---
title: "Privacy Policy | Himalayan Travel Guide"
description: "This notice covers nepaltibetbhutan.com. You can read the public guide without an account."
canonical: "https://www.nepaltibetbhutan.com/privacy-policy"
---

Privacy policy

# How this website handles information.

This notice covers nepaltibetbhutan.com. You can read the public guide without an account. Information is collected when it is needed to deliver and protect the site, respond to a planning request, operate approved discussions or measure the site after you choose optional analytics.

**Effective** 12 August 2026 **Updated** 20 August 2026 **Format** Plain-English page

Effective date **12 August 2026**

Last updated **20 August 2026**

Privacy contact **[info@amigotrekking.com](mailto:info@amigotrekking.com)**

**Review before legal sign-off**

- MANUAL LEGAL REVIEW REQUIRED: confirm the responsible legal entity/controller and whether a separate Amigo Treks privacy notice governs any information after a booking enquiry is handed to the operator.

- MANUAL LEGAL REVIEW REQUIRED: confirm legal bases for each processing purpose, the treatment of voluntarily supplied accessibility, dietary or health-related planning information, international transfer safeguards, children's position and the applicable complaint route.

## Planning enquiry attribution

When you submit a planning enquiry, the server records your IP address and a device summary (device type, browser and operating system) to protect the lead inbox and help the planning team understand the request. Where the hosting proxy provides it, country and city are inferred from proxy headers; the site does not make a separate third-party geolocation lookup.

The submission can also include up to 30 same-origin page paths visited during the current browser session, plus referrer, viewport, language and timezone details. This is not arbitrary browser history. These details are stored with the enquiry for reply context and operational attribution; do not include passport, payment or medical documents in the form.

## 1. Who we are

The website is Himalayan Travel Guide at nepaltibetbhutan.com. Public site copy identifies it as maintained in association with Amigo Treks & Expedition, a Kathmandu-based trekking and tour operator. The site uses info@amigotrekking.com as its public privacy and editorial contact.

The exact legal entity responsible for this website and the controller relationship with Amigo Treks have not been verified in the audited repository. That point is flagged above for legal confirmation rather than guessed here.

## 2. Scope

This notice covers browsing, the public guide pages, privacy choices, the contact/planning form, account registration and public discussions on this website. When you follow a link to Amigo Treks, WhatsApp, an authority, carrier, map or another service, that service's own terms and privacy information apply.

## 3. Information you provide

The public planning flow currently asks for a trip or destination, travel window, group size, name, email or WhatsApp number, and a message. It also sends routing information such as the page or entry point that led to the form, and a consent signal for the reply. The server stores the enquiry in the lead-submissions database for the planning team.

You may mention practical accessibility, dietary or mobility requirements that affect planning. Please do not send medical records, diagnoses, passport scans, payment-card details, passwords or other highly sensitive documents through the general enquiry form. If a later confirmed booking needs documents, ask the operator how they will be collected and who can access them.

## 4. Accounts and community

An account registration asks for a name, email address and password. The audited code stores the password using Laravel's password hashing, plus account approval, suspension and login-lifecycle fields. New accounts are reviewed before discussion access is enabled; public registration is available but participation is approval-gated.

Approved users can publish questions or comments on public guide pages. A public contribution displays the user's name, contribution text and date. Email addresses, password hashes, internal IDs and moderation/audit records are not intended to be public. Public discussion content is rendered on indexable guide pages; users should assume a post may be copied or found by search engines.

The audited code has no public self-service account-deletion route. Ask the privacy contact about deletion or correction. Published contributions are not automatically deleted by the current discussion code, so this notice does not promise that account deletion removes or anonymises every post. Suspended users' contributions are hidden from the public discussion query while the suspension remains in effect.

## 5. Why information is used

Information is used to deliver and secure the site, answer trip-planning requests, manage accounts and approvals, display and moderate community contributions, prevent spam or abuse, troubleshoot technical problems, maintain correction records and—only after the relevant choice—understand how the public library is used.

The site does not use the planning form to create a booking automatically. A later booking is a separate operator process. The audited site has no newsletter subscription flow and no payment form on the public guide pages.

## 6. Analytics and consent

Production and source inspection identify Google Analytics 4 with measurement ID G-CTV8MEV6LE. The current frontend implements a basic opt-in consent flow: the Google tag is not loaded until the visitor allows optional analytics. The site can be read when analytics is declined.

Before opt-in, the code queues denied Google consent signals but does not load the Google tag. After opt-in it loads the tag and sends a page-view event. The current implementation keeps advertising storage, ad-user-data and ad-personalization denied; only analytics is enabled by the analytics choice. You can reopen Privacy choices from the footer and withdraw the choice for future loading; the code does not retroactively erase provider records already received.

## 7. Services and international processing

Verified services include the Laravel/SQLite application and its session, security and database features, Google Analytics 4 when allowed, and outbound links to Amigo Treks and WhatsApp. The form uses a honeypot and server-side throttling; no CAPTCHA provider was found in the audited code. No email-delivery provider, CDN/security vendor, hosting region or error-monitoring provider was verified from the repository.

Google, WhatsApp, hosting, security and any operator systems may process information outside your country. The exact locations, processors and transfer safeguards were not verified here. Do not treat this paragraph as a promise about a particular server region or transfer mechanism.

## 8. Retention

The site does not implement a fixed public deletion schedule for enquiries, accounts, discussions, moderation records or server logs in the audited code. Enquiries are stored in the lead-submissions table with status, notes and timestamps; account and discussion records are stored in the application database. Information should be kept only as reasonably necessary to answer a request, operate the service, maintain a correction or moderation record, meet legal obligations and resolve disputes.

Google Analytics and external services apply their own retention settings and policies. A privacy request should identify the page, account or message involved without sending a new copy of sensitive material.

## 9. Rights and choices

Depending on where you live and the law that applies, you may have rights such as access, correction, deletion, restriction, objection, withdrawal of consent or portability. Contact info@amigotrekking.com with enough context to locate the information. We may need to verify a request and some records may need to be retained for security, legal or dispute reasons.

Declining analytics does not prevent access to the public guide. You can change the analytics choice from the footer's Privacy choices control. Following a third-party link creates a separate request to that service, which may need its own rights process.

## 10. Children

The public guide and discussion account flow are not designed as a service for children. The audited code does not state a verified age threshold, and this notice does not invent one. MANUAL LEGAL REVIEW REQUIRED: confirm the intended age position and any duties that apply in the countries served.

## 11. Security

The audited application uses password hashing, session-based authentication, CSRF protection on Laravel forms, rate limits on public submissions and login/registration, server-side validation, security headers and restricted administration routes. These measures reduce risk but do not make an internet service completely secure. No transmission or storage system can guarantee absolute security.

## 12. Changes

This notice shows an effective date and a last-updated date. We will update the page when the website's collection, use, disclosure or privacy-choice behavior materially changes. A material change should not be hidden behind a silent date edit.

## Questions about this page

Can I read without accepting analytics?+
Yes. Optional analytics is not required to read the public guide. The tag is blocked until you allow it.
What should I put in a planning request?+
Include the route, dates, group size and the decision you need help with. Do not include medical records, passport scans, payment details or passwords.
Does deleting an account delete public posts?+
The audited code has no self-service deletion flow and does not automatically remove published discussion posts. Contact the privacy address for a request; the result depends on the records and applicable law.

This plain-English page is a description of the audited website and is not a substitute for jurisdiction-specific legal review.

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://www.nepaltibetbhutan.com/#organization","name":"Himalayan Travel Guide","description":"A practical, source-aware travel planning library for Nepal, Tibet, Bhutan, Mount Kailash and the wider Himalaya, published at nepaltibetbhutan.com.","url":"https://www.nepaltibetbhutan.com/","logo":{"@type":"ImageObject","@id":"https://www.nepaltibetbhutan.com/#logo","url":"https://www.nepaltibetbhutan.com/_next/static/images/himalayan-travel-guide-logo.webp"},"founder":{"@id":"https://www.nepaltibetbhutan.com/author-dinesh-bhusal#person"},"parentOrganization":{"@id":"https://www.amigotrekking.com/#organization"},"sameAs":["https://www.amigotrekking.com/"],"address":{"@type":"PostalAddress","addressLocality":"Kathmandu","addressCountry":"NP"},"contactPoint":{"@type":"ContactPoint","contactType":"editorial corrections","email":"info@amigotrekking.com"}},{"@type":"Organization","@id":"https://www.amigotrekking.com/#organization","name":"Amigo Treks \u0026 Expedition","url":"https://www.amigotrekking.com/"},{"@type":"WebSite","@id":"https://www.nepaltibetbhutan.com/#website","name":"Himalayan Travel Guide","url":"https://www.nepaltibetbhutan.com/","publisher":{"@id":"https://www.nepaltibetbhutan.com/#organization"},"inLanguage":"en"}]}
{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.nepaltibetbhutan.com/privacy-policy#webpage","url":"https://www.nepaltibetbhutan.com/privacy-policy","name":"How this website handles information.","description":"This notice covers nepaltibetbhutan.com. You can read the public guide without an account. Information is collected when it is needed to deliver and protect the site, respond to a planning request, operate approved discussions or measure the site after you choose optional analytics.","isPartOf":{"@id":"https://www.nepaltibetbhutan.com/#website"}},{"@type":"BreadcrumbList","@id":"https://www.nepaltibetbhutan.com/privacy-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Himalayan home","item":"https://www.nepaltibetbhutan.com/"},{"@type":"ListItem","position":2,"name":"Privacy policy","item":"https://www.nepaltibetbhutan.com/privacy-policy"}]},{"@type":"FAQPage","@id":"https://www.nepaltibetbhutan.com/privacy-policy#faq","mainEntity":[{"@type":"Question","name":"Can I read without accepting analytics?","acceptedAnswer":{"@type":"Answer","text":"Yes. Optional analytics is not required to read the public guide. The tag is blocked until you allow it."}},{"@type":"Question","name":"What should I put in a planning request?","acceptedAnswer":{"@type":"Answer","text":"Include the route, dates, group size and the decision you need help with. Do not include medical records, passport scans, payment details or passwords."}},{"@type":"Question","name":"Does deleting an account delete public posts?","acceptedAnswer":{"@type":"Answer","text":"The audited code has no self-service deletion flow and does not automatically remove published discussion posts. Contact the privacy address for a request; the result depends on the records and applicable law."}}]}]}
```