01Who we are
Blessed Trek Nepal (registered as Blessed Trek) is a trekking operator based in Pokhara, Nepal, registered with the Nepal Tourism Board (Nepal Tourism Board Reg. No. 391621/82/83). We are the controller of the personal data described in this policy.
Questions about privacy, including requests to use your rights, can be sent to [email protected].
02Data we collect
We only collect what we need to answer your enquiry and plan your trek.
- Enquiry form: your name, email address, chosen expedition, preferred month, group size and any message you write.
- Direct contact: anything you send us by email, phone or WhatsApp.
- Bookings: passport details, emergency contacts, insurance and health information needed for permits and your safety, collected only once you book.
- Technical data: IP address, browser type and pages requested, recorded in server logs by our hosting providers for security.
- Analytics and marketing data: collected only if you allow it in the cookie banner (see Cookies).
03How we use your data
- To reply to your enquiry and prepare itineraries and quotes (steps taken at your request before a contract).
- To operate your trek, obtain permits and keep you safe (performance of a contract and vital interests).
- To keep the website secure and prevent abuse (legitimate interests).
- To understand how the site is used and to measure advertising, only with your consent.
We never sell your personal data, and we do not use it for automated decision-making.
04Who processes your data
We use trusted service providers who process data on our behalf under contract:
- Supabase: secure database storage for enquiries.
- Resend: delivery of enquiry and confirmation emails.
- Vercel and Cloudflare: website hosting, content delivery and security logs.
- WhatsApp (Meta): only if you choose to message us there.
- Google Analytics and Meta Pixel: only if you consent to analytics or marketing cookies.
06How long we keep data
Enquiries are kept for [INSERT_RETENTION_PERIOD] and then deleted unless you book with us. Booking records are kept as long as Nepali tax and tourism law requires. Server logs are kept by our hosting providers for a short period for security.
07Your rights (GDPR and CCPA)
Wherever you live, you can ask us to:
- Access the personal data we hold about you and receive a copy.
- Correct inaccurate data or delete your data.
- Restrict or object to processing, and withdraw consent at any time.
- Receive your data in a portable format.
- California residents: know what we collect, request deletion, and opt out of any sale or sharing. We do not sell or share personal information for cross-context behavioural advertising without consent, and we will not discriminate against you for using these rights.
To use any right, email [email protected]. We reply within 30 days. If you are in the EU or UK you may also complain to your local data protection authority.
08International transfers
Our providers may store data outside Nepal and your home country, including in the United States, the EU and Asia. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.
09Security
Data is encrypted in transit (HTTPS), enquiries are stored in a database that is not publicly accessible, and access is limited to the staff who need it.
10Children
Our website is not directed at children under 16, and we do not knowingly collect their data. Minors travel with us only through a parent or guardian's booking.
11Changes and contact
We may update this policy when our services or the law change; the date at the top shows the latest version.
Contact: [email protected] · +977 984-1161314 · Pokhara, Nepal