Privacy Policy

Last updated: 7 November 2026

1. Who we are

This policy covers metrorailroutes.com ("we", "us"). Under India's Digital Personal Data Protection Act 2023 we act as Data Fiduciary; under GDPR and UK GDPR we act as Controller for the data we process.

2. What we collect

  • Automatically: anonymised IP address, device and browser, pages viewed, referrer and approximate region, through analytics and server logs.
  • Cookies and similar technologies: see Cookies.
  • If you contact us: your name, email address and message.
  • Tools: route and fare inputs stay in your browser unless a page says otherwise. We do not store them.

3. Why we use it

Legitimate interests (running, securing and improving the site), consent (non-essential cookies and, where required, personalised advertising) and legal obligation.

4. Third parties

Google Analytics 4 (only if you accept analytics cookies); Google AdSense when advertising is on (personalised only if you consent; opt out at adssettings.google.com); Cloudflare (hosting, security and the Turnstile check on the contact form); affiliate networks on labelled affiliate links, if any.

5. Transfers

Data may be processed outside your country, for example in the United States, under standard contractual clauses or the applicable frameworks.

6. Retention

Analytics: up to 14 months at user level. Contact messages: up to 3 years.

7. Your rights

DPDP: information, correction, erasure, grievance redressal and nomination. GDPR and UK GDPR: access, rectification, erasure, restriction, objection, portability and the right to complain to a supervisory authority. US state laws: notice and the right to opt out of sale or sharing. We honour the Global Privacy Control signal where feasible. Where advertising is on, a "Do not sell or share my personal information" choice is offered through the cookie banner.

8. How to use your rights, or raise a grievance

Use the contact form and choose "Privacy / data request / grievance". We acknowledge requests within 7 days and resolve them within 30 days, or sooner where the law requires.

9. Children

This site is not directed at children. We do not knowingly collect children's data.

10. Security

We use reasonable measures. No method of transmission or storage is completely secure.

11. Changes and governing law

The "Last updated" date shows changes. This policy is governed by the laws of India.