Privacy policy

Your data, handled with care

What we collect when you enquire or travel with us, why we collect it, who helps us process it, and how you stay in control.

Last updated 29 September 2026

01Who we are

Blessed Trek Nepal (registered as Blessed Trek) is a trekking operator based in Pokhara, Nepal, registered with the Nepal Tourism Board (Nepal Tourism Board Reg. No. 391621/82/83). We are the controller of the personal data described in this policy.

Questions about privacy, including requests to use your rights, can be sent to [email protected].

02Data we collect

We only collect what we need to answer your enquiry and plan your trek.

  • Enquiry form: your name, email address, chosen expedition, preferred month, group size and any message you write.
  • Direct contact: anything you send us by email, phone or WhatsApp.
  • Bookings: passport details, emergency contacts, insurance and health information needed for permits and your safety, collected only once you book.
  • Technical data: IP address, browser type and pages requested, recorded in server logs by our hosting providers for security.
  • Analytics and marketing data: collected only if you allow it in the cookie banner (see Cookies).

03How we use your data

  • To reply to your enquiry and prepare itineraries and quotes (steps taken at your request before a contract).
  • To operate your trek, obtain permits and keep you safe (performance of a contract and vital interests).
  • To keep the website secure and prevent abuse (legitimate interests).
  • To understand how the site is used and to measure advertising, only with your consent.

We never sell your personal data, and we do not use it for automated decision-making.

04Who processes your data

We use trusted service providers who process data on our behalf under contract:

  • Supabase: secure database storage for enquiries.
  • Resend: delivery of enquiry and confirmation emails.
  • Vercel and Cloudflare: website hosting, content delivery and security logs.
  • WhatsApp (Meta): only if you choose to message us there.
  • Google Analytics and Meta Pixel: only if you consent to analytics or marketing cookies.

05Cookies and local storage

Strictly necessary storage is always on: we save your cookie choice in your browser's local storage (key “bt-consent”) for up to 365 days, after which we ask again.

  • Analytics (optional): Google Analytics cookies such as _ga and _ga_* measure visits and page views with IP anonymisation.
  • Marketing (optional): the Meta Pixel cookie _fbp measures the results of our Facebook and Instagram advertising.

Optional cookies are blocked until you accept them. You can change your choice at any time with the “Cookie settings” link in the footer; withdrawing consent deletes these cookies.

06How long we keep data

Enquiries are kept for [INSERT_RETENTION_PERIOD] and then deleted unless you book with us. Booking records are kept as long as Nepali tax and tourism law requires. Server logs are kept by our hosting providers for a short period for security.

07Your rights (GDPR and CCPA)

Wherever you live, you can ask us to:

  • Access the personal data we hold about you and receive a copy.
  • Correct inaccurate data or delete your data.
  • Restrict or object to processing, and withdraw consent at any time.
  • Receive your data in a portable format.
  • California residents: know what we collect, request deletion, and opt out of any sale or sharing. We do not sell or share personal information for cross-context behavioural advertising without consent, and we will not discriminate against you for using these rights.

To use any right, email [email protected]. We reply within 30 days. If you are in the EU or UK you may also complain to your local data protection authority.

08International transfers

Our providers may store data outside Nepal and your home country, including in the United States, the EU and Asia. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.

09Security

Data is encrypted in transit (HTTPS), enquiries are stored in a database that is not publicly accessible, and access is limited to the staff who need it.

10Children

Our website is not directed at children under 16, and we do not knowingly collect their data. Minors travel with us only through a parent or guardian's booking.

11Changes and contact

We may update this policy when our services or the law change; the date at the top shows the latest version.

Contact: [email protected] · +977 984-1161314 · Pokhara, Nepal