Privacy Policy for Himalayan Tourism

Effective Date: April 30, 2025
Last Updated: April 30, 2025

1. Introduction

Welcome to Himalayan Tourism! We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how Himalayan Tourism ("we," "us," or "our"), an Indian travel company established in 2022, collects, uses, discloses, and protects your information when you visit our website , use our mobile application (if applicable), contact us, or use our travel booking and related services (collectively, the "Services").

Our goal is to provide you with a pleasant and affordable travel experience while respecting your privacy rights under applicable laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect various types of information to provide and improve our Services to you. This may include:

a. Personal Identification Information (PII):

• Full Name
• Contact Details (Email address, phone number, postal address)
• Date of Birth
• Gender
• Nationality
• Passport details (number, expiry date, place of issue) - Required for international travel
• Visa details (if applicable/assisted by us)
• Government-issued ID details (like Aadhaar, PAN, Driver's License - sometimes required for domestic flights/hotels or verification)
• Photographs (e.g., for visa applications if assisted)

b. Travel and Booking Information:

• Travel Itinerary details (Origin, destination, dates of travel, flight/train/bus numbers, accommodation details)
• Booking references
• Travel Preferences (e.g., meal choices, seat preferences, room types, loyalty program numbers)
• Information about travel companions (if you are booking for others, you must have their consent to provide their PII)
• Emergency Contact Information
• Special requirements (e.g., dietary needs, medical conditions, accessibility requirements - See Section 3 regarding Sensitive Data)

c. Payment Information:

• Credit/Debit card details (Number, expiry date, CVV - often processed directly by secure third-party payment gateways; we may only store partial details or transaction references)
• Billing address
• Bank account details (for refunds or specific payment methods)
• Transaction history with us

d. Technical Information:

• IP Address
• Browser type and version
• Operating system
• Device information
• Pages visited on our website, time spent on pages, links clicked
• Referring website addresses
• Cookies and similar tracking technologies (See Section 9: Cookies)

e. Communications:

• Records of your correspondence with us (emails, chat logs, call recordings subject to notice)
• Feedback and survey responses

3. How We Collect Information

We collect information in the following ways:

• Directly from You: When you fill out forms on our website, create an account, make a booking, contact our customer service (via phone, email, chat), subscribe to newsletters, or participate in surveys/promotions.
• Automatically: When you interact with our website or app, we collect technical information using cookies and other tracking technologies.
• From Third Parties:
  • If someone else makes a booking on your behalf (e.g., a family member, employer).
  • From our partners (e.g., airlines, hotels, tour operators) to confirm bookings or manage disruptions.
  • From service providers (e.g., payment processors, analytics providers).

4. How We Use Your Information

We use your personal information for the following purposes:

• To Provide and Manage Services: Fulfilling your travel bookings (flights, hotels, tours, transport), processing payments, managing your account, sending booking confirmations and updates.
• Customer Support: Responding to your inquiries, resolving issues, providing assistance during your travel.
• Communication: Sending service-related communications, travel alerts, information about changes to itineraries or policies.
• Personalization: Customizing your experience on our website and suggesting relevant packages or offers (with your consent where required).
• Marketing and Promotions: Sending newsletters, special offers, and promotional materials (you can opt-out at any time).
• Improvement of Services: Analyzing usage patterns to understand customer preferences, improve our website functionality, develop new products and services.
• Security and Fraud Prevention: Protecting against unauthorized transactions, verifying identity, securing our systems.
• Legal and Regulatory Compliance: Complying with applicable laws, regulations, court orders, or government requests (e.g., providing passenger manifests).

Sensitive Personal Data: Where we need to process sensitive personal data (like health information for accessibility or dietary needs), we will only do so with your explicit consent or as necessary for the service requested (e.g., informing an airline of a meal preference based on religious belief, provided with consent) and ensure higher levels of protection.

5. Legal Basis for Processing (Under DPDP Act, 2023)

We process your personal data based on the following grounds:

• Consent: Where you have given us explicit consent (e.g., for marketing communications, processing certain sensitive data). You can withdraw consent at any time.
• Performance of a Contract: Processing necessary to fulfill our contractual obligations to you (i.e., arranging and providing the travel services you booked).
• Legitimate Interests: For purposes like improving our services, website security, and fraud prevention, provided these interests are not overridden by your data protection rights.
• Legal Obligation: When processing is necessary to comply with Indian laws and regulations.

6. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information with the following third parties only as necessary to provide our Services or comply with law:

• Travel Suppliers: Airlines, hotels, tour operators, transport companies, ground handling agents, insurance providers, etc., who need your details to fulfill your booking.
• Global Distribution Systems (GDS): Platforms used to book flights and other travel services.
• Payment Processors: Secure third-party companies that process your payments.
• Technology Providers: Companies providing IT infrastructure, website hosting, data analytics, email delivery, and customer service software.
• Business Partners: In connection with co-branded offers or services (with your consent).
• Government Authorities & Regulators: When required by law, such as for immigration, customs, security screening, or legal investigations.
• Professional Advisors: Lawyers, auditors, consultants, when necessary.

We require all third parties to respect the security of your personal data and treat it in accordance with the law. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

7. International Data Transfers

As we offer international holiday packages, fulfilling your booking may require transferring your personal information to travel suppliers (airlines, hotels, tour operators) located outside of India. These countries may have different data protection laws. When we transfer your data internationally, we will take appropriate steps to ensure it is protected, primarily by ensuring the transfer is necessary for the performance of the contract (your travel booking) between you and Himalayan Tourism, or between Himalayan Tourism and the third-party supplier in your interest.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption, access controls, secure servers, and regular security reviews. However, please note that no method of transmission over the Internet or electronic storage is 100% secure.

9. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period is determined based on the nature of the data, the purpose of processing, your relationship with us, and applicable legal obligations.

10. Your Rights (Under DPDP Act, 2023)

You have certain rights regarding your personal data:

• Right to Access: You can request details of the personal information we hold about you.
• Right to Correction: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request the deletion of your personal data, subject to certain legal exceptions.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time (this will not affect past processing).
• Right to Grievance Redressal: You have the right to lodge a complaint with our Grievance Officer if you are unsatisfied with how we handle your data.
• Right to Nominate: You have the right to nominate another individual who can exercise rights on your behalf in case of your death or incapacity.

To exercise these rights, please contact our Grievance Officer using the details in Section 14. We may need to verify your identity before processing your request.

11. Cookies and Tracking Technologies

Our website uses cookies (small text files placed on your device) and similar technologies to enhance user experience, analyze website traffic, facilitate bookings, and personalize content/advertising. For detailed information on the cookies we use and how you can manage your preferences, please see our separate Cookie Policy.

12. Children's Privacy

Our Services are generally not directed at children under the age of 18. We do not knowingly collect personal information from children without verifiable parental consent. If you are booking travel for children, you represent that you have the authority to provide their information and consent to its processing on their behalf. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

13. Links to Third-Party Websites

Our website may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.

15. Contact Us & Grievance Officer

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, or if you wish to exercise your rights, please contact our designated Grievance Officer:

• Company Name: Himalayan Tourism
• Grievance Officer Name:
• Email:
• Phone:
• Address:

We will endeavor to address your concerns promptly and effectively.

16. Governing Law

This Privacy Policy and any disputes arising out of it shall be governed by the laws of India, including the Digital Personal Data Protection Act, 2023.