Privacy notice

Who we are

Nepal Trek Planner Pvt. Ltd., Thamel, Kathmandu, Nepal is the controller of the personal information described in this notice. You can reach us about anything here at info@nepaltrekkingroutes.com or +977 1 5900545.

This notice covers our website and our booking process. It was last revised on the date shown above, and we will update it whenever our practices change.

What we collect

We only collect what you choose to give us:

• Contact inquiries and tailor-made briefs — your name, email address, country, travel dates, group size and whatever you write in the message; a phone number if you offer one.
• Booking requests — the same details, plus the trip you are asking about, the departure date and the number of travellers. Once a booking is confirmed we also ask for passport details, date of birth, an emergency contact, insurance policy details and relevant health notes, all required for trekking permits, domestic flights and your safety on trek.
• Newsletter sign-up — your email address alone.

Browsing on its own leaves no profile with us. The site uses Vercel Web Analytics, a cookieless, aggregated measurement: it counts page views, sets no cookies, stores nothing in your browser and builds no profile of you — we see how many people read a page, never who. The cookie policy lists the few functional items the site does store.

Where your forms go

When you send a contact inquiry, a tailor-made brief, a booking request or a newsletter sign-up, two things happen: the form is emailed to the office, and a copy is kept in our own content system so the team can answer you and follow up without losing the thread.

• An inquiry or tailor-made brief holds your name, email address, phone number if given, country, travel dates, group size and your message.
• A booking request holds the same, plus the trip, the departure date, the number of travellers and the booking's status as we work through it.
• A newsletter sign-up holds your email address and the date you subscribed.

These records exist for one purpose — answering you and operating the trip you asked about — and are read only by the office team who need them.

In plain words, the services that hold the data on our behalf: the website is hosted on Vercel, the records and the content of this site are stored in a database at Supabase, and the emails that carry your form to the office — and our replies to you — are sent through Resend. Each handles the data only on our instructions and may not use it for anything else.

Why we use it

• To answer your inquiry and shape an itinerary with you.
• To obtain the permits, flights and services a confirmed booking needs.
• To reach your emergency contact and insurer if something happens on trek.
• To send the newsletter you asked for — every issue carries an unsubscribe link.

We never use your information for automated decision-making, and we never sell or rent it to anyone.

Who we share it with

Beyond the service providers named above, only the parties a trek actually requires: government permit offices (the Nepal Tourism Board, the Department of Immigration and national-park authorities), the TIMS registration desk, domestic airlines and heliports, and — in an emergency — rescue operators, hospitals and your insurer.

Each receives the minimum needed for its role, and none may use your details for anything else.

How long we keep it

Each record is kept while the inquiry or booking is live and for the period our accounting and legal obligations require, then deleted — sooner on request wherever the law allows:

• Inquiries and tailor-made briefs that do not become bookings — deleted after 24 months of inactivity.
• Booking records — kept for 7 years, matching Nepali tax and audit requirements.
• Newsletter addresses — kept until you unsubscribe; removal is immediate.

Your choices

You may ask at any time for a copy of what we hold about you, ask us to correct it, or ask us to delete everything we are not required by law to keep. Email info@nepaltrekkingroutes.com with the subject “Privacy request”, from the address you used with us so we know it is you, and we will respond within 30 days.

Security

Access to client records is limited to the office team who need them, each through their own password-protected login to the content system. The website, the database and the email service run on reputable providers with encryption in transit, and paper permit copies are destroyed once their statutory retention period ends.