ARR HOLIDAYS · PRIVACY AT A GLANCE

Your trip and access details

Last updated: 28 September 2026. ARR Holidays uses only the information needed for the action you choose. Signing in, preparing a WhatsApp draft, sending an enquiry and paying are separate actions.

Direct enquiries to ARR

When you choose Send enquiry to ARR, ARR uses your name, contact number, party details, travel date, package and request type only to respond to that enquiry. It does not subscribe you to marketing.

ARR records the enquiry-only consent notice version and time, an operational request ID and the source page with the request. WhatsApp authentication proof and unrelated chat content are not added to the enquiry. Authorised sales or trip-design staff may receive the enquiry through ARR’s customer-management system.

WhatsApp drafts and secure sign-in

A WhatsApp draft is prepared in your browser. Nothing is sent to ARR automatically. When you choose Open WhatsApp draft, the displayed name, phone and trip details are included in a link sent to WhatsApp/Meta so WhatsApp can show the draft. ARR receives the message only if you press Send in WhatsApp.

Secure WhatsApp sign-in creates a one-time approval phrase. ARR forwards only bounded campaign fields from the page URL—source, medium, campaign, content and term—to its login service. After the registered ARR WhatsApp account receives the exact phrase from the expected number, ARR creates a secure first-party session cookie for up to ten days. The cookie is not readable by page scripts. Signing in does not create a CRM enquiry or subscribe you to marketing.

Information kept in this browser

Your optional travel-assistant name and guest-wish count remain only for the current browser tab. Selected trip preferences may be remembered on this device for up to 30 days so the page can restore your planning context. You can remove them by clearing ARR Holidays site data in your browser; closing the tab clears session-only details.

Genie, ARR’s AI travel assistant

Genie is an AI assistant. It answers from ARR’s published trips, published prices and Booking Terms. It cannot book, hold dates, change or discount prices, take payments, send messages for you or promise availability; ARR confirms price and availability in writing. Answers about published trips and the Booking Terms are prepared by ARR without an AI provider. Other questions may be sent to ARR’s AI provider, OpenAI, after contact details are removed and with the provider asked not to store the request; card, passport and ID numbers are removed or refused before anything is sent. Some personal planning features need verified WhatsApp sign-in.

Sharing trip details with ARR. Genie sends your details to ARR only when you complete its trip-details form and tick “ARR may contact you on WhatsApp/phone about this trip”. ARR then receives your name, mobile number, destination, travel month, number of travellers, budget band and departure city, together with that consent wording, the time you gave it and a short reference such as G-7KQ2MX. ARR’s own sales team uses them only to contact you about that trip, not for marketing. If you also tick the option to share the chat, ARR keeps that chat with your request for the number of days shown beside the option and then removes it. Without that tick, ARR keeps no Genie chat history.

Continue on WhatsApp opens WhatsApp with a message containing your reference, so ARR can connect the chat to your request. Nothing is sent until you press send in WhatsApp.

After secure sign-in, you may explicitly choose Remember my choices. ARR then keeps only your preferred name, selected region, released package code, party type and travel pace for up to 90 days so those choices can follow you across signed-in devices. This optional memory is not used for marketing, is never created automatically, and excludes chat text, contact, identity, health and payment data. Choose Forget everywhere in the travel assistant to withdraw consent and remove the remembered choices from ARR’s active memory as well as this device.

The travel assistant removes common email, phone, payment-number and credential patterns before any AI provider request. Do not type passport, card, Aadhaar, health or password information into the chat. The travel assistant cannot book, pay, sign you in or send WhatsApp messages, and it reaches ARR’s customer desk only through the trip-details form described above; those remain separate actions you choose.

Payments

Payment is completed on a PCI-DSS compliant gateway operated by Cashfree Payments. Card, UPI and netbanking details are entered only on the payment gateway’s own secure page; ARR Holidays does not receive or store your card, UPI or netbanking credentials. A booking is not confirmed until ARR independently verifies the payment.

Advertising cookies and your choice

On your first visit ARR asks whether you accept advertising cookies. Until you choose Accept, no advertising script is loaded and nothing is sent to Meta. Only necessary keeps it that way. ARR remembers your choice in this browser for up to 180 days (a cookie named arr_consent and a matching browser-storage entry). Browsers that send a Global Privacy Control signal are treated as Only necessary.

If you choose Accept, ARR loads the Meta Pixel so Meta can tell ARR which of its ads led to a visit. Meta then receives the page address, your browser details and IP address, Meta’s own cookies (such as _fbp) and a short list of ARR events: viewing a page, opening a WhatsApp chat with ARR, sending trip details to ARR, and starting checkout, with a package code where one applies. ARR does not send your name, phone number, email address, chat text or payment details to Meta through the pixel. The pixel is never loaded on payment, receipt, account or Booking Terms pages. Meta handles this data under its own privacy policy.

You can change or withdraw your choice at any time. Withdrawing stops further measurement and removes Meta’s cookies from this site. Cookie choices

Retention, sharing and your choices

ARR restricts access to authorised staff and service providers needed for the selected action, such as Bitrix for enquiry handling, Meta/WhatsApp for WhatsApp actions and Cashfree Payments, only to process a payment you choose to make. ARR retains enquiry and booking information only for service delivery and applicable operational, financial or legal obligations; test authentication and payment records use short expiry periods.

You may continue browsing without signing in, decide not to open or send a WhatsApp draft, or withdraw an enquiry. For access, correction, deletion or privacy assistance, email corp@arrholidays.com and include the request ID when available.