Introduction
At Yatri Trekking, we respect your privacy and are committed to protecting your personal data. We collect only the information needed to provide our trekking services and to keep you informed about our offerings. Because we serve customers from the European Union, we comply with the EU General Data Protection Regulation (GDPR). Under the GDPR, any company handling personal data of EU residents must be transparent about how that data is used, no matter where the company is basedgdpr.eu. This policy explains what data we collect (name, email, phone, passport details, etc.), how and why we collect it, who we share it with, and your rights regarding your data.
What Data We Collect
We collect your personal information when you interact with our services. This can happen when you submit forms on our website, send us emails, call us, or engage with our Facebook advertisements. The types of personal data we collect include:
Contact Information: Your full name, email address, and phone number. This lets us communicate with you about your trek and booking details.
Passport and Identification: Your passport number, nationality, date of birth, and related details. This information is required for booking permits and arranging travel documents (e.g. permits for trekking in Nepal).
Booking and Travel Details: Information about your travel dates, itinerary preferences, and any special requirements. (This may include emergency contact or health information, if provided.)
In all cases, we limit data collection to what is necessary for our services. For example, like other travel agencies, we do not collect unnecessary personal data and will not use your information for unrelated purposes
How We Use Your Information
We use your personal information for the following purposes:
Trip Bookings and Services: We use your data to confirm and manage your trek or tour bookings. This includes arranging permits, hotels, transportation, guides, and other logistics. Processing booking data is necessary to fulfill our contract with you (the trekking service) and to meet legal requirements (e.g. visa or permit rules).
Customer Service and Communication: We use your contact details to answer your questions, send you confirmations, updates, and travel documents, and provide customer support before, during, and after your trip. Your information helps us personalize your experience and resolve any issues.
Marketing and Promotions: With your consent, we may send you promotional newsletters and special offers about our tours and adventures. We will never use your booking information for marketing without permission.
You can opt in or out of marketing communications at any time. We also use data (like email or browsing data) with advertising platforms (e.g. Facebook/Instagram) to show you relevant ads, but only with consent and in compliance with GDPR.
Each use of your data has a legal basis under GDPR. For bookings and mandatory communications, the legal basis is typically performance of contract or legitimate interest (providing the service you requested). For marketing, we rely on your explicit consent. We make sure to be clear about each purpose so you know why your data is needed
Data Sharing and Disclosure
We will never sell your personal data to third parties. We share your information only in the following cases, and only the minimum required:
Service Providers and Booking Partners: We share necessary details (name, passport data, contact info) with trusted partners who help deliver your trip – for example, hotels, airlines, guides, porters, or national park/permit authorities. These partners use your information only to provide the booked services and are required to keep it secure. We obtain your consent before sharing any data for these purposes and only share what is needed for the booking.
Marketing and Advertising Platforms: We share limited data (like email addresses or hashed identifiers) with advertising partners (such as Facebook/Meta and Google) to run targeted ad campaigns. This lets us show our offers and content to people who have shown interest in our site or who match our customer profile. For example, Facebook’s advertising tools (Pixel) help us measure ad performance and re-target ads to interested users.
All data shared for advertising is done under strict GDPR rules: we only share with platforms that comply with data protection requirements and only after obtaining any necessary consent.
Legal Requirements and Protection: We may disclose personal data if required by law, regulation, or to respond to legal requests (such as visa checks or safety notifications). We also may share data to protect our rights or the safety of our customers if needed. In any case, we share only what is legally necessary.
In all cases, our sharing is limited and purpose-specific. As GDPR guidance explains, travel companies may share personal data with other organizations but only with explicit consent and only what is necessary. We follow this principle: only share data for the purposes described above, and only with parties who maintain security and confidentiality.
Your Rights
Under the GDPR, you have strong rights over your personal information. In summary, you have the right to:
Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct or update any incomplete or inaccurate information.
Erasure (Right to be Forgotten): Request that we delete your personal data when we no longer need it, or if you withdraw consent (and no other legal basis for keeping it exists).
Restriction: Ask us to restrict the processing of your data (for example, while you verify its accuracy).
Object: Object to our processing of your data in certain cases, such as for direct marketing or if you believe we are misusing your data.
Data Portability: Request a digital copy of your data in a structured, machine-readable format so you can transfer it to another service.
Withdraw Consent: If we rely on your consent for a particular processing (e.g. marketing), you may withdraw that consent at any time.
Complain: Lodge a complaint with a data protection authority if you believe your rights have been violated (for example, with an EU regulator if you are an EU resident)
These rights are guaranteed by GDPR and are intended to give you control over your information. To exercise any of these rights, or to access or update your data, please contact us by email at [email protected] (see Contact Us below). Once you make a request, we will respond within one month (as required by GDPR). We will not charge you for access, and will work with you to fulfill requests promptly, unless a legal exception applies.
Cookies and Tracking Technologies
Like most websites, our site uses cookies and similar technologies (small data files on your device) to enhance your experience and analyze traffic. Cookies can store your preferences and help us understand how visitors use the site. We use the following types of cookies:
Essential Cookies: These are necessary for our website to work properly (e.g. to keep your form entries during booking, or to manage our site’s functionality).
Performance & Analytics Cookies: These cookies (from tools like Google Analytics) collect aggregate data about site usage (pages visited, duration, etc.) so we can improve our website design and content. They do not identify you personally.
Advertising Cookies (Facebook Pixel, etc.): We use advertising cookies and scripts to measure the effectiveness of our online advertising and to serve you relevant ads. For example, the Facebook Pixel is a tracking tool that records actions (like page visits or form submissions) linked to our Facebook ads. We use it to see which ads lead to bookings and to show you ads that match your interests. We do not share your personal data with advertisers beyond what is needed for this purpose. All such tracking is done only with your consent (you can agree to or reject cookies via our cookie banner).
You can manage or disable cookies at any time in your browser settings. If you choose to disable cookies, our site may not function fully. For guidance on cookie management, visit allaboutcookies.org. By using our website and services, you agree to our use of cookies as described.
Data Retention
We keep your personal data only as long as necessary to fulfill the purposes listed above and to comply with legal requirements. In line with GDPR, personal data should not be stored longer than needed. We regularly review the data we hold. For example, once your trip is completed and any statutory obligations (like accounting or permit record-keeping) are satisfied, we will delete or anonymize your personal details. Some travel companies retain booking records for a period (e.g. up to 10 years for potential claims), but we will not hold your data beyond the time needed for our business and legal purposes. If you request deletion of your data and no legal reason requires us to keep it, we will erase it promptly.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights (access, update, delete, etc.), you can contact us at:
Email: [email protected] (we typically respond to data requests within one month)
Mailing Address: Yatri Trekking, Uttar Dhoka, Lazimpat, Kathmandu (near Dusit Princess Hotel), Nepal.
We are committed to assisting you with your privacy concerns. If you have an unresolved privacy issue, you also have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.
Last Updated: This policy is reviewed regularly and was last updated on July 04, 2025. By using our services, you acknowledge that you have read and understood this Privacy Policy.