Contents
- Who We Are
- Information We Collect
- How We Use Your Information
- Legal Basis for Processing (GDPR)
- Cookies & Tracking
- Third-Party Services
- International Data Transfers
- Data Retention
- Your Rights — EU / EEA Residents
- Your Rights — California Residents (CCPA)
- Children's Privacy
- Security
- Changes to This Policy
- Contact Us
01
Who We Are
Wander with Passion Private Limited (trading as The Unbored Club) is a company incorporated in India under the Companies Act, 2013.
Registered address: F2, 44/930, Shreyas, 69th Street, 11th Sector, K.K. Nagar, Chennai – 600078, Tamil Nadu, India.
GST: 33AADCW8600J1ZB
Email: connect@theunboredclub.com
We operate the website theunboredclub.com and provide premium travel curation and retreat services. For the purposes of the EU General Data Protection Regulation (GDPR) and applicable data-protection laws, we are the data controller of any personal data you provide to us.
02
Information We Collect
Information you give us directly
- Contact and enquiry data: name, email address, phone/WhatsApp number, country of residence, travel preferences, and any free-text message you submit through our enquiry forms.
- Booking data: passport details, travel dates, group size, dietary or medical requirements, payment information (processed by third-party payment providers — we do not store card details).
- Retreat partner data: professional bio, retreat concept, audience details, and correspondence when you enquire about partnering with us.
- Communications: emails, WhatsApp messages, or any other correspondence you send us.
Information collected automatically
- Usage data: IP address, browser type and version, operating system, pages visited, time spent on pages, referral URL, and clickstream data.
- Device data: device type, screen resolution, and language settings.
- Cookies and similar technologies: see Section 5 below.
Information from third parties
- Analytics providers (such as Google Analytics) may share aggregated data about traffic and user behaviour with us.
- If you contact us through social media platforms, we may receive information you have made available on those platforms.
03
How We Use Your Information
We use personal information only for the purposes described below:
- Responding to enquiries and providing travel consultations and quotations.
- Planning and delivering travel services, including arranging hotels, transfers, guides, activities, and itineraries.
- Retreat coordination, including managing partner relationships and logistics for retreat programmes.
- Communications about your booking, travel documents, itinerary updates, and post-trip follow-up.
- Marketing (only with your consent): sending newsletters, destination guides, or promotional content. You can withdraw consent at any time.
- Improving our services: analysing usage patterns to improve the website and customer experience.
- Legal and compliance obligations: record-keeping, fraud prevention, and responding to lawful requests from authorities.
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
04
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Contract performance (Art. 6(1)(b)): Processing necessary to fulfil a booking or enquiry you have initiated with us.
- Legitimate interests (Art. 6(1)(f)): Improving our services, ensuring website security, preventing fraud, and responding to enquiries. We balance these interests against your rights and freedoms.
- Consent (Art. 6(1)(a)): For marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Legal obligation (Art. 6(1)(c)): Where we are required by law to process your data (e.g. financial records, compliance with court orders).
For special-category data (e.g. health or dietary information relevant to your trip), we rely on your explicit consent under Art. 9(2)(a) GDPR, or on the basis that processing is necessary for performing the contract under Art. 9(2)(h).
05
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to function correctly and to help us understand how visitors use the site.
Essential cookies
Required for the website to operate (e.g. session management, security). These cannot be disabled.
Analytics cookies
We use Google Analytics to collect anonymised information about how visitors interact with our site (pages visited, time spent, traffic sources). This data is aggregated and does not identify you personally. Google Analytics cookies are only set with your consent where required by law.
Marketing and tracking cookies
We may use pixels or tags from advertising platforms (such as Meta/Facebook or Google Ads) to measure the effectiveness of our campaigns. These are only set with your prior consent.
Managing cookies
You can control and delete cookies through your browser settings. Disabling certain cookies may affect website functionality. For detailed guidance, visit allaboutcookies.org.
06
Third-Party Services
We share personal data with third parties only where necessary and under appropriate safeguards:
- Travel service providers (hotels, transport companies, guides, activity operators) who need your details to fulfil your itinerary. These providers are bound by their own privacy policies and applicable local laws.
- Payment processors (such as Razorpay or Stripe) who handle payments securely. We do not store payment card details.
- Technology providers — website hosting, email delivery, CRM, and analytics platforms (e.g. Google, Netlify). These are bound by data-processing agreements.
- WhatsApp / Meta Platforms: if you contact us via WhatsApp, your message is processed under Meta's Privacy Policy.
- Legal and regulatory authorities when required by applicable law.
We require all third-party processors to implement appropriate technical and organisational measures to protect your data.
07
International Data Transfers
Wander with Passion Private Limited is based in India. If you are located in the EEA, UK, or another jurisdiction with data-transfer restrictions, your personal data will be transferred to and processed in India and potentially other countries where our service providers operate.
Where we transfer data outside the EEA/UK, we ensure adequate protection through one or more of the following:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- The UK International Data Transfer Agreement (IDTA); or
- Other legally recognised transfer mechanisms.
You may request a copy of the relevant safeguards by contacting us at connect@theunboredclub.com.
08
Data Retention
We retain personal data for as long as necessary to provide our services and comply with legal obligations:
- Enquiry data (no booking made): up to 24 months from the date of enquiry.
- Booking and transactional data: 7 years from the date of travel, as required for tax and legal compliance under Indian law.
- Marketing opt-ins: until you withdraw consent.
- Website analytics data: up to 26 months (Google Analytics default retention).
After the relevant retention period, data is securely deleted or anonymised.
09
Your Rights — EU / EEA, UK & Swiss Residents
Under the GDPR and equivalent legislation, you have the following rights:
Right of access (Art. 15): Request a copy of the personal data we hold about you.
Right to rectification (Art. 16): Ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
Right to restriction (Art. 18): Ask us to restrict processing of your data in certain circumstances.
Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing at any time.
Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
Right to lodge a complaint: You have the right to complain to your local supervisory authority. In the EU, find your authority at edpb.europa.eu. In the UK, contact the ICO.
To exercise any of these rights, contact us at connect@theunboredclub.com. We will respond within 30 days. We may need to verify your identity before processing your request.
10
Your Rights — California Residents (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA grants you the following rights:
Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom we share it.
Right to delete: Request deletion of personal information we have collected, subject to certain exceptions.
Right to correct: Request correction of inaccurate personal information.
Right to opt-out of sale or sharing: We do not sell or share personal information for cross-context behavioural advertising.
Right to limit use of sensitive personal information: We do not use sensitive personal information beyond what is necessary to provide our services.
Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
Categories of personal information collected in the past 12 months: identifiers (name, email, phone); commercial information (services enquired about or purchased); internet or network activity (website usage data); geolocation data (country of residence).
To submit a verifiable consumer request, email connect@theunboredclub.com with the subject line "CCPA Request." We will respond within 45 days.
11
Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected information from a child, please contact us immediately at connect@theunboredclub.com and we will delete it promptly.
For bookings involving minors, a parent or guardian must provide consent and submit the relevant data on behalf of the child.
12
Security
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:
- HTTPS encryption on all website communications;
- Access controls limiting data access to authorised personnel only;
- Secure third-party processors operating under data-processing agreements;
- Regular review of our data-handling practices.
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.
13
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Effective date" at the top of this page. For material changes, we will notify you by email (if we hold your address) or by displaying a prominent notice on our website.
Your continued use of our services after an update constitutes acceptance of the revised policy. We encourage you to review this page periodically.
14
Contact Us
For any questions, requests, or complaints regarding this Privacy Policy or our data-handling practices, please reach out:
Wander with Passion Private Limited
F2, 44/930, Shreyas, 69th Street, 11th Sector, K.K. Nagar
Chennai – 600078, Tamil Nadu, India
Email: connect@theunboredclub.com
We aim to respond to all privacy-related requests within 30 days. For complex requests, we may extend this period by a further 60 days, but will inform you of the extension and the reason for it.