This is a working draft. Review it against the law that applies to you, including the General Data Protection Regulation where you market to visitors in the United Kingdom and the European Union, and replace every bracketed placeholder before publishing.
Who controls your data
[LEGAL ENTITY NAME], registered in Nepal under company number [NUMBER], at [ADDRESS]. For privacy questions, contact [PRIVACY EMAIL].
What we collect
When you request a flight: your name, email address, phone or WhatsApp number, the route and date you asked about, group size, baggage estimate and anything you write in the message field. Where you tell us about a medical situation, that information is health data and we treat it with additional care.
When you use the site: standard server logs, and analytics data if you consent to it. We record campaign tags from advertising links in a cookie so that we can tell which adverts produce genuine enquiries.
When you book: passport details and passenger weight, both of which are required by the operator and by the Civil Aviation Authority of Nepal for a manifest.
Why we collect it
- To answer your enquiry and arrange your flight, which is the performance of a contract.
- To meet aviation and immigration requirements, which is a legal obligation.
- To coordinate a medical evacuation and deal with your insurer, which is a vital interest where safety is involved.
- To understand which marketing works, which is a legitimate interest, and which you can object to.
Who we share it with
The helicopter operator flying you, because the manifest is a legal requirement. Your insurer, where you have asked us to arrange an evacuation. Our hosting and email providers, who process data on our instructions. Authorities, where the law requires it.
We do not sell your data, and we do not share it with advertisers.
How long we keep it
Enquiries that do not become bookings: [PERIOD, e.g. 24 months]. Booking and flight records: [PERIOD] to meet accounting and aviation record-keeping obligations. Medical information relating to an evacuation: [PERIOD], then deleted.
International transfers
We are based in Nepal. If you are in the United Kingdom or the European Union, your data is transferred outside that jurisdiction when you contact us. We rely on [MECHANISM] for that transfer.
Your rights
You may ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, object to processing based on legitimate interests, and withdraw consent to analytics at any time. Write to [PRIVACY EMAIL]. We respond within [PERIOD].
Cookies
The site sets a cookie to remember advertising campaign tags for thirty days, and whatever cookies your analytics tool sets if you consent. It does not set advertising or profiling cookies.
Changes
We will post any change to this policy on this page.
Last updated: [DATE]