Effective date: September 15, 2026 | Last updated: September 15, 2026
Himalayan Yatra Private Limited ("Himalayan Yatra", "we", "us" or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit our website, contact us, request a quotation, subscribe to updates or book travel services through us.
This policy applies to customers, prospective customers, travel agents, business partners, website visitors and travellers whose information is provided to us by another person.
Please read this policy before giving us personal data. If you provide information about another traveller, you confirm that you are authorised to do so and that the traveller has received this policy.
1. Information We Collect
Depending on your interaction with us, we may collect:
- Identity details: including name, age, date of birth, gender and nationality.
- Contact details: including postal address, email address and telephone or WhatsApp number.
- Travel details: including destination, dates, itinerary, rooming preferences, group details and service requirements.
- Identification and permit details: including passport, visa, voter identification or other documents required by governments, hotels, airlines, transport operators or destination authorities.
- Payment and transaction details: Card or banking information may be processed directly by our payment service providers and may not be stored by us.
- Health, mobility, dietary or accessibility information: when you provide it and it is needed to arrange your journey safely.
- Communications: sent through email, telephone, WhatsApp, forms, social media or customer-support channels.
- Technical and usage information: such as IP address, device type, browser, referring page, pages viewed and cookie identifiers.
- Marketing preferences: enquiry history, feedback and survey responses.
2. How We Collect Information
We collect personal data directly from you and from sources connected with your enquiry or booking, including:
- Our website forms, email, telephone, WhatsApp and social-media pages.
- Travel agents, corporate clients, group leaders, family members or another traveller making a booking for you.
- Hotels, airlines, transport providers, destination partners, payment providers and other suppliers involved in your journey.
- Cookies, analytics tools and similar website technologies.
- Public sources or business directories, where permitted by law.
3. Why We Use Personal Data
We use personal data for lawful purposes connected with our business, including to:
- Respond to enquiries and prepare quotations or itineraries.
- Create, confirm, modify and manage travel bookings.
- Arrange accommodation, transport, sightseeing, permits, guides, meals, insurance and other requested services.
- Communicate operational information, payment reminders, service changes, emergencies and travel updates.
- Process payments, refunds, accounts, taxes and business records.
- Verify identity, prevent fraud, manage safety and comply with legal or regulatory requirements.
- Improve our website, services, customer support and travel products.
- Send promotional communications where you have consented or where otherwise permitted. You may opt out at any time.
- Establish, exercise or defend legal claims and resolve complaints.
4. Consent and Withdrawal
Where we rely on your consent, we will seek it through a clear notice or affirmative action. You may withdraw consent by contacting us using the details below or by using the unsubscribe link in a marketing email. Withdrawal will not affect processing already carried out lawfully. It may prevent us from providing a service when the relevant information is necessary for that service.
5. Marketing Communications
We may send travel offers, destination updates, catalogues and trade communications by email, WhatsApp, SMS or similar channels in line with your preferences and applicable law. You can opt out through the link in an email or by asking us to stop. Operational messages about an active enquiry or booking are not marketing messages and may continue where necessary.
6. When We Share Personal Data
We share only the information reasonably required to deliver services, run our business or comply with law. Recipients may include:
- Hotels, airlines, rail providers, transport operators, guides, activity providers and destination-management partners.
- Visa, permit, immigration, tourism, security and other government authorities.
- Payment gateways, banks, insurers, accountants and professional advisers.
- Website hosting, cloud storage, CRM, analytics, email, messaging and technology providers.
- Law-enforcement bodies, courts, regulators or other parties when disclosure is legally required or necessary to protect rights and safety.
- A successor or prospective purchaser in connection with a lawful business restructuring or transfer.
We do not sell personal data for monetary consideration.
7. International Data Transfers
Travel arrangements may require personal data to be sent to hotels, operators, authorities or other suppliers outside India, including in the destination country. Some technology providers may also process data in other countries. We limit transfers to what is needed for the stated purpose and take reasonable steps to use recipients that protect personal data in accordance with applicable requirements.
8. Cookies and Website Analytics
Our website may use necessary cookies and, where enabled, analytics or marketing technologies. These tools help the website function, remember preferences, measure traffic and understand campaign performance. You can control cookies through your browser and any cookie controls displayed on our website. Disabling certain cookies may affect website functionality.
9. Children’s Personal Data
Our travel services may include children travelling with a parent or lawful guardian. We collect a child’s personal data only when needed for a quotation, booking, permit, safety or travel service, and the information must be provided or authorised by the parent or lawful guardian. We do not knowingly direct behavioural advertising to children.
10. Data Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss or misuse. Access is restricted to people who need the information for legitimate business purposes. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
11. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including booking fulfilment, customer support, accounts, taxation, fraud prevention, dispute resolution and legal compliance. When the purpose is complete and no legal or legitimate retention requirement remains, we take reasonable steps to delete or anonymise the information.
12. Your Rights and Choices
Subject to applicable law and verification of your identity, you may ask us to:
- Provide information about the personal data we process and the entities with which it has been shared.
- Correct, complete or update inaccurate or incomplete personal data.
- Erase personal data that is no longer required, subject to legal and contractual retention obligations.
- Withdraw consent or opt out of marketing communications.
- Raise a grievance concerning our handling of personal data.
- Nominate another person to exercise applicable rights in the event of death or incapacity.
To make a request, contact us using the details in Section 16. We may ask for information needed to verify your identity and understand your request.
13. Your Responsibilities
Please provide accurate, complete and up-to-date information. Do not impersonate another person, submit false documents or provide another traveller’s data without authority. Travel agents, corporate clients and group leaders providing traveller information are responsible for giving those travellers an appropriate privacy notice and obtaining any consent required for the transfer.
14. Third-Party Websites and Services
Our website and messages may link to third-party websites, payment services, social-media platforms or booking tools. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing information.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, technology or legal obligations. The revised policy will be posted on this page with an updated date. Material changes may also be communicated through an appropriate channel.
For questions, requests, consent withdrawal or grievances concerning personal data, contact:
If you are not satisfied with our response, you may pursue any remedy available under applicable Indian law.