Legal
What we collect through inquiry forms and correspondence, how it's used, and how to request changes or deletion.
12 sections
Nepal Travel Packages Pvt. Ltd., registered at Thamel Marg, Kathmandu 44600, Nepal, is the controller of the personal data described on this page. That means we decide what is collected and why, and we are the party you hold responsible for it. Questions and requests go to hello@nepaltravelpackages.com, which is monitored by the same office that handles bookings.
When you submit an inquiry form on this site, we collect your name, email address, and any optional details you provide: phone number, country, group size, preferred travel month, and your message. We do not require an account or password to submit an inquiry.
If you email or message us on WhatsApp, we retain that correspondence to respond to and fulfil your request. If you go on to book, we additionally collect what a trek legally and practically requires: passport details for permit applications, date of birth, emergency contact details, travel insurance policy number and provider, and any medical or dietary information you choose to disclose so the guide can plan around it.
Our servers also record standard technical data when you load a page, including IP address, browser type, and the pages requested. This is ordinary web-server logging and is not linked to your inquiry unless you submit one.
| What we process | Why | Basis |
|---|---|---|
| Inquiry form details | To answer your question and prepare a quote | Your request, ahead of a contract |
| Booking and passport details | To file permits and run the trek | Performance of our contract with you |
| Medical and dietary disclosures | Guide planning and on-trail safety | Your explicit consent, withdrawable |
| Emergency contact details | To reach someone if you need help | Vital interests and contract |
| Correspondence records | To keep an accurate account of what was agreed | Our legitimate interest |
| Server logs | Security and fault diagnosis | Our legitimate interest |
We do not sell or rent your personal data, and we do not share it with third parties for their own marketing.
Your details are shared only with the parties a trek actually requires:
This site runs on infrastructure outside Nepal, so your data is transferred internationally when you use it. The processors we rely on are:
Each of these processes data on our instructions under its own terms. If you would like the current list of processors and their locations in writing, ask us at hello@nepaltravelpackages.com and we will send it.
Inquiry records that do not lead to a booking are kept while we are still in conversation and for a reasonable period afterward in case you come back to us, then deleted. Booking records, including permit paperwork and payment references, are kept for the period Nepali tax and company law requires for business records. Medical disclosures are deleted once the departure is complete, because there is no reason to hold them longer.
You can ask for deletion earlier than any of these points, and we will comply unless we are legally required to keep a specific record.
Access to booking data is limited to the staff who need it, protected by individual accounts rather than a shared login. Data is encrypted in transit between your browser and our servers, and our database provider encrypts it at rest. Administrative access to the site requires a separate authenticated session that expires.
No system is completely secure. If a breach affects your personal data and is likely to put you at risk, we will tell you and the relevant authority without undue delay, and we will tell you what happened rather than the minimum we can get away with.
This site sets no advertising or cross-site tracking cookies, and it runs no third-party marketing pixels. A session cookie is set only when a staff member signs in to the administrative area, which does not apply to ordinary visitors. If analytics tooling is added in future, this policy will be updated before it goes live and the date below will change.
Our services are sold to adults. We do not knowingly collect personal data from anyone under 16 except as part of a family booking made by a parent or guardian, who provides the child's details for permits and safety planning. If you believe a child's data has reached us any other way, contact hello@nepaltravelpackages.com and we will delete it.
You can ask us at any time to:
Write to hello@nepaltravelpackages.com with your request. We respond within 30 days and do not charge for it. Depending on where you live, you may also have the right to complain to your national data protection authority, and nothing here restricts that.
When this policy changes materially, we update the date below and, for anyone with a live booking, tell them directly rather than relying on you to re-read the page.
Nepal Travel Packages Pvt. Ltd. Thamel Marg, Kathmandu 44600, Nepal hello@nepaltravelpackages.com +977-1-4123456
This policy was last updated 8 August 2026.