Privacy Policy

M/s Mystical Views Private Limited — operator of MyGoZZo

Effective Date: 15 September 2026 Last Updated: 15 September 2026

1. Introduction

M/s Mystical Views Private Limited ("Company", "we", "us" or "our") operates MyGoZZo, an online travel aggregation and booking platform.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you use our website, application or services. This Policy should be read together with our Terms of Use.

2. Information We Collect

Depending upon the services used, we may collect:

A. Identity and Contact Information

B. Booking Information

C. Location Information

Where enabled by the user or technically required, we may process approximate or precise location information subject to applicable permissions.

D. Payment Information

Payments may be processed through authorised third-party payment providers. We may receive transaction identifiers, payment status and related information. Full card information may be processed directly by the payment provider rather than stored by us, depending upon the payment architecture.

E. Technical Information

We may collect: IP address; device information; browser information; operating system; application version; log information; security information.

3. Purpose of Processing

Personal data may be processed for: creating accounts; processing bookings; communicating booking confirmations; processing payments; processing refunds; providing customer support; preventing fraud; maintaining Platform security; improving Platform functionality; complying with law; sending service communications; sending marketing communications where legally permitted and appropriately consented to; and other specifically disclosed purposes.

The privacy notice/consent interface shall be designed to provide clear and understandable information regarding the categories of data and purposes of processing, consistent with the applicable data-protection framework.

4. Sharing of Information

Information may be shared, where necessary and lawful, with: relevant Service Providers; payment service providers; technology/cloud providers; customer-support providers; fraud-prevention providers; analytics providers; professional advisers; government/regulatory authorities where legally required; and other authorised processors/service providers.

The Company shall seek to ensure that third parties receiving personal data process it in accordance with applicable contractual and legal requirements.

5. Customer Choice

Where consent is the applicable legal basis, users shall be provided an appropriate mechanism to provide, refuse or withdraw consent. Marketing communications shall contain an appropriate opt-out mechanism.

Withdrawal of consent shall not affect processing already lawfully undertaken before withdrawal, subject to applicable law.

6. Data Retention

Personal data shall be retained only for as long as reasonably necessary for the disclosed purposes, contractual requirements, legal obligations, dispute resolution, fraud prevention and legitimate operational requirements.

Different categories of information may have different retention periods.

7. Data Security

The Company shall implement reasonable technical and organisational safeguards appropriate to the nature of the personal data and risks involved. Security measures may include: access controls; encryption where appropriate; authentication; logging; monitoring; backups; incident response procedures.

No online system can be guaranteed to be completely secure.

8. Data Breach

Where a personal-data breach occurs, the Company shall take appropriate steps required under applicable law, including investigation, containment, mitigation and notifications where legally required.

9. Children

The Platform is not intended to independently collect children's personal data except where permitted and appropriately authorised under applicable law.

Where a service requires information relating to a child traveller, the responsible adult shall provide such information lawfully and in accordance with applicable requirements.

10. User Rights

Subject to applicable law, users may have rights relating to: access to personal data; correction; erasure; withdrawal of consent where consent is the applicable basis; grievance redressal; and other rights provided under applicable law.

Grievance Officer: Ankit Agrawal

Email: ankit@mygozzo.com

11. Cookies

The Platform may use cookies and similar technologies. Further details are contained in the Cookie Policy.

12. Third-Party Websites

The Platform may contain links to third-party websites. Their privacy practices are governed by their respective policies.

13. Changes to This Policy

This Policy may be updated periodically. The latest version shall be published on the Platform with the effective date.

14. Contact

Data / Privacy Contact: Ankit Agrawal (Grievance Officer)

Email: privacy@mygozzo.com

Company: Mystical Views Private Limited (The Mystical Views)

Website: https://themysticalviews.com

Address: Unit No. 829, 8th Floor, Tower B3, Spaze i-Tech Park, Sector 49, Gurugram – 122018, Haryana, India