Privacy policy

DRAFT — Prepared for review. This describes the implemented preview and proposed controls; it is not a certification of compliance. 1. What we collect We collect account name and email, a hashed password, booking details, contact information, participant names and ages, emergency contacts, optional medical and dietary information, and enquiries. We store payment references, amounts and status, not card numbers. Provide only information needed for your trip and obtain permission from other participants. 2. Use and access We use information to arrange trips, verify payments, answer questions and manage changes and records. Optional medical/dietary information is for operational planning, not advertising. Booking holders and authorised operations/owner staff can access participant information. Content editors cannot access bookings or medical details. Payment and email providers receive data needed for their services. Third-party image and font hosts receive standard connection information. Provider contracts, hosting locations and transfer arrangements need review before launch. 3. Storage and security Participant and emergency information is encrypted at rest. Passwords are salted and hashed. Sessions use HTTP-only cookies; production requires HTTPS. A guest access key grants access to the booking and must be kept private. Backup and encryption-key access must be restricted. No system guarantees absolute security. 4. Retention The preview retains bookings and enquiries until an authorised administrator acts on a request. A documented retention schedule and automated deletion process must be approved and implemented before collecting real sensitive participant information. Financial and dispute records may require separate retention. Do not enter real medical information into the demo. 5. Your requests Update your profile name and booking contact phone online. For access, correction, deletion, withdrawal of optional information or a privacy concern, call +91 6397859708 or use the contact form. We may verify identity before changing or disclosing records. Withdrawal of essential information may prevent trip arrangements; we will explain this. The formal rights process and grievance contact must be finalised against applicable law. 6. Cookies and browser storage An essential session cookie supports sign-in. Saved trek preferences are stored locally in your browser; guest booking keys use session storage. Advertising and optional analytics are disabled. Future optional analytics require a separate clear choice. 7. Children and updates Online bookings currently serve adults. Contact us for a separate, reviewed process for younger travellers. Material changes will be posted with an effective date and any required notice.