Effective Date: 01-Feb-2026

Website: https://www.f5escapes.com

Entity: Zingara Solutions Private Limited, operating under the brand name ‘F5 Escapes’

Registered Address: 91 Springboard Business Hub, Gopala Krishna Complex, No. 45/3 Residency Road, MG Road, Bengaluru 560025

Contact Email: [email protected]

F5 Escapes respects your privacy and is committed to safeguarding the confidentiality, integrity, and security of the personal data entrusted to us. This Privacy Policy explains how we collect, use, store, share, transfer, and delete personal data, and the rights and safeguards available to individuals under the Digital Personal Data Protection Act, 2023 (DPDP Act) and, foreign laws where applicable.

We have structured this Policy using clear headings and simple language so that you can easily find the information relevant to you.

1. DEFINITIONS 

1. ‘Personal Data’ means any data about an individual who is identifiable by or in relation to such data, including sensitive or special categories of data. 
2. ‘Processing’ means any operation performed on Personal Data, whether automated or not, such as collection, storage, use, disclosure, or erasure. 
3. ‘Data Principal’ / ‘Data Subject’ means the individual to whom the data relates. 
4. ‘Data Fiduciary’ / ‘Controller’ means F5 Escapes, which determines the purpose and means of Processing. 
5. ‘Processor’ means any third-party service provider engaged by us to process data on our behalf.
6. CATEGORIES OF PERSONAL DATA COLLECTED

We collect and process the following categories of Personal Data:

1. Identity and Contact Information
2. Travel and Identification Documents
3. Payment and Transaction Data
4. Health, Mobility and Preference Data
5. Usage and Technical Data
6. Partner and Vendor Data
7. NOTICE AND CONSENT 

We provide a clear notice describing the categories of data collected, the purposes for which the data is processed, and the services enabled by such processing.

You may withdraw consent at any time through the link provided at: https://f5escapes.com/privacy/withdraw-consent or by contacting us at the above email. The ease of withdrawal is comparable to the ease with which consent is provided.

4. PURPOSE AND LAWFUL BASIS OF PROCESSING

We process Personal Data only for lawful and specified purposes, including contractual necessity, legal obligation, legitimate interests, consent, and legal defence. We review our data-flows periodically to identify how your data is collected, transferred, stored, and deleted.We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

Where processing is based on consent, you may withdraw such consent at any time by contacting us. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

5. DATA STORAGE AND SECURITY

Personal Data is stored on secure servers located in India and/or in jurisdictions providing adequate protection. We maintain technical and organisational safeguards, including encryption, firewalls, and access controls. Access to Personal Data is restricted to authorized personnel only, based on the principle of least privilege, and we conduct regular audits and reviews of our security measures.

We maintain logs and access records for a minimum period of one year, as required by Rule 6(e) and Rule 8(3) of the DPDP Rules, 2025. 

We ensure continuity measures such as backups and have contractual security obligations with all Processors

6. DATA RETENTION AND DELETION

We retain Personal Data only for as long as necessary to achieve its purpose or to meet legal and regulatory obligations. Booking and payment records are typically retained for 2 years after completion of travel.

Upon expiry of the retention period, Personal Data will be securely deleted, anonymised, or archived, unless retention is required by applicable law or for legitimate business purposes such as legal defence, accounting, or audit.

7. DISCLOSURE AND CROSS-BORDER TRANSFERS

We may share Personal Data with hotels, transport providers, payment processors, auditors, or governmental authorities as required by law. Cross-border transfers shall comply with the DPDP Act and GDPR, using adequacy decisions, contractual safeguards, or explicit consent as applicable. We do not sell or rent Personal Data to any third party. 

We require all third-party processors and sub-processors to implement appropriate technical and organisational measures to protect Personal Data and to process such data only under our documented instructions.

8. DATA BREACH NOTIFICATION

In the event of a personal data breach, we will notify affected Data Principals without delay, providing:

– A description of the breach. – Likely consequences. – Measures taken or proposed to mitigate risks. – Steps Data Principals may take. – Contact information of a responsible person.

We will also notify the Data Protection Board as required under Rule 7 of the DPDP Rules, 2025.

9. RIGHT OF DATA PRINCIPALS 

You may exercise your rights of access, correction, deletion, withdrawal of consent, and grievance redressal through emailing us at [email protected].

Identifiers such as your booking reference or email may be required to verify your request.

We will acknowledge and respond to grievances within the 90‑day timeframe mandated under Rule 14

10. MARKETING AND PHOTO/VIDEO CONSENT

By participating in F5 Escapes trips or events, you acknowledge that photographs or videos may be captured for documentation or promotional use. If you wish not to appear, please inform us in writing before or during the trip.

You may opt out of receiving marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us directly. Opting out will not affect essential service-related communications.

11. REQUESTS AND PRIVACY CONTACT

If you have any questions or concerns regarding your Personal Data, or wish to make a request relating to it, please contact us at [email protected]. We will review and respond in accordance with applicable data-protection laws.

Your Rights:

Subject to applicable law, you may have the right to request access to, correction, or erasure of your Personal Data; to restrict or object to processing; or to request data portability. We will process such requests in accordance with the DPDP Act and other applicable data-protection laws.

12. COOKIES, SESSION DATA AND ANALYTICS

Our website uses cookies and similar technologies to enable functionality and analyse usage. You may modify your browser settings to manage cookies. Our cookie policy can be found here.

13. THIRD-PARTY LINKS

Our website may contain links to third-party websites. F5 Escapes does not control and is not responsible for their privacy practices or content.

14. CHILDREN’S DATA

We do not knowingly collect data from persons under 18 years of age. Where processing is required, verified parental consent and safeguards will apply.

15. DATA PROTECTION OFFICER / GRIEVANCE OFFICER

Name: Malini Gowrishankar
Email: [email protected]
Address: Registered Address: 91 Springboard Business Hub, Gopala Krishna Complex, No. 45/3 Residency Road, MG Road, Bengaluru 560025

16. ACCESSIBILITY AND AVAILABILITY

This Privacy Policy is accessible from the footer of our website and is optimised for mobile and assistive technologies.

17. UPDATES AND VERSION CONTROL

We review this Policy periodically and whenever operational or legal changes occur. The current version and effective date appear at the top.

18. GOVERNING LAW AND DISPUTE RESOLUTION

This Privacy Policy and any disputes arising hereunder shall be governed by and construed in accordance with the laws of India. The seat and venue of arbitration shall be Bengaluru, Karnataka, India, and the arbitral award shall be final and binding on both parties.

All arbitration proceedings, pleadings, and awards shall remain confidential, except where disclosure is required by law or necessary for enforcement

19. ACKNOWLEDGEMENT AND CONSENT

By using our website or availing our services, you acknowledge that you have read, understood, and consent to the collection, processing, and handling of your Personal Data as described herein.