Privacy policy
What we collect, what we don't, and how long we keep it.
Plain English. The actual rules. No 'we may share with our partners' clauses that mean anything.
Last updated: 2 May 2026
Who we are
Trek Permits Nepal is operated by a Singapore-registered entity. We're a permit procurement service for trekkers visiting Nepal. We're not affiliated with NTNC, DNPWC, or any Nepal government body.
What we collect
When you use the service, we collect only what's needed to issue your permit:
- For each trekker: first / middle / last name, nationality, passport number (typed — not a scan), date of birth, gender, occupation, and a selfie photo.
- For the order: your email, an emergency phone number, your home address, and the trek dates / region.
- For payment: Stripe handles your card details directly — we never see them. We retain only Stripe's payment ID and the amount paid.
We don't ask for, and won't accept, a scan or photograph of your actual passport. The typed passport number is enough.
How we use it
Your details are submitted to NTNC's official ePermit system in order to issue your permit. NTNC requires this information by law for any conservation-area entry permit. We also use your email to send you the permit, order confirmations, and replies if you contact support.
We don't sell your data. We don't share it with marketing partners. We don't use it for advertising. We don't profile you.
How long we keep it
Sensitive data — passport number and selfie: deleted within 7 days of permit delivery. The selfie is removed from our R2 storage by an automatic lifecycle rule; the passport number is purged from our database by a scheduled job.
Order metadata — name, email, dates, amount paid: retained for accounting and tax compliance reasons (typically 7 years per Singapore regulations).
Email correspondence: retained while the support thread is active and for a reasonable follow-up period afterwards. You can ask for it to be deleted.
Who else processes your data
A few necessary third parties:
- Cloudflare hosts the site and stores the data (Pages, Workers, D1, R2).
- Stripe processes your payment.
- Resend sends transactional email.
- NTNC receives your trekker details for the purpose of issuing the permit.
Each of these has its own privacy policy and processes data on its own legal basis.
Your rights
You can ask us to: send you a copy of the data we hold about you, correct anything inaccurate, delete your account-level data (subject to accounting retention), or stop processing your data for any non-essential purpose. Email privacy@trekpermitsnepal.com and we'll respond within 30 days.
Cookies and analytics
We use a privacy-friendly, cookie-less analytics tool (Cloudflare Web Analytics) to understand which pages people read. No personally-identifying tracking, no third-party cookies, no fingerprinting. We don't run advertising trackers.
Changes
If we materially change this policy we'll update the date at the top and email customers with active orders.
Contact
Privacy questions: privacy@trekpermitsnepal.com. Anything else: hello@trekpermitsnepal.com.