Privacy policy

We collect only what we need to arrange and run your trip:

• Account details — your name, email address, phone number and password (stored only as a cryptographic hash, never in readable form).
• Booking details — travel dates, party size, the guides, rooms, vehicles or packages you book, and any notes or requirements you send us.
• Visa and travel document details — passport information required by the Government of Bhutan to process your visa.
• Messages — enquiries you send, and messages exchanged with providers about a booking.
• Reviews and photos you choose to publish.
• Vehicle location data from GPS devices during your trip, used to verify trip distance and to power live tracking.

To arrange your trip, process your visa, confirm and manage bookings, send you booking notifications, verify trip mileage for accurate billing, respond to your enquiries, and meet our legal and tax obligations as a licensed operator.

We do not sell your personal data, and we do not use it for advertising or profiling.

Only where it's needed to deliver your trip:

• Guides, hotels and transport operators you have booked — they receive the details needed to provide the service, not your full account history.
• Government of Bhutan authorities — for visa processing and the Sustainable Development Fee, as required by law.
• Airlines and flight booking partners, where we book flights for you.
• Service providers that run our systems — hosting, database and email delivery. They process data on our instructions only.

Our systems are hosted with cloud providers whose servers may be located outside Bhutan. Where personal data is transferred internationally, we rely on providers who apply appropriate safeguards.

Booking and financial records are retained for 7 years to meet accounting and tax requirements. Account data is kept while your account is open. Enquiries that don't become bookings are kept for 24 months. GPS location data is retained for 12 months after the trip, for billing verification and dispute resolution.

You can ask us for a copy of the personal data we hold about you, ask us to correct anything inaccurate, ask us to delete data we no longer have a legal reason to keep, or object to a particular use. Contact us and we will respond within 30 days.

Note that we may be unable to delete records we are legally required to retain, such as booking and tax records, until the retention period has passed.

We use cookies that are necessary for the site to work — keeping you signed in and holding your session securely. Your currency preference is stored locally in your own browser and never sent to us. We do not use advertising or third-party tracking cookies.

Passwords are hashed, sessions are signed, and access to traveller data is restricted by role — a guide or hotel sees only the bookings that concern them. No system is perfectly secure, but we take reasonable measures to protect your information.

Accounts are for adults. Children travel as part of a booking made by an adult, and we collect their details only as needed for visas and trip arrangements.

To exercise any of the rights above, or to ask how your data is handled, please contact us.