Privacy policy

Tripnep (“we”) is responsible for the personal data described here, as the controller.

Address: Thamel, Kathmandu, Nepal

Questions about privacy: the contact details on this website.

We collect what we need to arrange your trip and look after you:

• Booking details: your name, email, phone, the trips and dates you book, and the travellers in your group.
• Traveller details we ask for before a trip, such as dietary needs, emergency contacts or passport details, and signed waivers.
• Payments: amounts, dates and how you paid. Card details are handled by our payment provider; we never see full card numbers.
• Messages: enquiries, chats and emails between you and us.
• Website use: the pages you visit and, only where you allow it or the law permits, analytics and advertising cookies (see Cookies).

We only use personal data when the law allows it:

• To arrange and deliver the trips you book, and to answer you (a contract with you, or steps you asked for before one).
• To keep accounts, invoices and tax records (a legal obligation).
• To keep the website and payments secure and to improve our service (our legitimate interests, balanced against yours).
• To send you news and offers, and to use analytics and advertising cookies (your consent, which you can withdraw at any time).

We share personal data only with those who need it to deliver your trip (such as guides, hotels and transport partners) and with service providers that process it for us under contract:

We do not sell personal data for money.

• Tourtify: Hosts your website, bookings and customer records (processor under the DPA).

Some of these providers process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as adequacy decisions or standard contractual clauses.

• Bookings, payments and invoices: 7 years, as accounting and tax law requires.
• Checkouts that were never paid: personal details removed after 90 days.
• Your customer record: for as long as you book with us, until you ask us to delete it.
• Enquiries: for as long as they’re useful to answer you, until you ask us to delete them.
• Marketing: until you unsubscribe.
• Records of your cookie choices: 24 months.

Our website uses cookies and similar technologies. Strictly necessary ones are always on; the others only with your consent where the law requires it, and you can change your choice at any time from “Cookie settings” at the bottom of every page. We honour the Global Privacy Control signal.

• Strictly necessary: tf_consent, portal_session, tourtify.cart, tourtify:checkout, tourtify_attribution
• Marketing: YouTube / Vimeo

Depending on where you live, you can ask us to: see the personal data we hold about you and get a copy; correct it; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent. You can also opt out of marketing at any time.

Use the “Your data rights” page on this website, or contact us at the contact details on this website. We’ll confirm it’s you by email and answer within the time the law where you live allows (usually 30 days, 45 days in the US).

We won’t treat you differently for using your rights.

Children can travel with us, but bookings are made by adults. We only collect a child’s details from the adult booking for them, for the trip.

This is version 1 of our policy, published 19 October 2026. When we change it, we publish the new version here.