Privacy policy

This policy covers bookhelicopter.com. It describes what the site collects, why, who sees it, how long it is kept and how to get a copy or have it removed. It is written from what the site actually does — if something is not described here, the site does not do it.

What we collect

When you send an enquiry

You can send an enquiry without an account. The forms collect:

• your name, email address and mobile number;
• the route, date, passenger numbers and the state or region you are flying in;
• whatever the form for that service asks — a venue, a survey area, a hospital, flying hours, aircraft preferences — and anything you write in the notes, including, if you choose to tell us, medical or mobility needs, because they change what an operator can offer. If you share them, you agree to their use only to plan and fly your trip safely, and you can ask us to delete them at any time;
• any file you attach to the enquiry;
• the page you sent it from, and the IP address it came from.

The IP address is kept to stop one address burying the enquiry inbox. It is not used to profile you, and it is removed with our other old records, as described under how long it is kept.

When you open an account and book

• Your account: name, email address, password (stored only as a hash we cannot reverse), and, if you switch it on, two-factor authentication.
• Your bookings: the flight, seats, fares, what you paid and what is owed, the cancellation policy that applied, and the history of the booking.
• Passengers: each passenger's name, phone number, identification number and weight. Operators need weight for load and balance and identification at reporting; that is the only reason we ask.
• Documents you upload against a booking, a passenger or your customer list — an ID copy, a medical note. They are encrypted on our server and handed back only to people allowed to see them.
• Payments: the amount, the method, the gateway's reference and your wallet ledger. Card, UPI and netbanking details are entered on the payment gateway's own window and never reach this site.
• Trade accounts additionally carry the customers you save for re-booking, the people you add to your team, and the version of the terms your account accepted, with the date and IP address.
• Messages we send you about a booking, an enquiry or your account, and the notices you see when you sign in.

When you simply read the site

One cookie is set, named BHSESS. It keeps you signed in and proves a form was submitted from a real page on this site rather than forged elsewhere. It holds no personal information and is not readable by scripts. Staff signing in to the content admin get a second session cookie of the same kind. If you answer the cookie notice, your answer is kept in your own browser, not on our server.

There is no analytics, no advertising pixel and no tracking of any kind on this site.

Why we hold it

• to run the enquiry, quotation, booking, payment and refund you asked for;
• to give an operator what it needs to fly you safely and lawfully;
• to answer questions, handle disputes and keep the financial records the law requires;
• to keep the platform secure — sign-in attempts, an audit trail of commercial actions, and rate limits.

Who it is shared with

• The aviation operator flying you, or the operators invited to quote on your enquiry: the travel details, the passenger details they need for load, balance and identification, your contact details where they may need to speak to you directly, and any papers you attached for that flight.
• Our own booking desk, at info@bookhelicopter.com.
• Our customer-relationship (CRM) system, Viral Code CRM, which receives a copy of each enquiry, sign-up and booking (name, phone, email, travel details and your message) so our sales team can follow it up by phone, email or WhatsApp. It processes the data only for us, and the same retention rules below apply to it.
• Our payment gateway, when you pay online. You enter card or UPI details on its window, not on ours; we keep only its reference, the amount, the payment method and the outcome — not the email, phone number, UPI ID or card details the gateway holds.
• The companies that host this site and send our email, who process the data only to run those services for us.
• Authorities, where the law requires it.

Nothing is sold, rented or passed to anyone for marketing. A trade account sees only its own bookings and customers; one operator never sees another's.

Third parties your browser contacts

• The payment gateway loads its payment window when you choose to pay online.
• If you tap a WhatsApp button you are handed to WhatsApp, and their terms apply from there.

How long it is kept

Enquiries, bookings and the papers attached to them are kept while they are live and afterwards for as long as we may need them — an operator query, a dispute, or a tax or regulatory obligation.

After that, a clear-out runs every day. Once 12 months have passed with nothing happening on it:

• a flight — counted from the day it flew — loses its passengers' identification numbers, weights and phone numbers, the papers uploaded for it, and our staff's notes on it;
• an enquiry — whether it was booked, closed or never answered — loses your name, email address, phone number, everything you wrote in it, any files attached and our staff's notes on it;
• a trade account's saved customer — counted from when the account last edited them, added their papers or flew them — is deleted, with their papers;
• the emails and on-screen notices we sent, sign-in records, and the IP addresses in our audit trail and logs are deleted.

Nothing is removed while a dispute or cancellation on it is still open. Bookings, payments, refunds and the money ledger are kept as financial records, and the terms a trade account accepted are kept with their date and IP address as the record of that agreement. Removed information can remain in our backups until they are replaced; our own are kept for 14 days. Ask us to remove yours sooner and we will, unless the law requires us to keep it.

Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete it;
• stop using it, or withdraw a consent you gave, as easily as you gave it;
• record a person who may exercise these rights for you if you die or cannot act yourself.

If you have an account, the quickest way is to sign in and open Privacy & my data: you can download everything we hold about you as a file, and ask for your account to be erased, in one place. Otherwise write to info@bookhelicopter.com with the reference number from your enquiry or booking, and we will answer within 30 days.

If you are not satisfied with our answer, you may complain to the Data Protection Board of India once it takes complaints under the Digital Personal Data Protection Act, 2023.

When an account is erased we remove your name, contact details, passengers' identification details, enquiry details, uploaded documents and messages. Bookings, payments and refunds stay as financial records, without your name on the account.

Keeping it safe

Everything is transmitted over an encrypted connection. Passwords are stored as hashes. Uploaded documents are encrypted on the server, kept outside the public web folder, and released only through a permission check. Staff accounts are limited to what their role needs, and commercial actions are recorded in an audit trail. No system is perfect and we do not claim otherwise.

Please do not send card numbers, CVVs or bank passwords to us in any form. We will never ask for them by email, on the phone or through a form.

Where it is stored

The site and its database run on servers provided by our hosting company, and our email is sent through our email provider. If you need to know the country your data is stored in for your own compliance reasons, write to us and we will tell you.

Children

The site is not aimed at children and we do not knowingly collect information from them. Passenger details for children travelling are given to us by the adult making the booking, who confirms that they are the child's parent or lawful guardian, or have the parent's consent.

Changes

If this policy changes, the date at the top changes with it. Material changes will be noted on this page rather than made quietly.

Contact

Helicopter and Charter Services
near Care My Trip, Malsi, Sinaula, Dehradun, Uttarakhand 248003
info@bookhelicopter.com · +91-9634801801

Booking terms, payment and cancellation are separate — they are on the terms and conditions page.