TYPE OF INFORMATION WE COLLECT AND ITS LEGAL BASIS

The information as detailed below is collected for us to be able to provide the services chosen by you and also to fulfill our legal obligations as well as our obligations towards third parties as per our User Agreement.

"Personal Information" of User shall include the information shared by the User and collected by us for the following purposes:

Registration on the Website: Information which you provide while subscribing to or registering on the Website, including but not limited to information about your personal identity such as name, gender, marital status, religion, age, profile picture etc., your contact details such as your email address, postal addresses, frequent flyer number, telephone (mobile or otherwise) and/or fax numbers. The information may also include information such as your banking details (including credit/debit card) and any other information relating to your income and/or lifestyle; billing information payment history etc. (as shared by you).

Other information: We many also collect some other information and documents including but not limited to:

• Transactional history (other than banking details) about your e-commerce activities, buying behavior.
• Your usernames, passwords, email addresses and other security-related information used by you in relation to our Services.
• Data either created by you or by a third party and which you wish to store on our servers such as image files, documents etc.
• Data available in public domain or received from any third party including social media channels, including but not limited to personal or non-personal information from your linked social media channels (like name, email address, friend list, profile pictures or any other information that is permitted to be received as per your account settings) as a part of your account information.
• Information pertaining any other traveler(s) for who you make a booking through your registered MMT account. In such case, you must confirm and represent that each of the other traveler(s) for whom a booking has been made, has agreed to have the information shared by you disclosed to us and further be shared by us with the concerned service provider(s).
• If you request MMT to provide visa related services, then copies of your passport, bank statements, originals of the filled in application forms, photographs, and any other information which may be required by the respective embassy to process your visa application.
• For international bookings, Users, in compliance with the Liberalized Remittance Scheme(LRS) of RBI or any other law may be required to provide details such as their PAN information or passport details number or any such information required by Service Provider. Such information shall be strictly used as per the aforesaid requirements only. In case a User does not wish to provide this information, MMT may not be able to process the booking. MMT will never share User’s PAN details without their prior consent unless otherwise such action is required by any law enforcement authority for investigation, by court order or in reference to any legal process.
• In case you opt for contactless check-in at Hotels, then copies of your government identification like aadhar, driving license, election card etc., Self-declaration and any other information like date of birth, destination/origin of travel and place of residence that may be required by the concerned Hotel to honor your hotel booking.
• For international bookings, Users, in compliance with the Liberalized Remittance Scheme(LRS) of RBI or any other law may be required to provide details such as their PAN information or passport details number or any such information required by Service Provider.
• In case you opt for contactless check-in at Hotels, then copies of your government identification like aadhar, driving license, election card etc., Self-declaration and any other information like date of birth, destination/origin of travel and place of residence that may be required by the concerned Hotel to honor your hotel booking.
• Your Covid-19 Vaccination status and certificate in case you wish to avail any service for provision of which such Covid-19 vaccination related information is required or want to access your vaccination certificate at a later stage for travel related or any other purpose. MMT will never process the beneficiary id and other id details contained in the vaccination certificate.

Such information shall be strictly used for the aforesaid specified & lawful purpose only. User further understands that MMT may share this information with the end service provider or any other third party for provision and facilitation of the desired booking. MMT will always redact all/any sensitive & confidential information contained in the vaccination certificate, passbook, bank statement or any other identity card submitted for the purpose of availing a service, promotional offer or booking a product on the Website. In case a User does not wish to provide this information or opts for deletion of the information already provided, MMT may not be able to process the desired booking request. MMT will never share any of the above information collected including PAN card details, Vaccination status & certificate , Passport details , Aadhar Card details without their prior consent unless otherwise such action is required by any law enforcement authority for investigation, by court order or in reference to any legal process.

HOW WE USE YOUR PERSONAL INFORMATION:

The Personal Information collected maybe used in the following manner:

While making a booking

While making a booking, we may use Personal Information including, payment details which include cardholder name, credit/debit card number (in encrypted form) with expiration date, banking details, wallet details etc. as shared and allowed to be stored by you. We may also use the information of travelers list as available in or linked with your account. This information is presented to the User at the time of making a booking to enable you to complete your bookings expeditiously.

We may also use your Personal Information for several reasons including but not limited to:

• confirm your reservations with respective service providers;
• keep you informed of the transaction status;
• send booking confirmations either via sms or Whatsapp or any other messaging service;
• send any updates or changes to your booking(s);
• allow our customer service to contact you, if necessary;
• customize the content of our website, mobile site and mobile app;
• request for reviews of products or services or any other improvements;
• send verification message(s) or email(s);
• validate/authenticate your account and to prevent any misuse or abuse.
• contact you on your birthday/anniversary to offer a special gift or offer.

Surveys:

We value opinions and comments from our Users and frequently conduct surveys, both online and offline. Participation in these surveys is entirely optional. Typically, the information received is aggregated, and used to make improvements to Website, other Sales Channels, services and to develop appealing content, features and promotions for members based on the results of the surveys. Identity of the survey participants is anonymous unless otherwise stated in the survey.

Marketing Promotions, Research and Programs:

Marketing promotions, research and programs help us to identify your preferences, develop programs and improve user experience. MMT frequently sponsors promotions to give its Users the opportunity to win great travel and travel related prizes. Personal Information collected by us for such activities may include contact information and survey questions. We use such Personal Information to notify contest winners and survey information to develop promotions and product improvements. As a registered User, you will also occasionally receive updates from us about fare sales in your area, special offers, new MMT services, other noteworthy items (like savings and benefits on airfares, hotel reservations, holiday packages, car rentals and other travel services) and marketing programs.

In addition, you may look forward to receiving periodic marketing emails, newsletters and exclusive promotions offering special deals.

From time to time we may add or enhance services available on the Website. To the extent these services are provided, and used by you, we will use the Personal Information you provide to facilitate the service(s) requested. For example, if you email us with a question, we will use your email address, name, nature of the question, etc. to respond to your question. We may also store such Personal Information to assist us in making the Website the better and easier to use for our Users.

MMT may from time to time launch reward programs by way of which users may stand to win travel related rewards or other rewards. We may use your Personal Information to enroll you in the rewards program and status of the same will be visible each time you log in to the Website. Depending on the reward program, each time you win a reward, MMT may share your Personal Information with a third party that will be responsible for fulfilling the reward to you. You may however choose to opt out of such reward programs by writing to us. For various purposes such as fraud detection, offering bookings on credit etc., we at times may verify information of customers on selective basis, including their credit information. Additionally, MMT may share your Personal Information, anonymized and/ or aggregated data to a third party that MMT may engage to perform certain tasks on its behalf, including but not limited to payment processing, data hosting, data processing and assessing credit worthiness for offering bookings on credit.

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

MMT will retain your Personal Information on its servers for as long as is reasonably necessary for the purposes listed in this policy. In some circumstances we may retain your Personal Information for longer periods of time, for instance where we are required to do so in accordance with any legal, regulatory, tax or accounting requirements.

Where your personal data is no longer required we will ensure it is either securely deleted or stored in a way which means it will no longer be used by the business.

In case user wishes to delete their account, they can do so using this Link.

COOKIES AND SESSION DATA

Cookies:

MMT uses cookies to personalize your experience on the Website and the advertisements that maybe displayed. MMT’s use of cookies is similar to that of any other reputable online companies.

Cookies are small pieces of information that are stored by your browser on your device's hard drive. Cookies allow us to serve you better and more efficiently. Cookies also allow ease of access, by logging you in without having to type your login name each time (only your password is needed); we may also use such cookies to display any advertisement(s) to you while you are on the Website or to send you offers (or similar emails – provided you have not opted out of receiving such emails) focusing on destinations which may be of your interest.

A cookie may also be placed by our advertising servers, or third party advertising companies. Such cookies are used for purposes of tracking the effectiveness of advertising served by us on any website, and also to use aggregated statistics about your visits to the Website in order to provide advertisements in the Website or any other website about services that may be of potential interest to you. The third party advertising companies or advertisement providers may also employ technology that is used to measure the effectiveness of the advertisements. All such information is anonymous. This anonymous information is collected through the use of a pixel tag, which is an industry standard technology and is used by all major websites. They may use this anonymous information about your visits to the Website in order to provide advertisements about goods and services of potential interest to you. No Personal Information is collected during this process. The information so collected during this process, is anonymous, and does not link online actions to a User

Most web browsers automatically accept cookies. Of course, by changing the options on your web browser or using certain software programs, you can control how and whether cookies will be accepted by your browser. MMT supports your right to block any unwanted Internet activity, especially that of unscrupulous websites. However, blocking MMT cookies may disable certain features on the Website, and may hinder an otherwise seamless experience to purchase or use certain services available on the Website. Please note that it is possible to block cookie activity from certain websites while permitting cookies from websites you trust.

Automatic Logging of Session Data:

Each time you access the Website your session data gets logged. Session data may consist of various aspects like the IP address, operating system and type of browser software being used and the activities conducted by the User while on the Website. We collect session data because it helps us analyze User’s choices, browsing pattern including the frequency of visits and duration for which a User is logged on. It also helps us diagnose problems with our servers and lets us better administer our systems. The aforesaid information cannot identify any User personally. However, it may be possible to determine a User's Internet Service Provider (ISP), and the approximate geographic location of User's point of connectivity through the above session data.

WITH WHOM YOUR PERSONAL INFORMATION IS SHARED

Service Providers and suppliers:

Your information shall be shared with the end service providers like airlines, hotels, bus service providers, cab rental, railways or any other suppliers who are responsible for fulfilling your booking. You may note that while making a booking with MMT you authorize us to share your information with the said service providers and suppliers. It is pertinent to note that MMT does not authorize the end service provider to use your information for any other purpose(s) except as may be for fulfilling their part of service. However, how the said service providers/suppliers use the information shared with them is beyond the purview and control of MMT as they process Personal Information as independent data controllers, and hence we cannot be made accountable for the same. You are therefore advised to review the privacy policies of the respective service provider or supplier whose services you choose to avail.

MMT does not sell or rent individual customer names or other Personal Information of Users to third parties except sharing of such information with our business / alliance partners or vendors who are engaged by us for providing various referral services and for sharing promotional and other benefits to our customers from time to time basis their booking history with us.

COMPANIES IN THE SAME GROUP:

In the interests of improving personalization and service efficiency, we may, under controlled and secure circumstances, share your Personal Information with our affiliate or associate entities. This will enable us to provide you with information about various products and services, both leisure- and travel-related, which might interest you; or help us address your questions and requests in relation to your bookings.

If the assets of MMT are acquired, our customer information may also be transferred to the acquirer depending upon the nature of such acquisition. In addition, as part of business expansion/development/restructuring or for any other reason whatsoever, if we decide to sell/transfer/assign our business, any part thereof, any of our subsidiaries or any business units, then as part of such restructuring exercise customer information including the Personal Information collected herein shall be transferred accordingly.

BUSINESS PARTNERS and THIRD-PARTY VENDORS:

We may also share certain filtered Personal Information to our corporate affiliates or business partners who may contact the customers to offer certain products or services, which may include free or paid products / services, which will enable the customer to have better travel experience or to avail certain benefits specially made for MMT customers. Examples of such partners are entities offering co-branded credit cards, travel insurance, insurance cover against loss of wallet, banking cards or similar sensitive information etc. If you choose to avail any such services offered by our business partners, the services so availed will be governed by the privacy policy of the respective service provider.

MMT may share your Personal Information to third party that MMT may engage to perform certain tasks on its behalf, including but not limited to payment processing, data hosting, and data processing platforms.

We use non-identifiable Personal Information of Users in aggregate or anonymized form to build higher quality, more useful online services by performing statistical analysis of the collective characteristics and behavior of our customers and visitors, and by measuring demographics and interests regarding specific areas of the Website. We may provide anonymous statistical information based on this data to suppliers, advertisers, affiliates and other current and potential business partners. We may also use such aggregate data to inform these third parties as to the number of people who have seen and clicked on links to their websites. Any Personal Information which we collect and which we may use in an aggregated format is our property. We may use it, in our sole discretion and without any compensation to you, for any legitimate purpose including without limitation the commercial sale thereof to third parties.

Occasionally, MMT will hire a third party for market research, surveys etc. and will provide information to these third parties specifically for use in connection with these projects. The information (including aggregate cookie and tracking information) we provide to such third parties, alliance partners, or vendors are protected by confidentiality agreements and such information is to be used solely for completing the specific project, and in compliance with the applicable regulations.

DISCLOSURE OF INFORMATION

In addition to the circumstances described above, MMT may disclose User's Personal Information if required to do so:

• by law, required by any enforcement authority for investigation, by court order or in reference to any legal process;
• to conduct our business;
• for regulatory, internal compliance and audit exercise(s)
• to secure our systems; or
• to enforce or protect our rights or properties of MMT or any or all of its affiliates, associates, employees, directors or officers or when we have reason to believe that disclosing Personal Information of User(s) is necessary to identify, contact or bring legal action against someone who may be causing interference with our rights or properties, whether intentionally or otherwise, or when anyone else could be harmed by such activities.

Such disclosure and storage may take place without your knowledge. In that case, we shall not be liable to you or any third party for any damages howsoever arising from such disclosure and storage.

USER GENERATED CONTENT

MMT provides an option to its users to post their experiences by way of reviews, ratings and general poll questions. The customers also have an option of posting questions w.r.t a service offered by MMT or post answers to questions raised by other users. MMT may also hire a third party to contact you and gather feedback about your recent booking with MMT. Though the participation in the feedback process is purely optional, you may still receive emails, notifications (app, sms, Whatsapp or any other messaging service) for you to share your review(s), answer questions posted by other users or a. The reviews may be written or in a video format. The reviews written or posted may also be visible on other travel or travel related platforms.

The UGC that MMT collects may be of the following kinds:

• Review and Ratings
• Question and Answers
• Crowd Source Data Collection (poll questions).

Each User who posts review or ratings, Q&A, photographs shall have a profile, which other Users will be able to access. Other Users may be able to view the number of trips, reviews written, questions asked and answered and photographs posted.

HOW CAN YOU OPT-OUT OF RECEIVING OUR PROMOTIONAL E-MAILS?

You will occasionally receive e-mail updates from us about fare sales in your area, special offers, new MMT services, and other noteworthy items. We hope you will find these updates interesting and informative. If you wish not to receive them, please click on the "unsubscribe" link or follow the instructions in each e-mail message.

PERMISSIONS REQUIRED FOR USING OUR MOBILE APPLICATIONS

When the MMT app is installed on your phone or tablet, a list of permissions appear and are needed for the app to function effectively. There is no option to customize the list. The permissions that MMT requires and the data that shall be accessed and its use is as below:

Android permissions:

Device & App history: We need your device permission to get information about your device, like OS (operating system) name, OS version, mobile network, hardware model, unique device identifier, preferred language, etc. Basis these inputs, we intend to optimize your travel booking experience, use OS specific capabilities to drive great in-funnel experiences using components of device’s OS, etc.

Camera: This permission enables you to use your camera from within the application to upload a new profile picture, upload an image for sharing hotel reviews and also allows you to take videos to upload as video reviews on our application. This permission will also enable you to scan QR codes for easy UPI payments.

Identity: This permission enables us to know about details of your account(s) on your mobile device. We use this info to auto-fill your email ID’s and provide a typing free in-funnel experience. It helps us map email ID’s to a particular user to give you the benefit of exclusive travel offers, wallet cash-backs, etc. It also allows facilitating your Facebook and Google+ login.

Location: This permission enables us to give you the benefit of location specific deals and provide you a personalized in-funnel experience. When you launch MakeMyTrip app to make a travel booking, we auto-detect your location so that your nearest airport or city is auto-filled. We also require this permission to recommend you nearest hotels in case you are running late and want to make a quick last minute booking for the nearest hotel. Your options are personalized basis your locations. For international travel, this enables us to determine your time zone and provide information accordingly

SMS: If you allow us to access your SMS, we read your SMS to autofill or prepopulate ‘OTP’ while making a transaction and to validate your mobile number. This provides you a seamless purchase experience while making a booking and you don’t need to move out of the app to read the SMS and then enter it in the app.

Phone: The app requires access to make phone calls so that you can make phone calls to hotels, airlines and our customer contact centers directly through the app.

Contacts: If you allow us to access your contacts, it enables us to provide a lot of social features to you such as sharing your hotel/ flight/ holidays with your friends, inviting your friends to try our app, send across referral links to your friends, etc. We may also use this information to make recommendations for hotels where your friends have stayed. This information will be stored on our servers and synced from your phone.

Photo/ Media/ Files: The libraries in the app use these permissions to allow map data to be saved to your phone's external storage, like SD cards. By saving map data locally, your phone doesn't need to re-download the same map data every time you use the app. This provides you a seamless Map based Hotel selection experience, even on low bandwidth network.

Wi-Fi connection information: When you allow us the permission to detect your Wi-Fi connection, we optimize your experience such as more detailing on maps, better image loading, more hotel/ flights/ package options to choose from, etc.

Device ID & Call information: This permission is used to detect your Android ID through which we can uniquely identify users. It also lets us know your contact details using which we pre-populate specific fields to ensure a seamless booking experience.

Calendar: This permission enables us to put your travel plan on your calendar.

Bluetooth: This permission enables us to provide you services of the third parties that make available certain features of their products/services on our application. The permission specifically enables our third party service providers whose services you book on the application to permit you to lock and unlock your self-driven vehicles seamlessly.

Video/Audio: This permission enables you to upload videos on our application or to submit video reviews of your hotel/property stays and thereby providing you with new ways of providing reviews of your experience on our application. The audio permission enables us to ensure that the video content that you upload has a clear audio in its background.

Phone Number: We need the permission of access to phone number to provide a seamless login experience, to optimise your travel booking experience and to enable you to obtain UPI services and to prevent fraud in some cases on our application

IMEI/IMSI: This permission enables us to identifying different users uniquely and helps us to prevent frauds on our application.

Subscription Information: Your subscription information enables to provide you a seamless experience depending upon your network and to optimise the application’s performance. In addition this also enables us in providing to you the train status even in an offline mode and additionally even in a no network area you can get fully aware of the status of the train you want to search for.

SIM Serial Number: This permission enables us to read your sim serial number and helps us in authenticating your mobile number for UPI registration. It helps us to ensure that the mobile number you are using is actually present on your device that you are using to register for UPI.

IOS Permissions:

Notifications: If you opt in for notifications, it enables us to send across exclusive deals, promotional offers, travel related updates, etc. on your device. If you do not opt for this, updates for your travel like PNR status, booking confirmation, refund (in case of cancellation), etc. will be sent through SMS.

Contacts: If you opt in for contacts permission, it enables us to provide a lot of social features to you such as sharing your hotel/ flight/ holidays with your friends, inviting your friends to try our app, send across referral links to your friends, etc. We will also use this information to make recommendations for hotels where your friends have stayed. This information will be stored on our servers and synced from your phone.

Location: This permission enables us to give you the benefit of location specific deals and provide you a personalized in-funnel experience. When you launch our app to make a travel booking, we auto-detect your location so that your nearest Airport or City is auto-filled. We require this permission to recommend your nearest hotels in case you are running late and want to make a quick last minute booking for the nearest hotel. Your options are personalized basis your locations. For international travel, this enables us to determine your time zone and provide information accordingly.

HOW WE PROTECT YOUR PERSONAL INFORMATION?

All payments on the Website are secured. This means all Personal Information you provide is transmitted using TLS (Transport Layer Security) encryption. TSL is a proven coding system that lets your browser automatically encrypt, or scramble, data before you send it to us. Website has stringent security measures in place to protect the loss, misuse, and alteration of the information under our control. Whenever you change or access your account information, we offer the use of a secure server. Once your information is in our possession we adhere to strict security guidelines, protecting it against unauthorized access.

WITHDRAWAL OF CONSENT AND PERMISSION

You may withdraw your consent to submit any or all Personal Information or decline to provide any permissions on its Website as covered above at any time. In case, you choose to do so then your access to the Website may be limited, or we might not be able to provide the services to you. You may withdraw your consent by sending an email to privacy@go-mmt.com

YOUR RIGHTS QUA PERSONAL INFORMATION

You may access your Personal Information from your user account with MMT. You may also correct your personal information or delete such information (except some mandatory fields) from your user account directly. If you don’t have such a user account, then you write to privacy@go-mmt.com

ELIGIBILITY TO TRANSACT WITH MMT

You must atleast 18 years of age to transact directly with MMT and also to consent to the processing of your personal data.

CHANGES TO THE PRIVACY POLICY

We reserve the rights to revise the Privacy Policy from time to time to suit various legal, business and customer requirement. We will duly notify the users as may be necessary.

You may always submit concerns regarding this Privacy Policy via email to us at privacy@go-mmt.com . MMT shall endeavor to respond to all reasonable concerns and inquires.

Your rights

You have the following rights with respect to your personal data:

General rights

You have the right to information, access, correction, deletion, restriction of processing, objection to processing, and data portability. If processing is based on your consent, you have the right to revoke it at any time.

Rights to object to processing of data based on legitimate interests

Article 21(1) EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) gives you the right to object at any time for reasons arising out of your particular situation against the processing of personal data relating to you when your data is processed under Article 6(1)(e) or Article 6 (1)(f) GDPR. This also applies to profiling. If you object, we will no longer process your personal data unless we can establish compelling and legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing aids the enforcing, exercising, or defending of legal claims.

Rights to object to direct marketing

If we process your personal data for the purpose of direct marketing Article 21(2) GDPR gives you the right to object at any time to the processing of your personal data for the purpose of direct marketing; this also applies to profiling, as far as it is associated with direct marketing.

If you object to processing for the purpose of direct marketing, we will no longer process your personal data for this purpose.

The Data Rights of the Citizens of California

You may have certain data rights under state privacy laws, such as the ability to request information regarding the manner in which MMT collects your personal information, to obtain your personal information in a portable format, and to have your personal information amended or deleted.

Additionally, you may have the right to opt out of the processing of your personal data for targeted advertising, by managing your browser settings or by contacting us at dpo@makemytrip.com.

Consent is required for customers under the age of 16 to be exposed to cross-context behavioural advertising. We do not serve cross-context behavioural ads in customers' child profiles.

If we deny a data request, you to appeal the denial of any of these rights by completing a form that we will furnish you with. Depending on the data options selected, specific services might be restricted or inaccessible. We will typically request that you authenticate your request using the contact information you have already provided in order to safeguard your MMT account.

No sale of personal information.

Personal information of consumers, as defined by the California Consumer Privacy Rights Act, has not been sold by MMT as of now.

Sensitive Personal Information Disclosure.

MMT gathers and divulges certain types of data for some business purposes which includes "sensitive personal information" but this Sensitive personal information is not utilized or disclosed by MMT for any purpose that is not explicitly authorized by the California Consumer Privacy Rights Act.

Retention Disclosure

In order to facilitate your ongoing utilization of MMT Services, we shall retain your personal information for the duration necessary to fulfil the objectives outlined in this Privacy Notice, in accordance with legal requirements, as otherwise instructed to you.

Non-discrimination Declaration

Any consumer who exercises their rights under the California Consumer Privacy Rights Act will not be subject to discrimination at MMT.

How can you exercise your rights and control the personal data you’ve given to MMT?

We want you to be in control of how your personal data is used by us. You can do this in the following ways:

• You can ask us for a copy of the personal data we hold about you,
• You can inform us of any changes to your personal data, or you can ask us to correct any of the personal data we hold about you. As explained below, you can make some of these changes yourself, online, when you have a user account,
• In certain situations, you can ask us to erase, block, or restrict the processing of the personal data we hold about you, or object to ways in which we are using your personal data,
• In certain situations, you can also ask us to send the personal data you have given us to a third party,
• Where we are using your personal data based on your consent, you are entitled to withdraw that consent at any time subject to applicable law, and
• Where we process your personal data based on legitimate interest or the public interest, you have the right to object to that use of your personal data at any time, subject to applicable law.

We rely on you to make sure that your personal information is complete, accurate and current. Please do let us know about any changes to, or inaccuracies in, your personal information as soon as possible.

If you have a MMT user account, you can access a lot of your personal data through our website or apps. You’ll find the option to add, update or remove information we have about you in your account settings.

Contact by e-mail

When you contact us by e-mail, we will store the data you provide (your e-mail address, possibly your name and telephone number) so we can answer your questions. As far as we use our contact form to request entries that are not required for contacting you, we have always marked these as optional. This information serves to substantiate your inquiry and improve the handling of your request. Your message may be linked to various actions taken by you on the MMT website. Information collected will be solely used to provide you with support relating to your booking and better understand your feedback. A statement of this information is expressly provided on a voluntary basis and with your consent, art. 6 par. 1a GDPR. As far as this concerns information about communication channels (such as your e-mail address or telephone number), you also agree that we may also, where appropriate, contact you via this communication channel to answer your request. You may of course revoke this consent for the future at any time.

We delete the data that arises in this context after saving is no longer required, or limit processing if there are statutory retention requirements.

Use of cookies

Cookies will be stored on your device during the use of our website. Cookies are small text files that are stored on your hard drive assigned to the browser you use, and through which the place where the cookie is set accrues certain information. They serve to make the website more user-friendly and efficient overall. We also use cookies to be able to identify you in subsequent visits.

This website uses the following types of cookies, whose extent and function are explained in the following:

• Persistent / Permanent cookies:Persistent cookies helps us recognise you as an existing user, so it’s easier for you to return to our sales channel without signing in again. After signing in, the persistent cookies stay on your browser and will be read when you return to our sales channel. These remain on your computer/device for a pre-defined period.
• Session cookies:Session cookies only last for as long as the session exists, (they are erased when the user closes the browser).

Data transmission

When we use service providers who process data outside the EU/EEA, we use appropriate safeguards such as standard data protection clauses adopted by the EU, or an EU adequacy decision to transfer and process your personal data outside of the EU.

Data security

We have taken extensive technical and operational security precautions to protect your data from being accidentally or intentionally manipulated, lost, destroyed, or accessed by unauthorized persons. Our security measures are reviewed regularly and updated in keeping with technological advances.

Data Storage

We retain your personal data for as long as it is required for you to use our Services, to provide our Services to you, to comply with laws. We will anonymise and/or aggregate your data if we intend to use it for analytical statistical purposes over longer periods.

Data Retention

We will retain the personal information we collect from you where we have a justifiable business need to do so and/or for as long as is needed to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, legal, accounting, or other purposes).

Notice for Individuals Located in Europe

‘If you are in the European Economic Area, United Kingdom and/or Switzerland, the policies in this section are specific to you. They describe how we market to you, our legal bases for processing your information and your rights.’

This section only applies to individuals that access or use our Services while located in the European Economic Area, United Kingdom and/or Switzerland (collectively “Europe”). We may ask you to identify which country you are in when you use some of the Services or we may rely on your IP address to identify in which country you are located. When we rely on your IP address, we cannot apply the terms of this section to any individual that masks or otherwise hides their location information from us so as not to appear located in Europe.

We are a controller regarding any personal information collected from individuals accessing or using our Services. A “controller” is an entity that determines the purposes for which and the way any personal information is processed.

• Marketing. We will only contact individuals located in Europe by electronic means (including email or SMS) based on our legitimate interests, as permitted by applicable law or the individual’s consent. When we rely on legitimate interest, we will only send you information about our Services that are like those which were the subject of a previous offer or negotiations of an offer to you. If you do not want us to use your personal information in this way or to disclose your personal information to third parties for marketing purposes. You can object to direct marketing at any time and free of charge. Direct marketing includes any communications to you that are only based on advertising or promoting products and services.
• Legal Bases for Processing. Our legal bases for the processing activities identified in this Policy are:
  • We rely on our contract with you as our legal basis for processing in relation to the following: to provide and maintain our services, to provide customer support or respond to you, to enforce compliance with our Terms, agreements, or policies, and to share your information with service providers.
  • Depending on the specific circumstances, we rely on your consent or legitimate interest in relation to the following processing activities: to send you marketing and promotional emails, to advise you of other services, and to share your information with business partners, sponsors, or within our corporate organization.
  • We rely on legitimate interest in relation to the following processing activities: to personalize your experience, for research and development, and when we share your information with board members or volunteers or in relation to business transfers or bankruptcy.

How to contact us

MMT’s Data Protection Officer is responsible for monitoring compliance with relevant legislation in relation to the protection of personal data. Please contact us atdpo@makemytrip.com You can contact us for any concerns or questions about your personal information, those we process or store.

Our cookie statement may also be updated from time to time. If these updates are substantial, particularly relevant to you or impact your data protection rights, we’ll contact you about them. However, we recommend that you visit this page regularly to stay up to date with any other (less substantial or relevant) updates.