Privacy Policy

Bucketlist is a travel project of ExCo (The Experience Co.). Its team designs and runs curated, invite-led group trips for travellers from India and around the world.

The ExCo, Bucketlist and BHX names and intellectual property are owned by Oxytocin Designs LLP. Current ExCo booking terms name the affiliated Experience Collective Private Limited as the contracting company.

This policy explains what personal information we collect when you apply for a trip, book a seat, or use our visa support, how we use it, and the choices you have.

We are based in India, and we handle your data in line with applicable Indian data-protection law. If you have any questions about this policy, write to us at care@theexperience.co.

We only collect what we genuinely need to plan your trip, process your booking, and support your visa. Depending on how you use Bucketlist, that can include:

• Identity and contact details: your name, email address, and phone number, given when you apply or book.
• Payment information: card and payment details are collected and processed by our payment partner, Razorpay. We do not store your full card numbers on our own systems.
• Travel documents: when you opt into visa support, we collect passport details, scanned documents, photographs, and supporting paperwork that visa authorities require for your application.
• Trip preferences: dietary needs, accessibility requirements, room-sharing preferences, and any notes you share so we can plan the experience around you.
• Usage information: basic device and analytics data from our website, used to understand what works and to keep the site secure.

We use your information for clear, limited purposes:

• To review your application and confirm your seat on a trip.
• To process payments, deposits, and instalments through Razorpay.
• To prepare and file your visa application with the relevant authorities, where you have asked us to support your visa.
• To communicate with you about your booking, itinerary changes, joining instructions, and pre-trip logistics over email, WhatsApp, and phone.
• To improve our trips, our website, and the way we look after travellers.

We do not sell your personal information, and we do not use your passport or visa documents for anything other than supporting the visa you applied for.

We share your information only with the partners and authorities needed to deliver your trip:

• Razorpay, our payment processor, to take and reconcile payments securely.
• Visa authorities and embassies, along with any authorised visa-filing partners, to submit and process your visa application.
• Communication providers, such as our email and WhatsApp messaging partners, so we can reach you about your trip.
• Trip-delivery partners, such as hotels, transport operators, and on-ground hosts, who receive only the details required to serve you during the trip.

Each partner receives the minimum information they need, and we expect them to protect it. We may also disclose information where the law requires it.

We keep your information for as long as you have an active relationship with us, and for a reasonable period afterwards to meet legal, tax, and accounting obligations and to resolve any disputes. Visa and passport documents are retained only for as long as needed to support your application and any follow-up, after which they are deleted or securely archived.

You can ask us, at any time, to:

• Access the personal information we hold about you.
• Correct anything that is inaccurate or out of date.
• Delete your information, where we are not required to keep it.
• Withdraw consent for messages or for non-essential processing.

To make any of these requests, email care@theexperience.co. We will respond within a reasonable time.

We use reasonable technical and organisational measures to protect your information against loss, misuse, and unauthorised access. Payments are handled by Razorpay over encrypted connections, and access to sensitive documents inside our team is limited to the people who need it. No system is perfectly secure, so we also ask you to keep your own login and account details safe.

Bucketlist trips are designed for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has shared information with us, contact us and we will remove it.

We may update this policy from time to time as our trips, partners, or legal obligations change. When we make a material change, we will update the date at the top of this page. Please check back occasionally so you stay informed.

For any question about your privacy or this policy, reach the care team at care@theexperience.co. We read every message.