Website Privacy Policy

This Website Privacy Policy ("Policy") sets out the terms under which Peaks of Himalayas ("Company", "we", "our", or "us") collects, retains, processes, transfers, and safeguards the personal data of individuals ("User", "Participant", "you") who browse our website (peaksofhimalayas.in), interact with our Himalayan Concierge, submit expedition inquiries, or register for high-altitude trekking and touring itineraries.

By accessing or using our website, submitting an expedition inquiry, or reserving an itinerary, you acknowledge that you have read, understood, and consented to the data collection and processing practices described in this Policy, in conjunction with our Terms & Conditions.

This Policy is established in strict adherence to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, India’s Digital Personal Data Protection (DPDP) Act, 2023, and international benchmarks for bespoke expedition travel.

Bespoke Expedition Planning: Preparing tailored itineraries, altitude acclimatization schedules, mountain equipment logistics, and transparent price quotations.

Statutory Permits & National Park Clearances: Submitting verified participant manifests to Forest Departments, District Magistrates, statutory mountaineering authorities, and local rescue teams.

Direct Concierge Communication: Transmitting automated inquiry acknowledgements, PDF expedition dossiers, packing checklists, weather advisories, and booking confirmations to your email and WhatsApp.

Emergency Coordination & Wilderness Search/Rescue: In the event of Acute Mountain Sickness (AMS), High Altitude Pulmonary Edema (HAPE), High Altitude Cerebral Edema (HACE), avalanche, severe weather, or injury, providing prompt medical information to helicopter evacuation fleets, SDRF/NDRF, and army medical outposts.

Legal & Regulatory Compliance: Maintaining accounting books, GST invoicing, and fulfilling statutory requirements under Indian law.

Medical disclosure forms, pulse-oximeter logs taken during acclimatization checks, and medication declarations are treated as Sensitive Personal Data under Indian law.

Access to participant medical profiles is restricted exclusively to Founder Praveen Kirar, Chief Medical Consultants, and lead certified guides.

In severe wilderness emergencies involving emergency check-ins or helicopter rescue requests, critical medical metrics (oxygen saturation, heart rate, symptoms) and GPS coordinates may be transmitted over encrypted emergency communication links to dispatch emergency triage.

During expeditions, our team may capture high-resolution summit photographs, group moments, and landscape drone footage to document the journey and celebrate achievements.

Right to Opt-Out: If you prefer not to appear in promotional media, website reels, or journal publications, you may inform our expedition concierge in writing via email before departure. We will unconditionally honor your privacy.

Participants must respect the personal privacy of fellow trekkers, camp staff, and indigenous Himalayan communities when photographing or publishing images on social media.

Encryption in Transit & At Rest: All web traffic, form submissions, and inquiries are protected with 256-bit SSL/TLS cryptographic encryption. Database volumes containing participant dossiers are securely walled behind enterprise firewalls.

Access Control: Administrative access to inquiry databases and permit documentation is governed by strict role-based authentication and multi-factor security credentials.

While we deploy state-of-the-art security practices, no digital transmission over the internet can be guaranteed as 100% impenetrable. In the improbable event of a data breach impacting personal rights, affected users will be notified in compliance with statutory laws.

Our website uses standard HTTP session cookies and non-intrusive analytical scripts to facilitate seamless navigation, cache package data for sub-second load times, and analyze aggregated traffic trends.

We do not employ third-party cross-site behavioural tracking cookies that follow you across the internet. You may configure your browser to decline or block cookies; however, certain interactive booking elements may require session storage to function accurately.

Inquiry and booking data is retained only for as long as is necessary to organize the expedition, handle customer support, fulfill statutory tax retention mandates, or defend against legal claims.

Government permit copies and sensitive medical screening sheets are securely purged or anonymized following the safe conclusion of the trekking season, save for statutory records required by forestry or law-enforcement directives.

Right to Access: You may request a formal digital copy of the personal information we maintain concerning your profile and expedition dossiers.

Right to Rectification: You are entitled to have inaccurate, incomplete, or outdated personal contact details corrected promptly upon request.

Right to Erasure (Right to be Forgotten): You may request the permanent deletion of your personal records from our databases, provided retention is no longer mandated by statutory tax, criminal investigation, or permit regulations.

Withdrawal of Consent: You may revoke consent for non-essential digital communications at any time by contacting our Privacy Desk.

Our website and bespoke mountain expeditions are not targeted directly at individuals under the age of 18 without parental involvement.

We do not knowingly collect personal data from minors unless provided directly by a parent or legal guardian for family expeditions and mandatory permits.

This Policy and any disputes arising out of the handling of personal data shall be governed exclusively by the laws of the Republic of India.

Any legal claims or proceedings related to privacy, data protection, or website operations shall be subject to the exclusive jurisdiction of the competent courts in the State of Himachal Pradesh, India.