The website should have a complete and current privacy notice explaining how customer information is handled.
Recommended review points
What personal information is collected.
Why the information is collected.
How enquiries and bookings are processed.
Who can access customer information.
Whether information is shared with relevant aviation or booking partners.
How long information is retained.
How customers can contact the company regarding their data.
Applicable cookies and tracking technologies.
Appropriate data-security statements.
Important: Have the final policy reviewed for compliance with applicable Indian data-protection requirements. Do not claim that particular security measures are implemented unless verified.