Privacy Policy

2. Information We Collect

We collect information in several ways depending on how you interact with us. The categories of personal data we may collect include:

Information You Provide Directly

• Contact details — Full name, email address, phone number, and mailing address when you submit a contact inquiry, booking request, or newsletter subscription.
• Travel preferences — Destination of interest, preferred travel dates, number of travelers, special requirements, dietary restrictions, and medical information relevant to your trip.
• Passport and identity information — Passport number, nationality, date of birth, and visa details when required for booking flights, hotel reservations, or processing visa assistance on your behalf.
• Payment information — Billing details necessary to process tour payments, deposits, and refunds. We do not store complete credit card numbers on our servers; payment processing is handled by secure third-party providers.
• Correspondence — Any messages, feedback, reviews, or testimonials you send us via our contact form, email, WhatsApp, or social media channels.

Information Collected Automatically

• Device and browser data — IP address, browser type, operating system, screen resolution, and language preferences.
• Usage data — Pages visited, time spent on pages, referring URLs, click patterns, and search terms used on our site.
• Cookies and tracking technologies — Small text files placed on your device to remember preferences, analyze site traffic, and improve your browsing experience. See Section 7 for details on our cookie practices.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data with the following categories of recipients only as necessary to deliver our services:

• Travel service providers — Airlines, hotels, ground transport operators, local guides, and other tourism partners who require your details to fulfil the services you have booked.
• Government and immigration authorities — Embassies, consulates, and immigration offices when processing visa applications, travel permits (e.g., Tibet Travel Permit, restricted area permits), or fulfilling mandatory reporting requirements.
• Payment processors — Secure third-party payment gateways that handle financial transactions on our behalf.
• Insurance providers — Travel insurance companies when you have purchased insurance through our services or when processing a claim.
• Legal and regulatory bodies — Courts, law enforcement, or regulatory agencies when required by law, court order, or to protect our legal rights.
• Technology partners — Website hosting, analytics, and email marketing platforms that help us operate our website and communicate with you, subject to their own privacy policies and our data processing agreements.

When sharing data with partners in China, Tibet, Bhutan, India, or other international destinations, we take reasonable steps to ensure your information is handled in accordance with applicable data protection standards.

6. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access — You may request a copy of the personal information we hold about you.
• Correction — You may ask us to correct inaccurate or incomplete data.
• Deletion — You may request that we delete your personal data, subject to legal retention obligations.
• Restriction — You may ask us to restrict the processing of your data in certain circumstances.
• Portability — You may request that we provide your data in a structured, commonly used, and machine-readable format.
• Objection — You may object to the processing of your data for direct marketing purposes at any time.
• Withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the details provided in Section 10 below. We will respond to your request within thirty (30) days.

8. Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Secure storage of personal data on protected servers with restricted access.
• Regular security reviews and updates to our website and internal systems.
• Staff training on data protection best practices and confidentiality obligations.
• Secure disposal of physical documents containing personal information (e.g., passport copies) after the applicable retention period.

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected individuals and relevant authorities in the event of a data breach, in accordance with applicable laws.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within thirty (30) business days.