Legal
Privacy notice
What this website collects, why it collects it, and how to have it removed.
Draft pending legal review. The organising committee should have this notice checked against the Digital Personal Data Protection Act, 2023 and any TOAI policy before launch, and should fill in the two bracketed items below.
Who is responsible for your data
The Tour Operators Association of India (“TOAI”, “we”) is the organiser of the National Tourism Summit and the controller of any personal data collected through this website. Our registered address is 1135/10, 2nd Floor, Nai Wala, Karol Bagh, New Delhi 110005 and our data protection contact is [TODO: named contact or role].
What we collect
We only collect what you type into the registration form at /registration/ and the visitors-directory preference that goes with it:
- your name;
- your designation;
- the organisation you represent;
- your address, state and city;
- your phone number;
- your email address;
- your website (optional);
- your message (optional);
- your role — visitor, delegate, speaker, exhibitor, media, buyer, or VIP;
- your photo and a visiting card upload (JPG, PNG, WebP or PDF, up to 3 MB each);
- your hide my contact details preference, which controls whether your phone and email are masked on the public attendees list;
- your agreement to be contacted by the NTS’27 secretariat.
Alongside that, our web host records standard server logs — IP address, browser, and the pages requested — as part of running the site.
What we do not collect
This site does not use cookies for analytics or advertising. A session cookie is set only when you log in to the admin dashboard or unlock your badge page — it is necessary for authentication and cannot be disabled. No tracking pixels, no profiling, no sale of data.
Why we use it
To answer your enquiry and to keep you informed about NTS’27 — dates, venue, the programme, registration and partnership opportunities. We do not sell your data, and we do not pass it to sponsors or exhibitors to market to you.
Who processes it
Form submissions are received and stored by a form-handling service acting on our instructions — [TODO: name the provider once the endpoint in config.js is set]. Our web host stores the site and its server logs. Those are the only third parties involved.
Public attendees directory
Once your registration is approved, your name, role, organisation, photo and public contact details
(email, phone, website, city/state, address) are listed on the public attendees directory.
If you ticked Hide my phone and email on the attendees list on the registration form, your phone and email
are masked there as +91 •••••••••4 and j***@e***.com — visible only to the organisers
behind the badge password gate.
Badge passwords
On approval we generate a short, per-registrant password and email it to you. It unlocks your personal
badge page (/badge/<token>/view/) and the downloadable badge PNG. The password is stored only
as a bcrypt hash — it is not recoverable if the email is lost; use the Resend button on the admin
dashboard or write to mail@toai.co.in to have it reissued.
Typefaces and third-party requests
This site loads its two typefaces from Google Fonts. That means your browser makes a request to Google’s servers, which see your IP address and browser. If you would rather that did not happen, the fonts can be self-hosted in assets/fonts/ and the notice updated to match — see the README.
How long we keep it
Registration records (including uploaded photos and visiting cards) are held until one year after the Summit has concluded and its follow-up is closed, and are deleted on request at any time before then. Server logs are kept for the short period our host retains them. Badge tokens and password hashes remain valid until an administrator deletes the registration or reissues the password.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to mail@toai.co.in and we will act on it. If you would rather not be contacted at all, say so and we will remove you from every list.
Children
The Summit is an industry event for travel professionals. This website is not directed at children and we do not knowingly collect their data.
Changes
If this notice changes, the date at the top changes with it. Material changes will also be flagged on the home page.
Contact
Questions about this notice, or about anything else, go to mail@toai.co.in.