ARR HOLIDAYS · PRIVACY AT A GLANCE

Your trip and access details

Last updated: 28 September 2026. ARR Holidays uses only the information needed for the action you choose. Signing in, preparing a WhatsApp draft, sending an enquiry and paying are separate actions.

Direct enquiries to ARR

When you choose Send enquiry to ARR, ARR uses your name, contact number, party details, travel date, package and request type only to respond to that enquiry. It does not subscribe you to marketing.

ARR records the enquiry-only consent notice version and time, an operational request ID and the source page with the request. WhatsApp authentication proof and unrelated chat content are not added to the enquiry. Authorised sales or trip-design staff may receive the enquiry through ARR’s customer-management system.

WhatsApp drafts and secure sign-in

A WhatsApp draft is prepared in your browser. Nothing is sent to ARR automatically. When you choose Open WhatsApp draft, the displayed name, phone and trip details are included in a link sent to WhatsApp/Meta so WhatsApp can show the draft. ARR receives the message only if you press Send in WhatsApp.

Secure WhatsApp sign-in creates a one-time approval phrase. ARR forwards only bounded campaign fields from the page URL—source, medium, campaign, content and term—to its login service. After the registered ARR WhatsApp account receives the exact phrase from the expected number, ARR creates a secure first-party session cookie for up to ten days. The cookie is not readable by page scripts. Signing in does not create a CRM enquiry or subscribe you to marketing.

Information kept in this browser

Your optional travel-assistant name and guest-wish count remain only for the current browser tab. Selected trip preferences may be remembered on this device for up to 30 days so the page can restore your planning context. You can remove them by clearing ARR Holidays site data in your browser; closing the tab clears session-only details.

Genie, ARR’s AI travel assistant

Genie is an AI assistant. It answers from ARR’s published trips, published prices and Booking Terms. It cannot book, hold dates, change or discount prices, take payments, send messages for you or promise availability; ARR confirms price and availability in writing. Answers about published trips and the Booking Terms are prepared by ARR without an AI provider. Other questions may be sent to ARR’s AI provider, OpenAI, after contact details are removed and with the provider asked not to store the request; card, passport and ID numbers are removed or refused before anything is sent. Some personal planning features need verified WhatsApp sign-in.

Sharing trip details with ARR. Genie sends your details to ARR only when you complete its trip-details form and tick “ARR may contact you on WhatsApp/phone about this trip”. ARR then receives your name, mobile number, destination, travel month, number of travellers, budget band and departure city, together with that consent wording, the time you gave it and a short reference such as G-7KQ2MX. ARR’s own sales team uses them only to contact you about that trip, not for marketing. If you also tick the option to share the chat, ARR keeps that chat with your request for the number of days shown beside the option and then removes it. Without that tick, ARR keeps no Genie chat history.

Continue on WhatsApp opens WhatsApp with a message containing your reference, so ARR can connect the chat to your request. Nothing is sent until you press send in WhatsApp.

After secure sign-in, you may explicitly choose Remember my choices. ARR then keeps only your preferred name, selected region, released package code, party type and travel pace for up to 90 days so those choices can follow you across signed-in devices. This optional memory is not used for marketing, is never created automatically, and excludes chat text, contact, identity, health and payment data. Choose Forget everywhere in the travel assistant to withdraw consent and remove the remembered choices from ARR’s active memory as well as this device.

The travel assistant removes common email, phone, payment-number and credential patterns before any AI provider request. Do not type passport, card, Aadhaar, health or password information into the chat. The travel assistant cannot book, pay, sign you in or send WhatsApp messages, and it reaches ARR’s customer desk only through the trip-details form described above; those remain separate actions you choose.

Payments

Payments are processed securely by our payment partners Cashfree Payments, PayU and Razorpay; we do not store your card or bank details. Card, UPI and netbanking details are entered only on the payment gateway’s own secure page, and ARR Holidays does not receive your card, UPI or netbanking credentials. A booking is not confirmed until ARR independently verifies the payment.

Analytics and advertising cookies and your choice

On your first visit ARR asks for your choice with three equal buttons: Reject, Customize and Accept. Until you choose Accept, or turn a purpose on under Customize, no analytics or advertising script is loaded and nothing is sent to Meta or Google. Reject keeps it that way. Under Customize you can choose two purposes separately: Analytics (Google Analytics counts visits and pages) and Advertising (Meta and Google measure which ads led you here). ARR remembers your choice in this browser for up to 180 days (a cookie named arr_consent and a matching browser-storage entry). Browsers that send a Global Privacy Control signal are treated as Reject.

If you allow advertising, ARR loads the Meta Pixel and, where configured, the Google Ads tag so they can tell ARR which ads led to a visit. They then receive the page address, your browser details and IP address, their own cookies (such as _fbp or _gcl_au) and a short list of ARR events: viewing a page or a holiday package, opening a WhatsApp chat with ARR, starting a chat with Genie, sending trip details to ARR, and starting checkout, with a package code where one applies. ARR does not send your name, phone number, email address, chat text or payment details through these website tags. They are never loaded on payment, receipt, account or Booking Terms pages. Meta and Google handle this data under their own privacy policies.

When you become an ARR enquiry or client, ARR may also tell Meta or Google, from its own systems, that an ad led to a qualified enquiry, a quote being opened, or a booking with its advance amount. Your phone number or email address is then sent only as a one-way scrambled code (SHA-256 hash), never in readable form, and only so the platform can match it to its own ad records. ARR turns this on only where it has a lawful basis, and you can ask ARR to stop it at any time using the contact details on this page.

You can change or withdraw your choice at any time. Withdrawing stops further measurement and removes Meta’s and Google’s cookies from this site. Cookie choices

Retention, sharing and your choices

ARR restricts access to authorised staff and service providers needed for the selected action, such as Bitrix for enquiry handling, Meta/WhatsApp for WhatsApp actions and our payment partners Cashfree Payments, PayU and Razorpay, only to process a payment you choose to make. ARR retains enquiry and booking information only for service delivery and applicable operational, financial or legal obligations; test authentication and payment records use short expiry periods.

You may continue browsing without signing in, decide not to open or send a WhatsApp draft, or withdraw an enquiry. For access, correction, deletion or privacy assistance, email corp@arrholidays.com and include the request ID when available.