Privacy Policy

Bhutan Upward Travels is a licensed travel and tour operator based in Thimphu, Kingdom of Bhutan. We are committed to protecting the privacy and personal data of our clients, website visitors, and enquirers.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to your data.

We may collect the following categories of personal information:

• Identity data: name, passport number, nationality, date of birth • Contact data: email address, phone number, postal address • Travel data: travel dates, destination preferences, dietary requirements, medical disclosures • Financial data: billing information (processed securely via third-party payment providers — we do not store card details) • Usage data: pages visited, time on site, referral source, device and browser information (collected via cookies)

We collect information directly from you when you: submit an enquiry or booking request, fill in the 'Plan My Trip' form, communicate with us by email or phone, or subscribe to our newsletter.

We also collect technical data automatically as you browse our website, using cookies and similar tracking technologies. See Section 8 for more on cookies.

We use your personal data for the following purposes:

• Processing and managing your booking or enquiry • Arranging Bhutan tourist visas and Sustainable Development Fee (SDF) payments on your behalf • Communicating tour details, itineraries, and travel documentation • Complying with Bhutanese government tourism regulations • Sending marketing communications (only with your explicit consent) • Improving our website and services through anonymised analytics

We process your personal data on the following legal grounds: performance of a contract (your booking), compliance with legal obligations (tourism regulations in Bhutan), your consent (marketing emails), and our legitimate interests (website improvement and fraud prevention).

We do not sell, rent, or trade your personal data. We may share your information with:

• Tourism Council of Bhutan and relevant Bhutanese government authorities (required for visa processing and SDF payment) • Accommodation providers, transport operators, and local guides forming part of your itinerary • Third-party service providers who assist with payment processing, email delivery, and website hosting — all bound by strict data processing agreements • Professional advisers where legally required

International transfers of data are carried out with appropriate safeguards in place.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Booking records are typically retained for seven years in accordance with financial record-keeping obligations.

You may request deletion of your data at any time (subject to legal retention obligations) by contacting us at the details below.

Our website uses cookies — small text files placed on your device — to enhance your browsing experience, remember preferences, and gather anonymised analytics on how visitors use the site.

Essential cookies are required for the site to function and cannot be disabled. Analytics and preference cookies are optional. You can manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to use this website.

Depending on your country of residence, you may have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you • Right to rectification — request correction of inaccurate data • Right to erasure — request deletion of your data where we have no legal obligation to retain it • Right to restrict processing — request that we limit how we use your data • Right to data portability — receive your data in a commonly used format • Right to object — object to processing based on legitimate interests

To exercise any of these rights, please contact us in writing using the details in Section 11. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised use of your data.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Bhutan Upward Travels Thimphu, Kingdom of Bhutan Email: use the contact form on our Enquire page

If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised date. We encourage you to review it periodically.