Data Protection & Confidentiality
Privacy Policy
Last Updated: September 2026. This Privacy Policy outlines how Get Set Goa("GetSetGoa") collects, processes, and safeguards personal information in accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection (DPDP) Act, 2023.
1. Information We Collect
2. Purpose & Legitimate Sharing of Information
We process and share your information strictly for legitimate operational purposes:
- Fulfillment Partners: Sharing guest manifests with villa hosts, boat captains, and certified dive instructors to ensure seamless check-in and activity execution.
- Payment Gateway & Banks: Providing encrypted order references for payment authorization, anti-fraud evaluation, and settlement.
- Zero Marketing Sales Guarantee: We hold a strict policy never to sell, lease, or monetize your personal information to third-party telemarketers or external advertising networks.
3. Cookie Usage & Consent Management
GetSetGoa uses cookies and local storage tokens to deliver our online services:
- Essential Session Cookies: Required to preserve itinerary configurations, cart states, and login tokens across pages.
- Performance & Analytics: Aggregated, anonymous traffic telemetry to optimize mobile responsiveness and page speed.
- Consent Control: You can manage or revoke cookie permissions via our on-screen cookie-consent banner or by adjusting browser privacy settings.
4. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023, you hold enforceable rights regarding your data:
- Right to Access: Request a summary of personal information held by GetSetGoa.
- Right to Correction & Updating: Rectify inaccurate, incomplete, or outdated travel profile records.
- Right to Erasure: Request deletion of non-essential profile data, subject to legal record-retention obligations.
To exercise any of these rights, email our Data Compliance Desk at care@getsetgoa.com.
5. Data Retention Obligations
Under Indian corporate, goods and services tax (GST), and Income Tax statutes, transaction, billing, and tax invoice records must be retained for a statutory duration of 5 to 7 years following the financial year of transaction. Marketing contact tokens and general inquiries are purged within 12 months unless ongoing active consent is granted.
Privacy Inquiries & Grievance Officer
For privacy concerns, data deletion requests, or regulatory queries, please contact our designated Grievance Officer at care@getsetgoa.com or postal address: Shiv Shakti Apartment, Sector A9 Narela, Delhi, 110040. We acknowledge all communications within 24 hours and resolve inquiries within 15 working days.