Privacy Policy
Last updated: 1 January 2025
1. Who We Are
Travel Himalaya Nepal Pvt. Ltd. ("we", "us", "our") is a trekking and tour operator registered in Nepal (Company No. 123456/070/071), with its principal office at Lakeside, Pokhara 33700, Nepal. We are the data controller of personal information collected through this website (travelhimalayanepal.com).
2. Information We Collect
We may collect the following categories of personal data:
- Contact data — name, email address, phone number.
- Booking data — tour preferences, travel dates, group size, special requirements.
- Payment data — processed securely by Stripe; we never store card numbers.
- Usage data — pages visited, referral source, browser type (via anonymised analytics).
- Communications — messages sent via our contact form, WhatsApp, or email.
3. How We Use Your Information
- To respond to enquiries and process trek bookings.
- To send booking confirmations, itineraries, and pre-departure information.
- To improve our website and services through aggregated analytics.
- To comply with legal obligations (e.g., permit applications, tax records).
- To send occasional newsletters — only with your explicit consent, and you may unsubscribe at any time.
4. Legal Basis for Processing (GDPR)
For visitors from the European Economic Area, we process data on the following legal bases:
- Contract — processing necessary to fulfil a booking you have made.
- Legitimate interests — improving our services and preventing fraud.
- Consent — marketing communications (you can withdraw at any time).
- Legal obligation — compliance with Nepali and applicable international law.
5. Sharing Your Data
We share data only where necessary:
- Stripe Inc. — for secure payment processing.
- Supabase — our database provider (hosted on AWS, EU/US regions).
- Nepali government authorities — for trekking permit applications (TIMS, ACAP, etc.).
- We do not sell your data to third parties.
6. Data Retention
We retain booking and contact records for 7 years to comply with Nepali tax law. Analytics data is aggregated and anonymised. You may request earlier deletion of your personal data (subject to legal retention requirements) by contacting us.
7. Your Rights
You have the right to:
- Access a copy of your personal data.
- Correct inaccurate information.
- Request deletion ("right to be forgotten").
- Object to or restrict certain processing.
- Data portability (in a structured, machine-readable format).
To exercise any of these rights, email us at travelhimalayanp@gmail.com. We will respond within 30 days.
8. Cookies
We use essential cookies to keep the site functional. We use anonymised analytics (no cross-site tracking). No advertising cookies are placed. You can disable cookies in your browser settings; this may affect site functionality.
9. Security
All data is transmitted over HTTPS. Payments are handled by Stripe with PCI-DSS Level 1 compliance. We regularly review our security practices.
10. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top will reflect any changes. Continued use of our website after changes are posted constitutes acceptance of the revised policy.
11. Contact
For privacy enquiries:
Travel Himalaya Nepal Pvt. Ltd.
Lakeside, Pokhara 33700, Nepal
Email: travelhimalayanp@gmail.com
Phone: +977 985 602 3917
