• Public sources - Personal data may be obtained from public sources such as news articles and Internet searches.
• Social and professional networking sites - If you register or login to our websites using social media (e.g., LinkedIn, Google, or Twitter) to authenticate your identity and connect your social media login information with us, we will collect information or content needed for the registration or login that you permitted your social media provider to share with us. That information may include your name and email address and depending on your privacy settings, additional details about you, so please review the privacy controls on the applicable service to set how much information you want to be shared with us.
• Business clients - Our business clients may engage us to provide products/services offered by us which involves sharing personal data they control as part of that engagement. Our services may also include processing personal data under our client’s control on our hosted software applications. All such processing will be governed by Moulavi’s client privacy policy.
• Calendar: This permission enables us to put your travel plan on your calendar.
• details of your account(s) on your mobile device. This will help you to get register on the Platform by logging into online accounts you may have with Third Party social networking sites (e.g. Facebook, Twitter, Google Login); each such account
• Third Party: ?The User allow us to provide services to third party service accounts for Displaying content from external platforms, SPAM protection, Hosting and back-end infrastructure, Infrastructure monitoring, Content commenting, Interaction with external social networks and platforms, Location-based interactions, Social features, Contacting the User, User database management, Targeted Advertising and Re-marketing and behavioral targeting. In addition to these permissions, below mentioned permission is additionally required by our Android Application:
• SMS: This application reads, uploads and do syntactic analyses of text messages from travel providers within the app for any flight and train PNR booking messages. We use this information to provide updates on PNR status, flight and train delays. This information is stored in a secured environment and always transmitted using SSL. d.Permissions required to use various features in our Adopt A Heritage (AAH) app - Android and IOS:
• In order to have a better experience and to use all features in the app, we need below permissions to be used in our app:
• Camera/Storage: We will not access your photos or camera without first getting your permission and we will never scan or import your photo library or camera roll. If you give us permission to access photos or your camera, we will only use images that you specifically choose to share with us.
• Location: We will not gather or use the specific location of your mobile device (by using, for example, GPS or Bluetooth) without first getting your explicit permission. And if you choose to share location information but later change your mind, you will always have the ability to stop sharing. Please note that this does not include IP address. The permissions will benefit the user location-specific deals and provide you a personalized experience with the time zone.
• Third-Party: The User allows us to provide services to third party services' accounts for Displaying content from external platforms, SPAM protection, Hosting and backend infrastructure, Infrastructure monitoring, Content commenting, Interaction with external social networks and platforms, Location-based interactions, Social features, Contacting the User, User database management, Targeted Advertising, and Remarketing and behavioral targeting.

With whom do we share your Personal Data?

In connection with any of the purposes outlined in the “How will we use/process the personal data” section above, we may disclose details about you to:

a. Directly: We obtain personal data directly from individuals in a variety of ways, including but not limited to obtaining personal data from individuals who provide us their business card, complete our online forms on our website/mobile app, provide records relating to previous requests or reservations made,. Individuals who subscribe to our newsletters and preference center, register for webinars, and attend meetings or events we host, visit our offices. We may also obtain personal data directly when we are establishing a business relationship, performing professional service through a contract, or through our hosted software applications.

b. Indirectly: We obtain personal data indirectly about individuals from a variety of sources, which includes but is not limited to travel agents, other travel websites, social media, authorized representative from whom you seek travel services on behalf of others and our clients. We may add personal data to our customer relationship management records to better understand and serve you, or to satisfy a legal obligation.

• Public sources - Personal data may be obtained from public sources such as news articles and Internet searches.
• Social and professional networking sites - If you register or login to our websites using social media (e.g., LinkedIn, Google, or Twitter) to authenticate your identity and connect your social media login information with us, we will collect information or content needed for the registration or login that you permitted your social media provider to share with us. That information may include your name and email address and depending on your privacy settings, additional details about you, so please review the privacy controls on the applicable service to set how much information you want to be shared with us.
• Business clients - Our business clients may engage us to provide products/services offered by us which involves sharing personal data they control as part of that engagement. Our services may also include processing personal data under our client’s control on our hosted software applications. All such processing will be governed by Moulavi’s client privacy policy.
• Calendar: This permission enables us to put your travel plan on your calendar.
• details of your account(s) on your mobile device. This will help you to get register on the Platform by logging into online accounts you may have with Third Party social networking sites (e.g. Facebook, Twitter, Google Login); each such account
• Third Party: ?The User allow us to provide services to third party service accounts for Displaying content from external platforms, SPAM protection, Hosting and back-end infrastructure, Infrastructure monitoring, Content commenting, Interaction with external social networks and platforms, Location-based interactions, Social features, Contacting the User, User database management, Targeted Advertising and Re-marketing and behavioral targeting.
• In addition to these permissions, below mentioned permission is additionally required by our Android Application:
• SMS: This application reads, uploads and do syntactic analyses of text messages from travel providers within the app for any flight and train PNR booking messages. We use this information to provide updates on PNR status, flight and train delays. This information is stored in a secured environment and always transmitted using SSL. d.Permissions required to use various features in our Adopt A Heritage (AAH) app - Android and IOS:

In order to have a better experience and to use all features in the app, we need below permissions to be used in our app:

• Camera/Storage: We will not access your photos or camera without first getting your permission and we will never scan or import your photo library or camera roll. If you give us permission to access photos or your camera, we will only use images that you specifically choose to share with us.
• Location: We will not gather or use the specific location of your mobile device (by using, for example, GPS or Bluetooth) without first getting your explicit permission. And if you choose to share location information but later change your mind, you will always have the ability to stop sharing. Please note that this does not include IP address. The permissions will benefit the user location-specific deals and provide you a personalized experience with the time zone.
• Third-Party: The User allows us to provide services to third party services' accounts for Displaying content from external platforms, SPAM protection, Hosting and backend infrastructure, Infrastructure monitoring, Content commenting, Interaction with external social networks and platforms, Location-based interactions, Social features, Contacting the User, User database management, Targeted Advertising, and Remarketing and behavioral targeting.

With whom do we share your Personal Data?

In connection with any of the purposes outlined in the “How will we use/process the personal data” section above, we may disclose details about you to:

• a. travel service providers such as travel wholesalers, tour operators, airlines, hotels, car rental companies, transfer handlers and other related service provides
• b. suppliers of IT based solutions that assist us in providing services to you (such as any external data hosting providers we may use)
• c. Competent authorities (including auditors, courts and authorities regulating us for internal compliance and audit(s)) as required or authorized by applicable law, and to comply with our legal and regulatory obligations;
• d. Credit reference agencies or other third party organizations (CyberSource, Paypal) that help us make credit decisions or conduct risk checks to reduce the incidence of fraud
• e. Other organizations to whom we may transfer our rights and/or obligations under the Terms agreed between Yatra and respective organization/p>
• f. Any other person or organization after a restructure, sale or acquisition of any member of the Yatra group, as long as they use your personal information for the same purposes we did
• g.And other members of Moulavi Group/ third parties that may reasonably require access to personal data relating to you or providing services to you. With specific reference to third party, we use third-party service providers to serve ads on our behalf across the Internet and sometimes on this site. They may collect anonymous information about your visits to our website, and your interaction with our products and services. They may also use information about your visits to this and other websites to target advertisements for goods and services. This anonymous information is collected through the use of a 'pixel tag', which is industry standard technology used by various major websites. No personally identifiable information is collected or used in this process. Such third parties do not know your name, phone number, address, email address, or any personal information which can identify you.
• If you would like more information about this practice, and to know your choices about not having this anonymous information used by our third party service provider, please email at [email protected] Our website hosts various blogs, forums, wikis and other social media applications or services that allow you to share content with other users (collectively “Social Media Applications”). Any personal data that you contribute to these Social Media Applications can be read, collected and used by other users of the application. We have little or no control over these other users, so any information you contribute to these Social Media Applications might not be handled in line with this privacy policy.

Where do we transfer (cross boarder transfer) your Personal Data?

Information we hold about you may be transferred to countries:

• a. where we do business
• b. which are linked to your engagement with us
• c. from which you regularly receive or transmit information
• d. Where our third parties conduct their activities
• For EU residents, when we, or our permitted third parties, transfer your personal data outside the EEA, we will impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the EEA. We or they may also require the recipient to subscribe to international frameworks intended to enable secure data sharing. If we transfer your personal data outside the EEA in other circumstances (for example, because we have to by law), we will make sure it remains adequately protected.
• We may share non-personal, anonymized and aggregated information with third parties for several purposes, including data analytics, research, submissions, thought leadership and promotional activity.
• Please contact us on [email protected] to obtain names and addresses of the specific entities that shall have access to your personal information in a given transaction.

How we protects your Personal Data?

We have implemented appropriate technical and organizational measures to safeguard and help prevent unauthorized access to your information and to maintain data security. These safeguards take into account the sensitivity of the information that we collect, process and store and the current state of technology. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. The third party with respect to payment gateway and payment processing are all validated as compliant with the payment card industry standard (generally referred to as PCI compliant service providers).

We assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access or other causes beyond our control. You play an important role in keeping your personal information secure. You should not share your user name, password, or other security information of your Moulavi account with anyone. If we receive instructions using your username and password, we will consider that you have authorized the instructions.

What are your data Protection Rights?

Your data protection rights are highlighted below:

a. Right to Access – You may ask us to verify whether we are processing personal data about you, and if so, to provide more specific information.

b. Right to Correction – You may ask us to correct our records if you believe they contain incorrect or incomplete information about you.

c. Right to Erasure – You may ask us to erase (delete) your personal data after you withdraw your consent to process it, or when we no longer need it for the purpose it was originally collected and we shall erase your personal data, subject to the data retention requirements under the applicable rules, regulations, guidelines, law, by-law, to meet our legal/regulatory obligations.

d. Right to Processing restrictions – You may ask us to temporarily restrict our processing of your personal data if you contest the accuracy of your personal data, prefer to restrict its use rather than having us erase it, or need us to preserve it for you to establish, exercise, or defend a legal claim. A temporary restriction may apply while verifying whether we have overriding legitimate grounds to process it. You can ask us to inform you before we lift that temporary processing restriction.

e. Right to Data portability – You may request portability of your personal data, which shall be limited to the transfer of information pertaining to the customer profile and transaction records, to another data controller.

f. Automated Individual Decision-making – You may ask us to review any decisions made about you which we made solely based on automated processing, including profiling, that produced legal effects concerning you or significantly affecting you.

g. Right to Object to Direct Marketing including Profiling – You may object to our use of your personal data for direct marketing purposes, including profiling. We may need to keep some minimal information to comply with your request to cease marketing to you.

h. Right to Withdraw Consent – h.You may withdraw your consent that you have previously given to one or more specified purposes to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. However, this may lead to Yatra not able to provide certain products or services to you.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This helps us to ensure that personal data is not disclosed to any person who has no right to receive it. No fee is required to make a request unless your request is clearly unfounded or excessive. Depending on the circumstances, we may be unable to comply with your request based on other lawful grounds, in such cases we will ensure that you are notified about the same without undue delay.

How long shall we retain/ dispose your Personal Data?

We seek to ensure that we only keep your personal data for the longest of:

a. the period necessary for the relevant activity or services

b. any retention period that is required by law

c. the period in which litigation or investigations might arise in respect of the services

Please note: Even after your account is terminated, we retain your data for as long as we have a legitimate purpose to do so (and in accordance with applicable law), including to assist with legal obligations, resolve disputes, and enforce our agreements. We may retain and disclose such data pursuant to this Privacy Policy after your account has been terminated.

Changes to this privacy statement:

From time to time we may update this statement. When we do, we will publish the changes on this Website. If you do not agree with these changes, you should discontinue your use of our Website.

How to contact us, request access to your personal data or contact us with questions or feedback?

If you have a question, comment, or complaint or wish to access a copy of your personal data or to correct it if you believe it is inaccurate, you may contact us at [email protected]

Annexure A: Cookie Notice

This Website uses cookies to improve the user experience and ensure that it is functioning effectively, and on occasion also to provide marketing information or advertise online, either directly or through third party vendors.

This Cookie Notice is part of Moulavi’s Privacy policy. For more information about Moulavi, and how it protects your information, please see the Privacy policy.

In order to provide you with a more personalized and responsive service, Moulavi needs to remember and store information about how you use this Website. This is done using small text files called cookies. Cookies contain small amounts of information and are downloaded to your computer or other device by a server for this Website. Your web browser then sends these cookies back to this Website on each subsequent visit so that it can recognize you and remember things like your user preferences. You can find below more detailed information about cookies.

Whenever you use this Website, information may be collected through the use of cookies and other technologies. By using this Website you agree to Moulavi’ use of cookies as described in this Cookie Notice.

What cookies do Moulavi use and why?

Some of the cookies Moulavi uses are mandatory and cannot be disabled so as to enable you to move around the Website and use its features such as accessing secure areas that may contain content for registered users. Should you not wish to allow moulavi use the said cookies, you may at your wish stop using the Yatra Website.

Moulavi also uses functional cookies to record information about the choices you have made and to allow it to tailor the site to its users; for example, to remember your language or region or that you have already completed a survey. This information is usually anonymized and is not used for any other purpose.

Moulavi or its service providers also use analytic services to understand how effective Moulavi content is, what interests Moulavi users have, and to improve how this Website works. In addition, Moulavi use web beacons or tracking pixels to count visitor numbers and performance cookies to track how many individual users access this Website and how often. This information is used for statistical purposes only and it is not Moulavi's intention to use such information to personally identify any user. However, if you have registered and signed into this Website, Moulavi may combine this information with information from its web analytic services and cookies to analyse how you use this Website in more detail.

How to control cookies?

By using this Website, you agree that Moulavi can place cookies on your computer or device as explained above. However, you can control and manage cookies in various ways. Please bear in mind that removing or blocking cookies can impact user experience and parts of this Website may no longer be fully accessible.

Browser controls

Most browsers will allow you to see what cookies you have, and delete them on an individual basis or block cookies from any particular or all websites. Be aware that any preference you have set will be lost if you delete all cookies, including your preference to opt-out from cookies, as this itself requires an opt-out cookie to have been set.

Managing Analytics cookies

Moulavi use the following service providers and you can learn more about their privacy policies by clicking on following links:

Adobe:YOU HAVE TO GIVE POLICY LINK HERE

Google Analytics: YOU HAVE TO GIVE POLICY LINK HERE

Managing Local Shared Objects

A local shared object is like most other browser cookies except that it can store additional types of information. These cookies cannot be controlled using the mechanisms listed above. Some parts of this Website use these types of cookies to store user preferences for media player functionality and without them some video content may not play properly.

Social buttons

The Website contains ‘social buttons’ to enable users to share or bookmark web pages. These are buttons for third party social media sites and these sites may log information about your activities on the Internet including on this Website. Please review the respective terms of use and privacy policies of these sites to understand exactly how they use your information.

You may also reach out to [email protected] to get more information on how to opt-out of the above cookies.

External web services

Moulavi sometimes use external web services on this Website to display content within the web pages of this Website, for example to display images, show videos or run polls. As with the social buttons, Moulavi cannot prevent these sites or external domains, from collecting information on your use of this embedded content.

Email Communications

Moulavi may also use tracking technologies to determine whether you have read, clicked on, or forwarded certain email communications which Moulavi sends to you, to make its communications more helpful and interesting. If you do not wish Moulavi to confirm whether you have opened, clicked or forwarded its communications, you will need to unsubscribe, as it is not possible for Moulavi to send these emails without tracking enabled. Registered subscribers can update their communication preferences at any time by contacting Moulavi, or can unsubscribe following the instructions in the individual email communications you receive from Moulavi.

Moulavi may modify or amend this Cookie Notice from time to time at its discretion. When Moulavi makes a change to this notice, it will amend the revision date at the top of this page, and such modified or amended Cookie Notice shall be effective to you and your information as of that revised date. Moulavi encourages you to periodically review this Cookie Notice to be informed about how it is using cookies.

Please contact Moulavi through email: [email protected] if you would like more detailed information on the cookies that we use.

Data Privacy Representative for Moulavi is:

Mr Abdulla Mohammed

E-mail: [email protected]