This policy explains what personal information TripKathmandu Pvt. Ltd., Kathmandu, Nepal collects, why, who we share it with, and your choices.
What we collect
- Booking details: your name, email, phone or WhatsApp number, country, travel dates, group size and any requests you share.
- Flight passengers: each passenger's full name as on the passport, nationality, and where the airline requires it, date of birth.
- Payments: the amount, currency, date, status and the bank's reference for your payment. We don't receive or store card numbers: you enter them only on Himalayan Bank's secure page.
- Messages: what you send us by email, WhatsApp, our contact form or our website chat assistant.
- Technical information: basic data needed to run and protect the website, such as your IP address and browser, and anonymous visit statistics.
How we use it
- To arrange your trip or flight, and to process payments and refunds.
- To send you confirmations, payment links, reminders and trip updates.
- To answer your questions, and to ask for feedback after your trip.
- To keep accounts and meet legal requirements in Nepal.
- To protect the website and our customers against fraud and misuse.
Who we share it with
- The local partner handling your trip or flight, so they can provide it.
- Airlines, for flight bookings (passenger names, nationality and, where required, date of birth).
- Himalayan Bank and its payment processor (2C2P), to process card payments and refunds.
- Service providers who help us run the website: hosting from Singapore, email delivery Cloudflare and website security and statistics (Cloudflare).
- Authorities, only where the law requires it.
We don't sell your information, and we don't use it for third-party advertising.
How long we keep it
- Booking and payment records: as long as needed for accounting and legal requirements in Nepal ([NUMBER] years).
- Flight e-tickets and passenger dates of birth: deleted one year after the flight.
- Website chat conversations: 90 days.
- Email delivery records: 2 years.
- Security and sign-in records: up to 180 days.
Security
The website uses encrypted connections (HTTPS). Access to booking information is limited to the people who need it, and protected by passwords and two-factor sign-in.
Your choices
You can ask to see, correct or delete your information, or stop receiving messages from us, at any time. Some records must be kept for legal and accounting reasons. Contact us at hello@tripkathmandu.com or through our contact page.
Children
Bookings must be made by an adult. Information about children travelling is provided by, and used only for, the adult who books.
Changes
We may update this policy. The latest version is always on this page, with the date it was updated.
