Privacy Policy

Alleppey Green Tourism Private Limited

Last Updated: October 15, 2026

#1

Introduction

Alleppey Green Tourism Private Limited (“Alleppey Green Tourism”, “we”, “us”, “our”) is a tourism services provider offering houseboat experiences, kayaking, shikara rides, canoeing, speedboat services, and related travel activity packages in Alappuzha, Kerala, India. We are committed to safeguarding the privacy and security of the personal information of individuals who interact with our services.

This Privacy Policy describes how Alleppey Green Tourism collects, uses, processes, stores, and discloses personal information when you visit our website, communicate with us, make reservations, participate in our services, or interact with us through any medium, including WhatsApp, phone, email, or online booking platforms.

Responsible Entity:

Alleppey Green Tourism Private Limited
398E Panavelil Building, Near HMC Church, Finishing Point Road, Alappuzha, Kerala - 688013
Email: hello@alleppeygt.com
Phone/WhatsApp: +91 9995772575, +91 9995672575

#2

Information We Collect

2.1 Information You Provide Directly

You may provide personal information when you make a booking, contact us, or request support. This includes:

  • Full Name
  • Phone Number
  • Email Address
  • Booking Details
  • Payment Info (No card numbers stored)
  • Messages & Instructions

2.2 Information Automatically Collected

When you visit our website or use our services, we automatically collect:

Technical Information:

  • • IP address and approximate geographic location (city, state, country)
  • • Device type, operating system, browser type and version
  • • Screen resolution and device identifiers
  • • Referring website/source of visit

Behavioral Data:

  • • Pages viewed and time spent on each page
  • • Click patterns and navigation paths
  • • Search queries and filters used
  • • Booking funnel progression (viewed → selected → checkout → purchase)
  • • Conversion events (form submissions, bookings, payments)

Marketing Attribution:

  • • Campaign source (Google Ads, Facebook Ads, email, organic search)
  • • UTM parameters and referral data
  • • Ad interaction data (clicks, impressions)

This data is collected via server logs, Google Analytics 4, Meta Pixel, first-party cookies, and third-party analytics tools.

2.3 Information from Third Parties

We may receive info from OTAs, payment processors, social media, and advertising partners.

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing behavior and improve your experience.

Types of Tracking We Use:

Essential Cookies

Session management, authentication, shopping cart functionality, security and fraud prevention

Analytics Cookies

Google Analytics 4 (GA4) - Tracks page views, user behavior, and conversion events

Collects: Device type, browser, location (city/country), pages visited, time spent

Advertising & Marketing Pixels

Meta Pixel (Facebook/Instagram) - Tracks conversions and enables retargeting

Collects: Page views, button clicks, booking initiations, purchases

Used for: Custom audiences, lookalike audiences, conversion optimization

Performance Cookies

Vercel Analytics (site performance), AWS CloudFront (content delivery optimization)

Third-Party Data Sharing:

When you visit our site, the following third parties may receive your data:

Your Choices:

#3

How We Use Information

Service Delivery

To manage bookings, deliver services, send confirmations, and provide customer support.

Safety & Compliance

To verify details, prevent fraud, ensure safety, and comply with legal regulations.

Marketing

To send offers and updates (with consent), and improve advertising relevance.

#4

Sharing & Disclosure

We do not sell or rent personal information. We only share data when necessary:

Service Providers

Shared with trusted third parties for payment processing, hosting, analytics, and support. They are contractually obligated to protect your data.

Houseboat Operators

The houseboat you book receives your name and trip details. Your phone number is shared with its operator only from 20 hours before you board until your trip ends, so the crew can arrange your pickup.

Legal Compliance

Disclosed to authorities if required by law, to prevent fraud, or to protect rights and safety.

Business Transfers

In case of mergers or sales, data may be transferred to successor entities.

#5

Your Rights

Depending on applicable law, you may have rights regarding your personal data:

For All Users:

  • Access to your personal information
  • Request correction of inaccurate data
  • Request deletion (where legally permissible)
  • Withdraw consent for marketing communications
  • Object to automated decision-making

For EU Residents (GDPR):

  • • Right to data portability
  • • Right to restrict processing
  • • Right to lodge a complaint with your local Data Protection Authority

For California Residents (CCPA):

  • • Right to know what data is collected
  • • Right to opt-out of sale (we do not sell data)
  • • Right to non-discrimination for exercising rights

To Exercise Your Rights:

Email hello@alleppeygt.com with "Privacy Request" in the subject line.

#6

International Transfers & Data Retention

International Data Transfers

Your data may be transferred to and processed in:

  • • India (primary data center)
  • • United States (Google, Meta, AWS, Vercel servers)
  • • European Union (CDN nodes)

We ensure appropriate safeguards through Standard Contractual Clauses (SCCs), Data Processing Agreements (DPAs) with all vendors, and compliance with GDPR for EU visitors.

Data Retention

We retain your personal information only as long as necessary:

  • •Booking Data: 7 years (for tax and legal compliance)
  • •Analytics Data: 26 months (Google Analytics default)
  • •Marketing Data: Until you opt-out or 2 years of inactivity
  • •Cookies: Session cookies expire when you close your browser; persistent cookies last up to 2 years
  • •Inactive Accounts: Deleted after 3 years of no activity

You may request earlier deletion by contacting us at hello@alleppeygt.com.

#7

Security

We use administrative, technical, and physical safeguards (encryption, access controls, secure gateways) to protect your data. However, no system is completely immune to risks.

#8

Third-Party Services & Data Sharing

We integrate with the following third-party services that may collect your data:

Analytics & Performance:

  • • Google Analytics 4 - Tracks user behavior and conversions
  • • Vercel Analytics - Monitors site performance

Advertising & Retargeting:

  • • Meta Pixel (Facebook/Instagram) - Enables ad targeting and conversion tracking
  • • Google Ads - Conversion tracking and remarketing

Payment Processing:

  • • Razorpay - Processes payments securely (PCI-DSS compliant)

Communication:

  • • Resend - Email delivery service
  • • WhatsApp Business API - Customer support

Infrastructure:

  • • AWS S3 - File storage
  • • Neon Database - Data hosting
  • • Vercel - Website hosting

Each service has its own privacy policy. We are not responsible for their data practices.

Alleppeygt app (for our team only)

Alleppeygt is an Android app used only by our own staff and approved admins to handle quotes, bookings, enquiries and WhatsApp chats. It is not for guests, it has no ads, and it does not sell or share data for advertising.

  • • What it shows our team: guest names, phone numbers, email addresses, trip and payment details of quotes and bookings, and WhatsApp chats and photos with guests. Chats are loaded live and are not saved on the phone, apart from voice notes, photos and files that are opened or sent, which stay in the app's temporary storage for a few days at most.
  • • What staff can send: a voice note, photo, video or document in a WhatsApp chat with a guest. The microphone is used only after a staff member taps the microphone button, and only until they stop. Photos can be taken with the phone's camera, or chosen from the phone; the app sees only the files the person picks. Whatever is sent goes to that guest through WhatsApp, and is kept with the chat on our servers like any other message.
  • • Boat owners' boats: approved admins and staff can also manage a boat owner's boats from this app on the owner's behalf: see the boat's bookings and guests, block or open dates, and change prices. Each change is recorded with the staff member's name. The same data is shown to the owner in the AGT Calendar app below.
  • • Staff name: each person picks their name in the app. It is recorded with the quotes, bookings and date blocks they make, and decides whose alerts go to that phone.
  • • On the phone: quotes from the last 60 days are kept in encrypted storage so they can be written without signal. The app is locked with the phone's fingerprint or screen lock, and everything stored, including those temporary copies, is removed when the person signs out.
  • • Alerts: Firebase Cloud Messaging (Google) delivers alerts. The phone's alert token is stored on our server and used only to send that person's alerts.
  • • Sign-in: the shared staff password, or an admin's own Google account with their authenticator code.
  • • Where the data lives: on the same servers as the rest of this policy (section 8), over encrypted connections.

To remove a staff member's access, or to ask about guest data held in the app, write to hello@alleppeygt.com.

AGT Calendar app (for boat owners)

AGT Calendar is an Android app for the boat owners and operators who list their houseboats with us. Our own team can do the same things for an owner from the Alleppeygt app, so an owner who prefers not to use the app can ask us to handle their boats. It lets an owner see and block dates, keep a book of their bookings, update boat photos and videos, and receive alerts. It has no ads, and it does not sell or share data for advertising.

  • • Owner details: the owner's name, phone number and email, used to sign in and to show the owner their own boats only.
  • • Bookings: for each booking on the owner's boats, the guest's name, phone number, dates, number of guests and amounts. An owner sees only their own boats' bookings. Bookings the owner types into their booking book are stored with their account on our servers.
  • • Photos and videos: boat photos and short videos that the owner chooses or takes are uploaded to us and shown, after our team approves them, on the boat's page.
  • • Microphone: used only after the owner taps the microphone button, to speak a booking note instead of typing it, and only until they stop.
  • • Calendar (read only): if the owner chooses to bring in bookings already kept in the phone's Google Calendar, the app reads those entries so the owner can add them to the booking book. Nothing is changed in the calendar.
  • • Alerts: Firebase Cloud Messaging (Google) delivers alerts about new, changed or cancelled bookings. The phone's alert token is stored on our server and used only to send that owner's alerts.
  • • Where the data lives: on the same servers as the rest of this policy (section 8), over encrypted connections.

To close an owner's account or ask for their data to be deleted, write to hello@alleppeygt.com.

#9

Changes to Policy

We may update this policy periodically. The "Last Updated" date will reflect the latest revision. Material changes may be notified via email.

#10

Contact Us

Get in Touch

For any privacy-related questions or requests, please contact us.

hello@alleppeygt.com
+91 9995772575+91 9995672575

Mailing Address

Alleppey Green Tourism
398E, Pannavelil Building
398E Panavelil Building, Near HMC Church
Alleppey - 688013