Privacy Policy

1. Introduction

Welcome to Heaven Skardu Tour ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website heavenskardutour.com or use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

Our Commitment

We respect your privacy and are committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit our website and our practices for collecting, using, maintaining, protecting, and disclosing that information.

2. Information We Collect

We collect several types of information from and about users of our Website, including information:

2.1 Personal Identification Information

Contact Information: Name, email address, phone number, postal address
Identity Information: Passport details, National ID number (for booking purposes)
Payment Information: Credit/debit card details, billing address (processed securely through third-party payment processors)
Travel Information: Travel preferences, special requirements, dietary restrictions

2.2 Non-Personal Information

Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system
Usage Data: Information about how you use our website, products, and services
Marketing Data: Your preferences in receiving marketing from us and our third parties

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Website and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier.

Type of Cookie	Purpose	Duration
Essential Cookies	Necessary for website functionality	Session
Analytics Cookies	Track website usage and performance	1-2 years
Marketing Cookies	Personalize advertisements	6 months - 1 year
Preference Cookies	Remember your settings and preferences	1 year

3. How We Use Your Information

We use the information we collect in the following ways:

3.1 Primary Purposes

To provide and maintain our services
To process your bookings and transactions
To manage your account and registration
To communicate with you about your bookings, inquiries, and requests
To provide customer support and respond to your inquiries
To send you important updates and information about your travel arrangements

3.2 Secondary Purposes

To personalize your experience on our website
To improve our website and services
To develop new products, services, features, and functionality
To send you marketing communications (with your consent)
To comply with legal obligations and protect our legal rights
To prevent fraudulent activities and ensure security

Legal Basis for Processing

We process your personal information under the following legal bases:

Contractual Necessity: To fulfill our contractual obligations to you
Legitimate Interests: For our legitimate business interests
Legal Obligation: To comply with legal requirements
Consent: Where you have given us explicit consent

4. Information Sharing and Disclosure

We may share your information in the following situations:

4.1 With Service Providers

Travel Service Providers: Hotels, airlines, transportation companies, tour guides
Payment Processors: Banks, credit card companies, payment gateways
Technical Service Providers: Website hosting, data analysis, email delivery services
Marketing Partners: With your consent, for promotional activities

4.2 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred.

4.3 Legal Requirements

We may disclose your information where required to do so by law or in response to valid requests by public authorities.

4.4 International Transfers

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Data Protection Measures

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

5. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process.

5.1 Security Measures

Encryption of sensitive data using SSL/TLS technology
Regular security assessments and vulnerability testing
Access controls and authentication mechanisms
Secure data storage with encryption at rest
Regular security training for our staff
Incident response and data breach notification procedures

5.2 Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

Data Type	Retention Period	Reason for Retention
Booking Information	7 years	Legal and accounting requirements
Customer Support Data	3 years	Service improvement and dispute resolution
Marketing Data	2 years	Marketing and promotional activities
Website Analytics	26 months	Website improvement and analytics

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

Right to Access: You have the right to request copies of your personal data
Right to Portability: You have the right to request transfer of your data to another organization

6.2 Correction and Deletion

Right to Rectification: You have the right to request correction of inaccurate data
Right to Erasure: You have the right to request deletion of your personal data

6.3 Restriction and Objection

Right to Restriction: You have the right to request restriction of processing
Right to Object: You have the right to object to our processing of your personal data

6.4 Consent Withdrawal

You have the right to withdraw your consent at any time where we rely on consent to process your personal information.

6.5 How to Exercise Your Rights

To exercise any of these rights, please contact us using the contact details provided in Section 9. We will respond to your request within 30 days.

No Fee Usually Required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

7. Third-Party Links

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

7.1 External Services We Use

Payment Processors: Stripe, PayPal, Bank payment gateways
Analytics Services: Google Analytics
Social Media: Facebook, Instagram, Twitter plugins
Booking Systems: Third-party hotel and flight booking systems

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

8. Children's Privacy

Our services are not intended for individuals under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from children under 18.

8.1 Age Verification

When we collect personal information, we do not know the age of our visitors. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

8.2 Parental Consent

For travel bookings involving minors, we require parental consent and appropriate documentation. We take special care to protect the privacy of children who use our services.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9.1 Notification of Changes

We will post a notice on our website prior to the change becoming effective
We will update the "Last Updated" date at the top of this Privacy Policy
For significant changes, we may provide more prominent notice or contact you directly

9.2 Review Period

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.