This is a draft and hasn’t had legal review. It describes what this site does today.
What do we collect?
We collect what you send us through the inquiry form, plus the page you sent it from. If you email, call or message us on WhatsApp instead, we also keep what you send that way.
| Detail | Required? |
|---|---|
| Your name | Yes |
| Your email address | Yes |
| Phone or WhatsApp number | No |
| The tour you’re asking about | No |
| Private, group or not sure | No |
| Your preferred date | No |
| Number of people | No |
| Your hotel | No |
| Whether you want to add hotel pick-up to a group tour | No |
| The start time you’d like, for a private tour | No |
| The guide language you’d like, for a private tour | No |
| Your message | No |
| The page you sent the form from | Added automatically |
We also record the time you sent the form, and a status we use to keep track of it, such as “replied” or “booked”. Our team can also add notes while handling it.
Your message can include anything you choose to tell us. The form suggests your flight times, walking limits and nationality, as these help us plan your tour and work out your entry fees. Please share only the health details that could affect the day, and don’t send copies of passports unless we ask.
Why do we collect it?
We use your details to answer your inquiry, send you a price and start time, and run your tour if you book. We don’t send marketing, and we don’t sell your details.
Where is it stored?
Your inquiry is stored in a database called D1, which is run by Cloudflare. Cloudflare also hosts this site, so it handles your request when you visit a page or send the form. See Cloudflare’s own privacy policy for how it handles data.
WhatsApp is run by Meta, and it handles any messages you send us there under its own privacy policy. If you pay through an online payment link, the payment provider handles your payment under its own policy.
If the form can’t send, your browser keeps what you typed for that tab, so you don’t have to type it again. It’s removed once your message is sent or the tab is closed.
How does spam protection work?
We use Cloudflare Turnstile to stop spam on the form. It loads a script from Cloudflare in your browser. When you send the form, our server sends Cloudflare a check token and your IP address, so it can confirm you aren’t a bot. We don’t save your IP address with your inquiry.
The form also has a hidden field that only bots fill in. If it’s filled in, we don’t store anything.
Do we use analytics or tracking?
No analytics are installed on this site. We don’t use advertising trackers. Our own pages don’t set cookies, but Cloudflare’s services may process technical data as described above. We’ll update this page before adding anything new.
Some pages link to other sites, such as Wikimedia Commons for photo credits. Those sites have their own privacy policies.
How long do we keep it?
We keep your inquiry for as long as we need it to deal with your tour and our records. We haven’t set a fixed period yet, and we’ll add it here once we have.
How can you see or remove your details?
Ask us, and we’ll tell you what we hold, correct it, or delete it. Email info@kathmanduvalleytours.com, or use the contact form, and say what you need. Please use the same email address as your inquiry, so we can find it.
Who else sees your details?
Our team sees your inquiry so that we can answer it. Your guide and driver may get what they need to run your tour, such as your name and hotel. We may also share details if the law requires it.
See the booking terms and cancellation policy for how bookings work.