Privacy Policy
This policy explains what personal information Ashrams collects, why we collect it, and what we do with it. It is written to be read. If anything here is unclear, please write to us directly.
Who we are
Ashrams is a travel curation company registered in India. We design and coordinate transformative journeys across India — combining contemplative experiences, culturally immersive activities, thoughtfully selected accommodation, and private ground transportation into a single, end-to-end itinerary for each guest.
For the purposes of this policy and applicable data protection law, Ashrams is the organisation that decides how your personal information is handled in connection with our services.
Ashrams is the data controller — the entity responsible for deciding how and why your personal information is used.
This policy applies to personal information collected through our website, through our inquiry and journey planning process, and throughout the operation of a confirmed journey.
What we do — and what we are not
We are a curator and coordinator of journeys. We are not the direct operator of every property, retreat centre, temple, guide, or transport provider that appears in your itinerary. Those services are delivered by independent third-party suppliers we carefully select and brief on your behalf.
This distinction matters for how personal data is handled: Ashrams collects and coordinates what is needed to design and run your journey; suppliers receive only what they need to deliver their specific part of it.
Where a supplier processes your personal information for their own purposes as an independent controller, their own privacy notice applies to that processing.
Note: Ashrams is not responsible for the independent data practices of third-party suppliers beyond the information we share with them to deliver your journey. We ask suppliers to handle guest data carefully and only for the purpose it was provided.
What we collect
We collect only the information we genuinely need, at the point in the process when we actually need it.
When you inquire
Your name and email address, so we can respond to you.
Your approximate travel dates, party size, and any context you choose to share about what you are looking for.
Your country of residence, so we can communicate with you appropriately under applicable law.
During journey planning
Dietary preferences and requirements, to pass on to properties and experience hosts.
Yoga or practice experience level, relevant where a retreat or practice-based experience forms part of your journey.
Special category data — health information
Where you choose to share health-related information — a medical condition, physical limitation, reduced mobility, or a dietary requirement tied to a medical condition — this constitutes special category data under GDPR and equivalent data protection law. It receives a higher level of protection.
We process this information only with your explicit consent, obtained at the point of disclosure. We use it solely to ensure your journey is safe and appropriate for your needs, and to pass relevant details to suppliers on a need-to-know basis. You may withdraw this consent at any time by writing to us.
To confirm a booking
Full legal name and nationality as they appear in your passport, required for accommodation registration under Indian law.
Passport number and expiry date, passed on to accommodation providers as required by Indian government regulations for foreign national guests.
An emergency contact name and telephone number.
Why we use it — and on what legal basis
For guests based in the European Economic Area, the United Kingdom, or Switzerland, data protection law requires us to identify a legal basis for each type of processing.
Performance of a contract
The majority of data we process is necessary to design and deliver the journey you have engaged us to coordinate. Without this information — your dietary requirements, passport details, emergency contact — we could not operate your journey safely or in compliance with applicable law. This is the primary legal basis on which we process personal data.
Explicit consent — special category data
Health-related information, as described in Section 03, is processed on the basis of your explicit consent. This consent is collected separately and specifically at the point of disclosure.
Legitimate interests
We process limited data — anonymised website analytics and internal journey records — on the basis of our legitimate interests in improving our services, understanding how the site is used, and maintaining accurate operational records. These interests are balanced against your rights and expectations.
Who we share it with
We do not sell personal data. We do not share it with advertising networks. We share it only with the categories below, and only to the extent necessary for the stated purpose:
Independent suppliers
Independent third-party businesses who provide component services of your journey receive only the information they need for their specific role. A retreat centre receives your dietary requirements and practice background. A property receives your name and passport details for legal registration. A driver receives your name and itinerary. No supplier receives your full file.
Payment processor
Payment transactions are processed by an independent, PCI-DSS certified gateway. Payment data does not pass through Ashrams' systems.
Digital service providers
A small number of trusted digital service providers — email work, website hosting, analytics — process data on our behalf under contractual data processing agreements. They do not use your data for their own purposes.
How long we keep it
Inquiries (unconfirmed)
Inquiries that do not lead to a booking are deleted after 12 months of last communication.
Confirmed journeys
Records of confirmed journeys are retained for 7 years following the journey's completion, as required for Indian financial and tax compliance.
Health data
Explicitly provided health information is deleted within 6 months of the journey's completion, unless a longer period is required by law or for insurance purposes.
Marketing
If you opt-in to our newsletter, we keep your email until you unsubscribe.
Your rights
If you are based in the EEA, UK, or Switzerland, you have the following rights under applicable data protection law. We will respond to any request within 30 days.
Access
Obtain a copy of the personal data we hold about you.
Rectification
Correct any inaccurate or incomplete data we hold.
Erasure
Request deletion of your data, subject to any legal retention requirements.
Portability
Receive your data provided to us in a structured, machine-readable format.
Contact
For any questions about this policy, a request to exercise your rights, or a concern about how we have handled your personal data, please write to us. We aim to respond to all data-related correspondence within 5 working days.