Here are the drafted privacy policies tailored for Chrysalis Tours Private Limited, incorporating your company's specific details.

Part 1: Privacy Policy for Customers

This policy is intended for your customers, the travelers who book tours and services through your e-commerce website. It is written to be transparent and easy to understand.

Chrysalis Tours Private Limited

Customer Privacy Policy

Last Updated: June 22, 2025

1. Our Commitment to Your Privacy

Chrysalis Tours Private Limited ("we," "us," or "our") is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services to book tours and travel products, or otherwise interact with us (collectively, the "Services").

2. Information We Collect

We may collect the following types of personal information to facilitate your travel bookings and improve your experience:

• Personal Identifiers: Your name, email address, postal address, phone number, passport details (where required for international travel or specific bookings), and account login credentials.
• Transactional Information: Details of the tours and services you have purchased, payment information (processed securely by our third-party payment gateways), and booking details.
• Technical Information: Your IP address, browser type, operating system, and the device you use to access our Services.
• Usage Information: Pages you visit on our site, tours you view, search terms you enter, and other interactions with our Services.
• Communications: Any information you provide when you contact our customer support team via email, phone, or any other means.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Manage Our Services: To create and manage your account, process your tour bookings, issue confirmations and travel documents, and provide you with customer support.
• To Improve Our Services: To understand how you use our Services and to enhance our website, tour packages, and overall customer experience.
• For Marketing and Communications: To send you promotional materials, newsletters, and special offers on our travel products, where you have consented to receive such communications. You may opt-out of these communications at any time.
• For Security and Fraud Prevention: To protect the security and integrity of our Services, our company, and our customers, and to prevent fraudulent transactions.
• To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes, including requests from public and government authorities.

4. Sharing Your Information

We may share your information with the following third parties to ensure the smooth delivery of your travel arrangements:

• Our Vendors and Tour Operators: We share necessary information (such as your name and booking details) with the tour operators, hotels, airlines, and other vendors on our platform to allow them to fulfill your travel bookings.
• Service Providers: We may share your information with third-party service providers who perform functions on our behalf, such as payment processing, data analysis, email delivery, and marketing assistance. These providers are contractually bound to protect your information and are not permitted to use it for any other purpose.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or prevent fraud.

We will not sell your personal information to third parties.

5. Your Data Protection Rights

Under Singapore's Personal Data Protection Act (PDPA) and other applicable laws, you have certain rights regarding your personal information:

• The right to access: You have the right to request copies of your personal data that we hold.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.  

• The right to withdraw consent: You have the right to withdraw your consent¹ for the collection, use, or disclosure of your personal data at any time.

   

To exercise these rights, please contact us using the details provided below.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process from unauthorized access, use, or disclosure.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information to enhance your Browse experience. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, you can contact our Data Protection Officer at:

Chrysalis Tours Private Limited

229 Mountbatten Rd, #02-28/29, Singapore 398007

Email: mktenquiry@chrysalistours.com

Phone: +65 8856 6596

Part 2: Privacy and Data Processing Policy for Vendors & Tour Operators

This policy is for your partners and suppliers (e.g., local tour operators, hotels, transport providers). It clarifies their responsibilities when handling customer data provided by you. This should be part of your formal agreement with them.

Chrysalis Tours Private Limited

Vendor Privacy and Data Processing Policy

Last Updated: June 22, 2025

This Vendor Privacy and Data Processing Policy ("Policy") is incorporated into the Vendor Agreement between Chrysalis Tours Private Limited ("Platform," "we," "us," or "our") and the vendor, tour operator, or service provider ("Vendor," "you," or "your"). This Policy governs the processing of Personal Data of Customers that you receive from us to fulfill tour bookings.

1. Roles and Responsibilities

• Platform as a Data Controller: We are the organization that determines the purposes and means of processing the Personal Data of Customers who book through our Platform.
• Vendor as a Data Processor: You are a Data Processor acting on our instructions. You shall only process Customer Personal Data in accordance with this Policy and for the sole purpose of providing the tour or service booked by the Customer.

2. Vendor's Data Processing Obligations

As a Data Processor acting on our behalf, you agree to:

• Process Data Only for Service Fulfillment: Use the Customer Personal Data provided to you (such as names, contact details, and booking specifics) exclusively for the purpose of providing the agreed-upon tour, accommodation, transport, or other travel service. Any other use, including for your own marketing or third-party marketing, is strictly prohibited.
• Confidentiality: Ensure that any employee or agent you authorize to process Customer Personal Data is subject to a strict duty of confidentiality.
• Data Security: Implement and maintain appropriate administrative, physical, and technical security measures to protect Customer Personal Data against unauthorized or unlawful processing, and against accidental loss, destruction, damage, theft, alteration, or disclosure.
• Sub-processors: Not engage any third party to process Customer Personal Data (a "Sub-processor") without our prior written consent. If consent is granted, you must have a written agreement with the Sub-processor that imposes data protection obligations no less protective than those in this Policy.
• Data Subject Rights: Promptly notify us if you receive a request from a Customer regarding their personal data. You shall provide us with all reasonable assistance to enable us to respond to such requests in compliance with applicable law.
• Data Breach Notification: Notify us at mktenquiry@chrysalistours.com without undue delay, and in any event within 24 hours, upon becoming aware of a personal data breach affecting Customer Personal Data. You must provide all necessary information to allow us to comply with our legal obligations.
• Data Retention and Deletion: Retain Customer Personal Data only for the duration necessary to provide the service and to comply with any applicable legal retention periods. Upon our request, or upon termination of your agreement with us, you will securely delete or return all Customer Personal Data.

3. Audits and Compliance

Upon reasonable notice, you shall allow for and contribute to audits, including inspections, conducted by us or our designated auditor, to demonstrate your compliance with this Policy and applicable data protection laws.

4. Indemnification

You agree to indemnify and hold Chrysalis Tours Private Limited harmless against all claims, actions, liabilities, losses, damages, and expenses (including legal fees) arising out of or in connection with any failure to comply with your obligations under this Policy.

5. Amendments

We may amend this Policy from time to time. We will notify you of any material changes that affect your obligations.

By entering into a Vendor Agreement with Chrysalis Tours Private Limited, you acknowledge and agree to be bound by the terms of this Vendor Privacy and Data Processing Policy.