1. Introduction
HUX EXPED Pvt. Ltd. ("we", "us") respects your privacy. This policy explains what personal data we collect through this website and our booking process, why we collect it, how long we keep it and the choices you have. We are the data controller for the information described here.
2. Information we collect
- Account data: your name, email address and a securely hashed password when you register. If you sign in with Google, we receive your name, email and profile picture from Google — never your Google password.
- Booking data: the Trip you book, travel dates, party details, and information you volunteer such as dietary needs, medical notes and emergency contacts.
- Payment data: when you pay by card, payment is processed by Stripe. We never see or store your full card number — we store only a payment reference and status. For bank transfers we store the proof-of-payment file you upload.
- Technical data: IP address, browser type and pages visited, collected through cookies and similar technologies (see our Cookie Policy).
3. How we use your data
- To create and manage your account and let you sign in.
- To take, confirm and administer your bookings and payments.
- To keep you safe on Trips (medical, dietary and emergency-contact information is shared only with the guides who need it).
- To respond to your enquiries and provide customer support.
- To send you service messages about your bookings, and — only with your consent — our newsletter, which you can unsubscribe from at any time.
- To meet our legal, accounting and safety obligations.
4. Our legal basis
Where applicable law (such as the EU/UK GDPR) requires a legal basis, we rely on: performance of our contract with you (to deliver a booked Trip); your consent (for marketing and non-essential cookies); our legitimate interests (to run and secure our business); and compliance with legal obligations.
6. How long we keep it
We keep your account data for as long as your account is active. We keep booking and payment records for as long as needed to run the Trip and then for the period required by tax and accounting law. When data is no longer needed we delete or anonymise it. You can ask us to delete your account at any time.
7. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct or delete it, to restrict or object to certain processing, to withdraw consent, and to data portability. To exercise any of these, email us — see below.
8. Security
We protect your data with measures appropriate to its sensitivity: passwords are stored only as salted hashes, connections are encrypted in transit, card details are handled entirely by Stripe, and access to booking data is limited to staff who need it. No system is perfectly secure, but we work to keep your information safe.
9. Contact us
To exercise your rights or ask any privacy question, contact us at hello@huxexped.com or HUX EXPED Pvt. Ltd., Thamel, Kathmandu, Nepal. If you are in the EU/UK and we cannot resolve your concern, you may also complain to your local data-protection authority.
