under 18. We do not knowingly collect personal data from children.

When booking Goa family packages with children, we collect only the necessary information (name, age) on behalf of the parent or guardian for hotel bookings, permits and activity eligibility. Parents can contact us at any time to review or delete a child's information.

GoaThrills operates from India. If you are accessing our website or booking Goa tour packages from outside India, your data may be transferred to, stored and processed in India.

For international travellers, we ensure that any data transfer complies with applicable data protection laws and that appropriate safeguards are in place to protect your personal information.

GoaThrills reserves the right to update, modify or replace this Privacy Policy at any time. The latest version will always be published on this page with the updated date.

We recommend reviewing this page periodically to stay informed about how we protect your data. Significant changes may be communicated via email or website notice.

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act 2023 (DPDP Act). For users in the European Union, GDPR provisions apply to the extent applicable.

Any disputes arising out of or relating to this Privacy Policy will be subject to the exclusive jurisdiction of the courts of Goa, India.

Below are answers to the most common questions about our Privacy Policy, data handling and user rights when booking Goa tour packages and related services.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer: