INQUA CotravGuest Travel Desk
Your data, protected

Privacy Policy —
what we collect, and why.

Cotrav runs the guest travel desk for XXII INQUA Congress 2027. This page explains, in plain language, what personal data we collect from guests to arrange stays and transport, how we use it, and the choices you have.

Effective 29 Sep 2026
Last updated 01 Oct 2026
Governed under Indian law
Our commitment

Five principles behind this policy

Only what's needed

We ask for what's required to book your stay and transport — nothing beyond that.

Encrypted in transit

Every connection to this portal runs over HTTPS; payments go straight to our payment gateway, never through our own servers.

Never sold

Your details are never sold, rented or handed to advertisers. We only share what's needed to fulfil your booking.

Your rights, respected

Ask us to access, correct or delete your data at any time — write to inqua@cotrav.co and we'll act on it.

DPDPA-aligned

We handle guest data in line with India's Digital Personal Data Protection Act, 2023.

Section 01

Who we are

This Privacy Policy is published by Cotrav ("we", "us", "our"), which operates the official guest travel desk for XXII INQUA Congress 2027 in Lucknow, India — handling hotel stays and ground transport for invited guests on the organiser's behalf.

This policy applies to anyone whose personal data we process through this booking portal: invited guests, the accompanying guests they book for, and the primary contact on any cab-only booking.

Scope note: This portal is invitation-only — you reach it through a personalised link sent to your registered email. This policy covers only the data processed through that link, not any other Cotrav product.
Section 02

Data we collect

We collect data you provide directly when booking, plus a small amount your device sends automatically. For a guest already known to the event organiser, some of these fields may already be filled in for you.

Identity & contact Full name, email, phone/WhatsApp number, country, and — for the primary guest in each room — a government ID reference and address, used at hotel check-in.
Stay & transport details Room type, occupancy, meal preference, check-in/out dates, arrival/departure flight details, and any airport transfer or cab package you select.
Payment Handled entirely by Razorpay or PayU — we receive only the payment status and a transaction reference. We never see or store your card, UPI or bank details.
Technical IP address and browser/device information, used only to keep your booking session secure and to fix bugs — never for advertising.

An uploaded ID document (for hotel check-in verification) is stored encrypted and is only ever used to fulfil that booking.

Section 03

How we use your information

Every use below exists to get your booking made, confirmed, and honoured at check-in — we don't use your data for anything beyond that without asking first.

PurposeData used
Verifying your invitation and preventing duplicate bookingsRegistration ID / URN, name, email
Booking your hotel room and pricing it correctlyStay dates, room & occupancy choice
Booking airport transfers & cab packagesFlight details, pickup/drop points, passenger count
Hotel check-in verificationGovernment ID reference, address
Processing paymentAmount due — card/UPI details never reach us
Sending your confirmation, voucher & invoiceEmail address, WhatsApp number
Customer supportBooking reference, contact details
Keeping this portal secureSession cookie, IP address
We will never use your booking data to profile you for advertising, or pass it to third-party marketers.
Section 04

Sharing & disclosure

We don't sell your data. It's shared only with the parties below, and only as far as needed to deliver your booking.

  • The hotel you book — your name, stay dates and room details, so they can honour your reservation.
  • Payment gateways (Razorpay, PayU) — the amount due, to process your payment. They never receive more than that from us.
  • WhatsApp Business platform — your phone number and booking summary, solely to deliver your confirmation message and voucher.
  • The event organiser — confirmation that your registration has an associated booking, where applicable, so they don't need to ask you separately.
  • Legal or regulatory bodies — only if we're legally required to disclose it.
Section 05

Cookies & sessions

This portal uses one small, essential cookie to remember that your invitation was verified, so you don't have to re-verify it on every page of the booking flow. It carries no personal data itself, expires automatically after a few hours, and is never used for advertising or cross-site tracking.

Your browser may also keep a short-lived local copy of your in-progress booking (room choices, guest details you've typed) so you don't lose your place if you refresh the page. That copy stays on your device and is cleared once your booking is complete.

Section 06

Data retention

We keep your booking data for as long as needed to deliver your stay and transport, handle any support request about it, and meet our tax and accounting obligations (GST invoicing typically requires records to be kept for several years under Indian law).

After that period, data is deleted or anonymised. You can ask us to delete your data sooner — see Your rights below — though we may need to keep what tax law requires us to retain.

Section 07

Security

  • Every page of this portal is served over HTTPS.
  • Payments are handled entirely on Razorpay's/PayU's own secure checkout — your card and bank details never touch our servers.
  • The admin panel used to manage bookings is access-controlled and requires a separate login.
  • Uploaded ID documents are stored encrypted and accessible only for the booking they were provided for.

No system is perfectly secure, but we design this portal to keep your data protected at every step, and we review it as the product evolves.

Section 08

Your rights

You can ask us at any time to:

  • Access — get a copy of the personal data we hold about your booking.
  • Correct — fix inaccurate details before or after your booking is made.
  • Delete — request removal of your data once it's no longer needed for your stay, support, or legal retention.
  • Ask questions — about anything in this policy or how your data is handled.

Write to inqua@cotrav.co with your booking reference and we'll respond as quickly as we can.

Section 09

Children's privacy

This portal is built for Congress attendees and their accompanying guests, and isn't directed at children. The primary guest on any booking must be at least 18 years old — the same requirement already stated on every booking voucher. We don't knowingly collect data from children through this portal.

Section 10

Changes to this policy

If we change how we collect or use your data, we'll update this page and revise the "Last updated" date at the top. For significant changes, we'll aim to let guests know directly where we can.

Section 11

Cancellations & refunds

The same cancellation schedule already shown to you for cab/transport packages during booking also applies to your hotel stay:

When you cancelCharge on the base fare
Up to 10 JanuaryNo cancellation charge
11 January to 20 January50% of the base fare
After 20 January100% of the base fare

"Base fare" means the quoted price of the hotel package or transport package itself — before GST, and before any extra usage charges, which were never collected upfront in the first place.

Payment gateway convenience charges are not refundable, under any cancellation timeline. Where a payment method carried a gateway convenience fee at the time of booking, that portion is excluded from any refund.

The exact refundable amount for a given cancellation is confirmed following internal review before it's processed, and is credited back to the original payment method. Write to inqua@cotrav.co with your booking reference for a status update on any refund.

Section 12

Contact us

Questions about this policy or your data are always welcome.