Last updated: 24 June 2026
This Privacy Policy explains how Spade Himalaya (“we”, “us”, or “our”) collects, uses, shares, and protects your personal data. Also, it applies when you visit our website, contact us, or book a trek or tour with us. Please read it together with any booking terms we give you.
A quick summary
Here is the short version, in plain words:
- We collect the details we need to plan your trip and keep you safe, such as your name, contact details, passport details, and basic health notes.
- We use that data to answer your questions, run your trip, take payment, and meet legal rules.
- We share data only with the people who help deliver your trip, such as your guide, lodges, and permit offices, and with service providers who run our website and payments.
- We do not sell your personal data.
- You have rights over your data, and you can contact us at any time to use them.
So the full detail is below.
Who we are
Spade Himalaya is a trekking and tour company based in Lalitpur, in the Kathmandu Valley, Nepal. For any privacy question, you can reach us using the contact details at the end of this policy. So we are the data controller for the personal data described here.
Information we collect
Information you give us. When you contact us or book a trip, you may give us:
- Your name, email address, phone number, and home address
- Your nationality, date of birth, and passport details (needed for permits)
- Emergency contact details
- Health and fitness notes, and dietary needs (needed for your safety on the trail)
- Your trip choices, dates, and preferences
- Payment details for your deposit and balance
- Any messages or content you send us
Information we collect automatically. When you use our website, we may collect:
- Your IP address, browser type, and device information
- The pages you visit and how you use the site
- Cookie data (see the Cookies section below)
We collect this through our website forms, our booking process, server logs, cookies, and the services we use to run the site.
How we use your information
We use your personal data to:
- Reply to your questions and plan your trip
- Run your trek or tour and arrange guides, permits, lodging, and transport
- Keep you safe, including sharing relevant health notes with your guide
- Take and confirm payments
- Send you booking updates and important trip information
- Send marketing or newsletters, only if you have opted in
- Meet our legal, tax, and accounting duties
- Improve our website and services
Where the law requires a legal basis (for example, under the GDPR), we rely on your consent, the performance of our contract with you, our legitimate business interests, and our legal obligations.
When we share your information
We share your data only as needed to deliver your trip or run our business. This may include:
- Your trekking guide and crew
- Lodge, hotel, and transport providers
- Government permit and immigration offices
- Travel insurance or rescue services, if needed in an emergency
- Service providers who run our website, hosting, and payments
- Authorities, where the law requires it
We do not sell your personal data, and we do not share it for someone else’s marketing.
International data transfers
We are based in Nepal, and our service providers may be in other countries. So when you book a trip, your data may be transferred to and processed outside your home country. When we do this, we take reasonable steps to keep your data protected, in line with this policy and applicable law.
How long we keep your data
We keep your personal data only as long as we need it. In practice, this means:
- Enquiry and contact data: up to 24 months after your last contact, if you do not book.
- Booking and payment records: up to 7 years, to meet tax and accounting law in Nepal.
- Marketing consent data: until you unsubscribe or ask us to stop.
- Website analytics data: up to 14 months.
After these periods, we delete or anonymize your data.
How we protect your data
We use reasonable technical and organizational measures to protect your data. For example, we limit who can access it, and we use secure systems for our website and payments. Still, no method of storage or transfer over the internet is fully secure, so we cannot promise absolute security.
Your privacy rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct data that is wrong or incomplete
- Ask us to delete your data
- Limit or object to how we use your data
- Receive your data in a portable form
- Withdraw your consent at any time
- Complain to your local data protection authority
If you are in the European Union or the United Kingdom, these rights come from the GDPR. If you are in California, you have similar rights under the CCPA, including the right to know and the right to delete. To use any of these rights, just contact us using the details below. We will respond within the time the law allows.
Cookies and website tracking
Our website uses cookies and similar tools. Some are essential, and they make the site work and keep it secure. Others are analytics cookies, and they help us understand how visitors use the site.
Here are the main services we use:
- WordPress, our website platform, sets essential cookies that keep the site working.
- Cloudflare provides security and content delivery, and it sets essential security cookies.
- LiteSpeed caches our pages so they load faster.
- Google Analytics sets analytics cookies that show us how the site is used, so we can improve it.
We do not use advertising pixels or social media tracking on our website. Also, you can control or delete cookies in your browser settings. If you block essential cookies, then some parts of the site may not work. You can opt out of Google Analytics with the Google Analytics opt-out tool.
Links to other websites
Our website may link to other sites, such as our social media pages or partner services. We are not responsible for the privacy practices of those sites. So please read their own privacy policies before you share any data with them.
Children’s privacy
Our services are meant for adults. Also, we do not knowingly collect data from children under 16 without a parent or guardian’s involvement. If you believe a child has given us data, then please contact us, and we will remove it.
Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top. For big changes, we will give a clear notice on our website. Please check this page now and then to stay informed.
Governing law
This Privacy Policy is governed by the laws of Nepal. So any dispute about it will be handled by the courts of Nepal. We still respect the data rights of visitors from other countries, including the European Union, the United Kingdom, and the United States, as described above.
How to contact us
If you have any question about this policy, or you want to use your privacy rights, please contact us.
Spade Himalaya
- Location: Lalitpur, Kathmandu Valley, Nepal
- Phone and WhatsApp: +977 9747504546
- Email: [email protected]