Privacy Policy

Last updated: May 2026. This policy describes how we handle personal data when you use our website, enquire, or book with Indradhanu Tourism.

This document is a practical template for a trekking and tours business. It is not legal advice—have it reviewed by qualified counsel before relying on it for compliance.

1. Who we are

Indradhanu Tourism (“we”, “us”, “our”) operates this website and adventure travel services. Contact details appear in the site footer and on the Contact page.

2. Information we collect

We may collect:

  • Identity & contact: name, email, phone, address, emergency contact when you enquire, book, or subscribe to updates.
  • Booking & trip data: trek choice, dates, party size, health or dietary notes you choose to share, and payment references (card data is handled by our payment partners—we do not store full card numbers on our servers).
  • Technical data: IP address, browser type, device identifiers, and cookies or similar technologies to run the site, remember preferences, and measure basic analytics.

3. How we use your information

  • To respond to enquiries and process bookings.
  • To send confirmations, safety briefings, itinerary updates, and service messages.
  • To improve our website, routes, and customer support.
  • To meet legal, regulatory, or insurance obligations where applicable.
  • With your consent, for marketing (you can opt out at any time).

4. Legal bases (where GDPR-style rules apply)

Depending on your jurisdiction, we rely on performance of a contract, legitimate interests (e.g. fraud prevention, site security), legal obligation, or consent, as appropriate for each processing activity.

5. Sharing & processors

We may share data with:

  • Payment gateways, email/SMS providers, and cloud hosting.
  • Guides, local partners, or transport providers strictly as needed to run your trek.
  • Authorities when required by law or to protect vital interests.

We do not sell your personal information. We require processors to protect data appropriately.

6. Retention

We keep booking and financial records as long as needed for operations, tax, and legal requirements, then delete or anonymise data where possible.

7. Security

We use reasonable technical and organisational measures to protect personal data. No method of transmission over the Internet is 100% secure; please use strong passwords and protect your devices.

8. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing, and to withdraw consent. To exercise rights, contact us via the details on our Contact page. You may also lodge a complaint with your local data protection authority.

9. Cookies

We use cookies and similar technologies for essential site functions and, where allowed, analytics or preferences. You can control cookies through your browser settings.

10. Children

Our services are not directed at children under 13 (or higher age if required locally) without parental involvement. If you believe we have collected a child’s data in error, please contact us.

11. International transfers

If data is processed outside your country, we take steps consistent with applicable law (e.g. appropriate safeguards or contractual clauses).

12. Changes

We may update this policy from time to time. The “Last updated” date will change; for material changes we may provide additional notice on the website or by email where appropriate.

13. Contact

Questions about privacy? Reach us through Contact.