Legal
Privacy policy
Last updated 1 July 2026. How we collect, use and protect your personal information.
What we collect
- Contact details: name, email, phone and billing address
- Travel details: passenger names, dates of birth, passport and permit data
- Payment data: tokenised card references — we never store full card numbers
- Usage data: device, pages viewed and searches, used to improve the product
How we use it
- To make, change and support your bookings
- To share required passenger data with airlines, hotels and operators
- To send booking updates by email, SMS and WhatsApp
- To send offers only when you have opted in — unsubscribe any time
Your rights
- Request a copy of the data we hold about you
- Ask us to correct or delete data we no longer need
- Withdraw marketing consent without affecting your bookings
- Contact [email protected] — we respond within 15 days
Security & retention
Data is encrypted in transit and at rest, access is role-based, and payment flows are PCI-DSS compliant. Booking records are retained for seven years to meet Nepali tax and audit requirements, after which they are anonymised.