Privacy Policy

Day Trio (“we”, “us”) respects your privacy. This policy covers the information we handle when you use the platform to browse and book days out, and when you join our affiliate programme to send travellers to Day Trio.

Information you provide — such as your name, email, phone number and the traveller details needed to complete a booking, plus any reviews (and photos with them) or messages you submit. If you start a checkout and don’t finish it, we keep the name, email and phone number you typed, so we can help you complete your booking. We may send you one email to help you finish it, with what you chose and a link back to the day. We send only one for that trip and date, and none if you have booked it since.

Traveller details — when a day out needs them, for example for a permit, we ask for each traveller’s full name, date of birth, nationality, ID type and ID number. If you’re not travelling yourself, we also ask for the lead traveller’s phone number. You can give these at checkout or after you book. If you give details or documents for other travellers, please make sure they know, and point them to this policy.

Permit documents — if the permit office needs copies of documents, we ask you to add them after you book, never at checkout. You can add them one at a time, and each one saves as soon as it’s added. What we ask for depends on the trip and on each traveller’s nationality. It may include a passport or other photo ID, a photo of their face, an Indian visa or OCI card, a Sikkim Inner Line Permit, a child’s birth certificate, and another document your host names. We don’t accept Aadhaar or PAN cards, so please don’t add them.

When you first add a document, we record when, and which version of our notice about documents you were shown. For each child, we record your confirmation that you may give us their documents (see section 9). We also keep a history of each document: when it was added, replaced, deleted, opened or downloaded, who did it, and a scrambled (hashed) form of the IP address used. This history never holds the document itself.

Information collected automatically — such as your IP address, device and browser data, pages viewed and general location, gathered through cookies and similar technologies to keep the platform working, to improve it and, when advertising cookies are on, to measure our advertising.

How you found us — when analytics cookies are on, we record how you arrived at Day Trio: the website or app that sent you (for example a search engine, one of our ads, an AI assistant such as ChatGPT, a social network or another website), any tags in the link (such as a campaign, ad or keyword name), the page you landed on and when. When you go to checkout, we keep this with your booking — including a checkout you start but don’t pay for — to understand which of our marketing works. We do not share it with anyone.

When analytics cookies are on, the message our WhatsApp button prepares also ends with a short reference, such as “Ref 7K2Q”. We keep that reference with how you arrived and the page you were on, never your name or number, so we can tell where a chat started. We delete it within two days if you don’t tap the button, and otherwise after 90 days.

We also measure how fast our pages load for every visitor, to find and fix slow spots. This records timings, the page, and general details such as your country and the type of device and connection you use — never your name, phone number, email, booking details, search words or IP address — and is deleted after 30 days.

Recordings of how our pages are used — when analytics cookies are on, Microsoft Clarity records how you use our public browsing pages and the checkout page: where you tap, how far you scroll, which pages you visit and how long you stay, with your device and browser details, your IP address and general location. All text on the page is hidden in these recordings, so they never show your name or anything you type, on checkout too, and Clarity never runs on booking confirmation, voucher, account, sign-in or contact pages. Microsoft keeps these recordings for us for a limited time under its own retention rules.

Affiliate links — if you open an affiliate’s link or scan their QR code, our own cookie remembers which affiliate sent you for 30 days, so that affiliate is credited if you book. We also record the visit: a scrambled (hashed) form of your IP address and browser, not the raw values, with the page you came from, the page you landed on and when. If you book, we keep with your booking which affiliate sent you.

If you are an affiliate — when you join our affiliate programme, we collect your name or brand, your email, what describes you (for example a blog or a travel agent), your website or main channel and the country you live in. To pay you, we collect the name on your bank account and its account number or IBAN; if you live in India, the IFSC, your PAN and, if you are GST-registered, your GSTIN; if you live elsewhere, the bank’s name, its SWIFT/BIC code and country. We also keep the record of you agreeing to our Referral Terms (the version, the date and time, your account and email, your IP address and your device), the clicks and bookings credited to you, your shares and payouts, and the tax records that go with them.

We use your information to provide and process bookings, to communicate with you about your trips, to give your host the traveller details they need and, on a day that needs a permit, the documents they need to apply for it, to send one email to help you finish a booking you started, to show you other days you can book in the same place, inside your booking emails, to operate and improve the platform, to keep it secure and to prevent fraud, to understand which of our marketing brings bookings, to measure and improve our advertising (for example on Google, Facebook and Instagram), and to meet legal obligations. You can switch the advertising use off at any time (see section 7).

If you write a review, we publish it on the trip’s page, and on the page for that city or area, under the first name and last initial on your booking (for example “Vishwa S.”; a name that starts with initials shows them with the name after them, such as “A.K. Sharma”; or “Traveller” when the booking has no name we can use), with your star rating, the option you booked, the month you travelled and any photos you add — never your email, phone number or booking number. Before we keep a photo, we remove the location and camera details stored in it. Photos appear only once your review is published; Day Trio may also share them on its social media (such as Instagram) and in its ads, credited with the same name, and asks you first if people can be recognised in one. Photos you add but don’t send with a review are deleted within three days. What you write under “Anything we could do better?” is read only by the Day Trio team: it is never published or shared with your host. To change the name on your review, to remove a photo, or to have the review taken off the site, write to support@daytrio.com.

For our affiliate programme, we use this information to credit each booking to the affiliate who sent it, to count affiliates’ clicks and spot fraud, to pay affiliates, and to meet tax law.

We share the details needed to fulfil your booking with the operator who runs your day out. We also use trusted service providers (for example, payment, email, hosting, website analytics by Google and recordings of how our pages are used by Microsoft Clarity — see our Cookie Policy) who process data on our behalf.

Your host and permit documents — your host, the local operator that runs your day out, gets your travellers’ details, including full ID numbers, once you’ve booked. On a day that needs a permit, your host also gets the documents you add, so they can apply for it. We tell them to give the documents only to the permit office, never to hotels or homestays. At Day Trio, only staff with permission can open the documents on your booking, and we keep a record each time they do. We never send documents by email. Documents you send to your host yourself, for example on WhatsApp, don’t pass through Day Trio, so our deletion dates and records don’t cover them.

If you send us your travellers’ details or documents on WhatsApp, our staff add them to your booking for you, and we record who added them and when. We then delete them from WhatsApp and our devices. You can still replace or delete them on your booking page.

Meta (Facebook and Instagram) — we use Meta Platforms (Meta Platforms Ireland Ltd for people in the European Economic Area, the UK and Switzerland; Meta Platforms, Inc. everywhere else) to measure whether Day Trio’s ads lead to bookings, and to show our ads — including the days you looked at on Day Trio — to people who have visited before. When advertising cookies are on and you open the payment window or complete a booking, we send Meta: your email address and phone number in hashed form (scrambled into a code, so the details themselves are not sent, but Meta can match the code to a Facebook or Instagram account with the same email or phone); your IP address and browser details; Meta’s cookie ids; and the booking’s value and currency, which day out you booked, the number of guests and an internal reference (never your booking or voucher code). This lets Meta tell us which ads led people to start or complete a booking. Meta also uses this information under its own terms, for example to improve how it delivers ads. Meta’s pixel on our site also records the pages and days you view (with their prices), your searches, when you start a checkout (with what that day costs), when you open the payment window and when you tap our WhatsApp button, as our Cookie Policy explains.

WhatsApp — if you tap our WhatsApp button, WhatsApp opens with a message ready for you to send, including the link to the day you were looking at. Nothing is sent until you press send. The chat then takes place on WhatsApp, run by WhatsApp (part of Meta), under WhatsApp’s own terms and privacy policy. We see your WhatsApp name, your number and what you write, and use them only to answer you and help with your booking. If you ask us on WhatsApp for a booking link, we keep the name, phone number and email you give us with that link, so the checkout opens with them filled in, and delete them from the link 30 days after the date of your day out. We may also send you a WhatsApp message with your private link for adding your travellers’ details and documents.

Google Analytics — when analytics cookies are on and you go to pay, we keep with your booking (including a checkout you don’t finish paying for) the identifiers Google Analytics’ cookies gave your browser. Once your booking is confirmed, our server reports it to Google (Google Ireland Limited for people in the European Economic Area and Switzerland; Google LLC everywhere else) for Google Analytics: its value and currency, which day out you booked, an internal reference (never your booking or voucher code) and those identifiers, so that every booking is counted even when the page is closed after paying. If your browser blocked Google Analytics, we still send the report, under a random number instead of the identifiers, and with your hashed email address and phone number only if advertising cookies are on. We remove the identifiers from your booking once the report has gone, and after 31 days at the latest. When you switch analytics cookies off, or where we place you in the European Economic Area, the UK or Switzerland (or cannot tell where you are) and you have not switched them on, our server sends no report.

Google advertising — when advertising cookies are on, Google (Google Ireland Limited for people in the European Economic Area and Switzerland; Google LLC everywhere else) uses the information Google Analytics collects on our site — the pages and days you view, and a booking’s value, currency and day — to tell us which of our Google ads led to bookings and to show our ads to people who have visited Day Trio. When advertising cookies are on, the report of your booking — from your browser, or from our server — also sends Google the email address and phone number you gave, in hashed form (scrambled into a code, so the details themselves are not sent, but Google can match the code to a Google account with the same email or phone). This lets Google tell us which of our ads led to a booking, even when you clicked the ad on another device. Google uses it to match the booking to our ads and to measure and report on our advertising, under its own terms; it is never used to contact you. We never send Google your name or booking code.

If you apply to list your days on Day Trio as a partner while advertising cookies are on, we tell Meta only that an application was made, with your IP address, browser details and Meta’s cookie ids — never your name, email or phone number.

Affiliates — if you book after arriving through an affiliate’s link or QR code, that affiliate sees the booking number, the date of your day out, their share and its status. We never give affiliates your name, email, phone number or other contact details.

If you are an affiliate, we share your payment details with our bank to pay you, and your tax details with tax authorities where the law requires it. Partners and travellers never see them.

International transfers — Meta, Google, Microsoft and some of our other service providers may process your information outside the country where you live, including in the United States. Your host and the permit office are in the country of your day out, which may not be where you live.

We may disclose information where required by law or to protect the safety and rights of users. We do not sell your personal information for money. Sharing with Meta and Google for advertising, described above, can be switched off in Cookie settings.

We use cookies and similar technologies, including analytics cookies from Google and Microsoft and advertising cookies from Google and Meta, as described in our Cookie Policy.

We keep your information for as long as needed to provide the service and to meet legal, accounting and reporting requirements, after which it is deleted or anonymised.

Permit documents and ID numbers — we delete the documents you add, and the ID numbers you give, three full days after your trip ends. The page where you add documents shows the exact date. If the booking is cancelled, we delete them within a day. While an issue about the booking is open, we keep them until it’s settled. When you replace or delete a document, we delete our copy straight away. We tell your host to delete every copy they hold, including any they downloaded before you changed it, within 7 days after your trip.

We keep each traveller’s name, date of birth, nationality and ID type as the record of who travelled. We keep the history of each document, and the records of our notice and your confirmations, for one year, and longer only while an issue about the booking is open.

We delete the record of a visit through an affiliate link after 12 months. If you are an affiliate, we keep your payout and tax records for as long as tax law requires, even after you leave the programme.

Depending on where you live, you may have rights to access, correct, delete or object to the use of your personal information. You can update your details from your account, or contact us to make a request.

You can replace or delete any document you’ve added until your host applies for your permit or your trip day begins. After that, write to support@daytrio.com to ask for a change, or for us to delete them sooner, and we’ll let your host know. Please don’t attach documents to your email. Deleting documents may mean your host can’t apply for your permit.

You can object to the use of your information for advertising at any time by switching advertising cookies off in Cookie settings. From then on we stop sending your visits and bookings to Meta, including a booking we had not sent yet; anything already sent stays with Meta. Google stops setting advertising cookies and stops using your visits to personalise ads, and we stop sending Google your hashed email and phone number with a booking. Your choice applies to the browser you make it in. If your browser sends a Global Privacy Control signal, we treat advertising cookies as off unless you switch them on yourself. Switching analytics cookies off stops any booking report to Google Analytics we have not sent yet, and deletes Google Analytics’ cookies in that browser.

You can turn off suggestions in booking emails with the link at the bottom of them, or by writing to support@daytrio.com.

You can turn off emails about bookings you started but didn’t finish with the link at the bottom of them, or by writing to support@daytrio.com.

If you are an affiliate, you can see and update your payment details in your affiliate dashboard, or write to partners@daytrio.com. We keep the payout and tax records the law requires, even if you ask us to delete your account.

We use technical and organisational measures to protect your information, including secure payment processing. No method of transmission or storage is completely secure, but we work to protect your data and to address any incidents promptly.

Affiliates’ bank account numbers and tax numbers are stored encrypted, and our staff’s access to them is logged.

Permit documents are kept in their own private storage, separate from our other files, with no public link. We make a fresh copy of each photo you add, which removes hidden details such as where it was taken. Each time your host or our staff open or download a document on Day Trio, we keep a record. Travellers’ ID numbers are stored encrypted, and our emails show only their last four characters.

The platform is intended for adults. When children travel (anyone under 18 on the day of the trip), the adult who books gives their details and, where a permit needs them, their documents. Before you add a child’s first document, we ask you to confirm that you’re their parent or guardian, or that you have their parent’s or guardian’s permission, and we keep a record of that confirmation. If you send us a child’s documents on WhatsApp and haven’t confirmed this on your booking page, our staff ask you to confirm the same there before they add them. When you say yes, we record that you did, which of our staff recorded it, and when they recorded it. We keep that question and your answer in our WhatsApp chat for up to one year, like our other records of your confirmations. A child’s details and documents are kept and deleted under the same rules as an adult’s.

We may update this policy from time to time. We will post the updated version here with a revised “last updated” date.

For privacy questions or requests, email support@daytrio.com.

If you have a grievance about how we handle your personal data, you can contact our Grievance Officer, Ajay Sharma, at ajaysharma@daytrio.com.

If you’re not happy with our answer, you can also complain to the Data Protection Board of India, where the law allows.