Privacy Policy & Data Protection
Your trust is our cornerstone. We uphold absolute transparency, rigorous encryption, and uncompromising privacy standards across all tours, transport bookings, and digital transactions in Bangladesh.
Zero Data Selling
We strictly never sell, lease, or trade your personal data with third-party ad brokers.
Payment Privacy
Bank PINs, CVV, and bKash/Nagad secrets are processed via direct gateways and never touch our servers.
Manifest Safety
Guides receive passenger names and seat numbers strictly 24 hours prior for boarding verification.
Right to Erasure
You hold the absolute right to export booking records or request complete account erasure.
Information We Collect
When you access DwipachalTour, book tours, create accounts, or contact support, we collect information necessary to guarantee your travel reservations, bus seats, hotel allotments, and legal compliance in Bangladesh:
Full legal name, mobile phone number, email address, and secondary emergency contact phone number.
Tour destination, travel dates, assigned bus fleet, designated boarding/pickup point, and specific seat codes (e.g., A1, B2).
Gateway Transaction IDs (TrxID), payment channel (bKash, Nagad, Card), amount paid, and coupon discounts. We never store bank PINs.
National ID (NID) or Passport numbers solely when required by Bangladesh law for military or administrative checkposts (e.g. Sajek Valley, Bandarban, Saint Martin).
How We Use Your Information
We process your data strictly under fair, lawful, and contractual grounds to execute your travel reservations:
- Official Smart Ticket Issuance: Generating verifiable booking codes with dynamic QR validation for conductors and guides.
- Operational SMS & WhatsApp Notifications: Sending departure reminders, bus tracking coordinates, weather alerts, and ferry transit schedules.
- Hotel Allotments & Room Allocation: Confirming passenger headcounts, family cottage allotments, and room check-in with partner resorts.
- Refund Resolution & Accounting Reconciliation: Auditing cancellations against the Refund Policy and disbursing returns to the source bKash/Nagad/Bank account.
Trip Guides & Manifest Privacy
During group tours and chartered journeys, assigned licensed Trip Guides and Host Coordinators receive a digital passenger manifest. We enforce strict data minimization protocols:
Passenger name, seat number, pickup location, primary phone, and emergency contact for boarding attendance.
Account passwords, billing addresses, financial payment channels, or personal medical information.
All guides and drivers sign mandatory non-disclosure covenants prohibiting the retention or non-operational use of passenger contacts after the tour concludes.
Payment & Financial Security
DwipachalTour partners with regulated Bangladesh Bank authorized payment gateways to process transactions with tokenized safety:
Transactions verified directly through merchant APIs. Your PIN and OTP are entered solely on the official payment screen.
PCI-DSS Level 1 compliant tokenization shields credit/debit card numbers and CVV security codes.
Partial payments and advance collections are audited with immutable ledger trails to prevent billing discrepancies.
Third-Party Disclosures
We maintain a strict zero-ad-broker policy. Information is disclosed solely to authorized operational entities under strict legal parameters:
| Partner Category | Shared Elements | Legal Safeguard |
|---|---|---|
| Transport & Bus Fleets | Seat allotment numbers, primary passenger phone | Terminal gate boarding authorization |
| SMS & WhatsApp Gateways | Mobile phone number, ticket SMS content | Instant transactional booking verification |
| Government Law Enforcement | NID/Passport numbers on official checkpost manifests | Mandatory Chittagong Hill Tracts entry permits |
Cookies & Session Storage
We employ minimal first-party cookies necessary for core booking functionality. We never run third-party cross-site behavioral ad trackers:
PHPSESSID
Maintains your temporary seat locking session and login identity during checkout.
dwipachal_lang
Remembers your selected language preference (English vs. বাংলা).
csrf_token
Cryptographic token safeguarding booking forms against unauthorized submission exploits.
Data Retention Schedule
We retain records only for the period necessary to satisfy travel operations, legal consumer dispute windows, and government accounting audits:
| Data Category | Retention Window | Justification |
|---|---|---|
| Confirmed Bookings | 3 Years | NBR tax audit reconciliation & consumer dispute protection |
| Financial Transactions | 5 Years | Bangladesh Bank banking and financial record-keeping requirements |
| Technical & Server Logs | 90 Days | Firewall defense, automated bot detection, and rate limiting |
Security Safeguards & Infrastructure
DwipachalTour utilizes modern cybersecurity controls designed to protect traveler records against loss, theft, and unauthorized alteration:
Your Rights & Privacy Controls
Under fair data ethics and consumer protection norms in Bangladesh, you possess complete sovereignty over your information:
Request an export copy of all past booking receipts and profile records.
Update your contact phone, name, or emergency contact anytime in Dashboard.
Request complete account deletion and disassociation of your personal records.
Contact Us & Legal Desk
For privacy concerns, data export requests, or inquiries regarding this policy, please reach out directly to our dedicated Data Protection desk: