//
This policy tells you what personal information Nobel Holidays collects when you browse nobelholidays.com, plan a trek or tour, buy a flight ticket or message us, and what we do with it.
Who is responsible for your data? Nobel Holidays, a Kathmandu-based tour and travel company licensed through Nepal Tourism Board, decides why and how your personal data is used. In data protection terms we are the "controller". We respect your privacy and handle your personal information in accordance with applicable data protection laws, including Nepal's Individual Privacy Act, 2075 (2018).
Who this covers. Website visitors, people who request a quote, travellers on our trips, flight-ticket customers, newsletter and journal readers, and anyone who writes to us by email, phone or WhatsApp.
Questions? Please read this policy first. If you need further assistance, feel free to contact us.
We only ask for what we need to plan, run and support your journey. Depending on how you deal with us, that may include:
Identity details: Name, date of birth, gender, nationality, passport number and expiry (needed for permits and tickets).
Contact details: Email, phone and WhatsApp number, home and billing address, emergency contact.
Booking details: Trips and flights you enquire about or book, dates, group size, room and transport preferences, special requests.
Payment details: Card or bank-transfer information and payment history. Card data is handled by our payment providers; we do not keep full card numbers.
Trek and fitness details: Past trekking or altitude experience, fitness level, equipment needs.
Device and website data: IP address, browser and device type, pages viewed, referring site, approximate location.
Communications: Messages, enquiry forms, call notes, reviews and survey answers you send us.
Account and preference data: Login details if you create an account, marketing choices, saved trips.
Sensitive information. High-altitude travel can carry health risks, so we may ask about medical conditions, medication, allergies, dietary needs, mobility limits or travel-insurance and evacuation cover. Some trips may also involve religious or cultural sites where belief or custom affects arrangements. We collect this only when it is needed for your safety or arrangements, and we ask for your clear consent first. You can withdraw consent at any time, though this may limit which trips we can safely offer.
Photos and video. If you appear in photos or videos taken by our guides on a trip, we use them for your trip record only. We publish them in marketing material only with your permission.
We use personal data only where we have a valid reason. The following explains each purpose and the reason behind it.
Answer enquiries, prepare itineraries and quotations: Steps taken at your request before a contract.
Book and run your trek, tour or flight; arrange permits, guides, lodging and transport: Performing our contract with you.
Take payments, issue refunds and keep financial records: Contract, and legal duty to keep accounts.
Look after your safety, including medical needs, altitude monitoring, emergencies and evacuation: Your consent for health details; protecting vital interests in an emergency.
Meet permit, tax, immigration, tourism-licence and police-reporting rules: Legal obligation.
Keep the site secure, prevent fraud, and fix faults: Our legitimate interest in running a safe business.
Understand how the site is used and improve trips and service: Our legitimate interest, or consent where cookies require it.
Send newsletters, journal updates and offers: Your consent, or legitimate interest for past customers where the law allows.
Publish your review or photos: Your consent.
Handle complaints, claims and disputes: Legitimate interest and legal claims.
We do not sell your personal data. We do not make decisions about you using fully automated processes that have legal or similarly significant effects.
We may email or message you about new routes, seasonal departures, festival guides and special offers, using your contact details and what you have told us you enjoy (for example cultural tours rather than high treks).
We share information only as far as needed for the purpose, and never to sell it.
Providers act on our instructions and must keep your data secure and confidential. Where you ask us to book through a third party with its own terms, that party's privacy notice also applies.
Our team is in Nepal, but you may live elsewhere, and airlines, insurers and cloud tools we use may store data in other countries. Your information can therefore travel between Nepal, your home country and other places.
When data leaves your region, we take steps to keep it protected, such as using providers with contractual data-protection terms (for example standard contractual clauses), choosing services in countries recognised as adequate where possible, and sharing only the details a recipient truly needs. Some transfers are unavoidable to deliver your trip, for example giving a lodge your name or an airline your passport details.
Cookies are small files saved on your device. We use them in three ways:
You can accept, refuse or delete cookies through the banner on our site or your browser settings. Blocking some cookies may stop parts of the site, such as booking forms, from working. Links to other sites, including WhatsApp and social platforms, are governed by those sites' own policies.
Our website and bookings are meant for adults. Young people under 18 travel with us only when a parent or legal guardian makes the booking or gives written consent, and we collect only the details needed for permits, safety and arrangements. If you believe a child has sent us information without a guardian's knowledge, tell us and we will delete it promptly.
Keeping data safe. We limit access to staff and guides who need it, use secure connections and password controls, keep passport and health details to the minimum needed, and require partners to protect what we share. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the relevant authority as the law requires.
How long we keep it. We keep data only as long as the purpose lasts or the law demands.
Enquiries that do not lead to a booking: Up to 2 years.
Booking, payment and tax records: As required by Nepali tax and company law, commonly several years after the trip.
Health and medical details: Deleted soon after the trip ends, unless an incident or claim requires longer.
Marketing preferences: Until you opt out or stay inactive for a long period.
Website analytics: Short, rolling periods set in our analytics tools.
After that we delete the data or anonymise it so it no longer identifies you.
Your rights. Subject to the law that applies to you, you may ask us to:
We aim to reply within one month. We may need to confirm your identity first. If you are unhappy with our answer, you may complain to the data protection authority where you live, but we would welcome the chance to put things right first.
Contact us.
Changes. We review this policy regularly. When we make a significant change, we will update the date at the top and, for important changes, notify you by email or on the site. Please tell us if your details change so what we hold stays accurate.
