Your data, protected on and off the mountain.

01Information We Collect

High-altitude trekking and adventure sports require the collection of sensitive data to ensure your legal compliance and physical safety on the mountains.

• Identity Data: Full name, date of birth, gender, nationality, and government-issued ID / passport copies (crucial for inner-line permits, forest department clearances, and local authority registrations).
• Contact Data: Email address, phone number, and billing / shipping address.
• Medical & Health Data: Blood group, pre-existing medical conditions (e.g., asthma, hypertension), allergies, dietary restrictions, current medications, and physical fitness certificates.
• Emergency Contact Data: Names, phone numbers, and relationships of individuals we can contact in an emergency.
• Insurance Data: Policy provider name, policy number, and emergency contact details for mandatory high-altitude travel and rescue insurance.
• Media Data: Photographs and videos captured by our team or shared by you during the trek.
• Technical & Usage Data: IP address, browser type, past trekking history, adventure preferences, and cookies used to optimise website performance.

02Grounds & Purpose for Processing Data

Under the DPDP Act and international laws, we process your personal data based on your explicit consent or for legitimate uses (such as responding to medical emergencies).

• Booking & Administration: To process payments, confirm slots, and manage your adventure itinerary.
• Permits & Legal Compliance: To submit your identity files to forest departments, local administration, mountaineering clubs (such as the Indian Mountaineering Foundation), and military checkpoints.
• On-Field Safety & Rescue: To share your medical history with trek leaders, mountain guides, base camp managers, and emergency medical personnel.
• Personalised Recommendations & News: To analyse your past treks and fitness profile to send you custom adventure recommendations, upcoming expedition invites, and curated news updates. These updates are created and sent exclusively by us.
• Marketing & Media: To use photographs and videos from the trek on our website, social media, and brochures (subject to your right to opt out — see our Photography & Media Consent).

03Sharing & Disclosure of Data

We never sell, rent, or lease your data to third-party marketing agencies. Your data is used for direct communication exclusively from our end. We only share essential logistics data with trusted entities required to execute your adventure safely:

• Ground Operators & Vendors: Local homestays, transport drivers, porters, and equipment providers.
• Emergency & Rescue Services: Helicopter evacuation companies, local disaster management teams, search-and-rescue teams, and hospitals.
• Government Authorities: Law enforcement, forest departments, and border security forces as legally required.
• Payment Gateways: Secure third-party payment processors. We do not store your raw credit / debit card details on our servers.

04Handling of Customer Documents

Because permits and safety require sensitive files, we apply extra care to the documents you share with us:

• Purpose-Bound Use: Passport / government ID copies, medical fitness certificates, and insurance documents are used solely for permits, safety, and statutory compliance — never for marketing.
• Restricted Access: Documents are stored with restricted access controls and shared only with the specific authorities or field staff who require them for your trip.
• Secure Deletion: Once your adventure and all legal / auditing periods are complete, document copies are deleted or anonymised on request, unless retention is required by law.

05International Data Transfers

Because we welcome adventure enthusiasts from all over the world, your data may be transferred to and processed on secure servers located in India or other global cloud infrastructure. We ensure that all data transfers comply with applicable data protection laws.

06Data Security & Retention

Security Measures

We use industry-standard SSL encryption and restricted access controls to prevent unauthorised access to your sensitive medical and identity files.

Retention Period

We retain your data only for as long as necessary to fulfil the purpose of the booking, resolve disputes, or comply with local tax, auditing, and adventure-tourism regulations. If you opt in to receive our mountain news and recommendations, we retain your contact preferences until you choose to unsubscribe.

07Your Rights (Including DPDP Act Rights)

Whether you are based in India or abroad, you have specific rights regarding your data:

• Right to Access & Correction: You can request a summary of your data and update inaccurate details.
• Right to Erasure (Deletion): You can request the deletion of your data once the adventure activity and all legal auditing periods are completed.
• Right to Withdraw Consent: You can withdraw your consent for data processing (including personalised recommendations and newsletters) at any time. Note: withdrawing consent for core data such as medical information may result in the cancellation of an active trek booking for safety reasons.
• Right to Grievance Redressal: You have the right to register a complaint regarding data handling with our Data Protection / Grievance Officer.

08Contact Our Grievance Officer

In accordance with the DPDP Act, 2023, if you have any questions, concerns, or grievances regarding this Privacy Policy, please contact our designated official:

Designation Data Grievance Officer
Company Aarushi Tour & Travel (Aarushi Adventures)
Email info@aarushiadventures.com
WhatsApp / Phone +91 98051 43123
Registered Address Chamba, Tehsil & District Chamba, Himachal Pradesh, India