Legal Document
Privacy Policy
Your privacy matters to us. This policy explains how White Tiger Holidays collects, uses, and protects your personal information.
Effective: 1 January 2025
Last Updated: April 2025
Jurisdiction: Nepal
Who we are: White Tiger Holidays is a licensed travel agency registered in Nepal (Baluwatar, Kathmandu), with operations in Dubai, UAE and Lisbon, Portugal. We are authorized by the Nepal Government, Nepal Tourism Board, and hold IATA affiliation. This Privacy Policy applies to our website, booking services, and all customer interactions.
01
Information We Collect
We collect information you provide directly to us, as well as information gathered automatically when you use our website or services.
Information you provide:
- Full name, date of birth, nationality, and passport details for booking travel
- Contact information including email address, phone number, and postal address
- Travel preferences, dietary requirements, and special assistance needs
- Payment information (processed securely; we do not store full card numbers)
- Communications you send us via WhatsApp, email, or our contact form
- Reviews, feedback, and survey responses you choose to submit
Information collected automatically:
- IP address, browser type, device type, and operating system
- Pages visited, time spent on pages, and links clicked on our website
- Referring website or source through which you reached us
- General geographic location (country/city level) derived from your IP address
02
How We Use Your Information
We use the information we collect to provide, improve, and personalise our services:
- Processing and confirming travel bookings, tickets, and hotel reservations
- Coordinating visa applications, travel insurance, and documentation
- Communicating booking confirmations, itineraries, and travel updates
- Responding to your enquiries and providing customer support
- Sending promotional offers, newsletters, and early bird deals (with your consent)
- Personalising our recommendations based on your travel history and preferences
- Improving our website, services, and internal processes
- Complying with legal and regulatory obligations
- Fraud prevention, security, and dispute resolution
Marketing communications: We will only send you promotional emails or messages if you have opted in. You may unsubscribe at any time by contacting us or using the unsubscribe link in our emails.
03
Information Sharing & Disclosure
White Tiger Holidays does not sell, rent, or trade your personal information. We only share data in the following circumstances:
- Travel Suppliers: Airlines, hotels, cruise lines, car rental companies, and tour operators who fulfil your booking
- Visa Authorities: Government immigration departments when processing visa applications on your behalf
- Travel Insurance Providers: When you purchase travel insurance through us
- Payment Processors: Secure third-party payment gateways for processing transactions (PCI-DSS compliant)
- Legal Requirements: When required by Nepal law, court order, or to protect the rights and safety of our customers and staff
- Business Transfers: In the event of a merger, acquisition, or sale of assets, subject to the same privacy protections
All third parties we work with are contractually obligated to handle your data securely and only for the purposes we specify.
04
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience and understand how our site is used.
- Essential Cookies: Required for the website to function correctly (e.g., session management)
- Analytics Cookies: Help us understand visitor behaviour so we can improve our website (e.g., Google Analytics)
- Preference Cookies: Remember your settings and preferences for future visits
- Marketing Cookies: Used to deliver relevant advertisements via platforms such as Facebook and Google
You can control or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.
05
Data Security
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.
- SSL/TLS encryption for all data transmitted through our website
- Secure, access-controlled systems for storing customer records
- Regular security reviews and staff training on data protection
- Restricted access to personal data on a need-to-know basis
- Payment card data is processed by PCI-DSS compliant payment providers; we do not store full card details
While we take every reasonable precaution, no method of internet transmission or electronic storage is 100% secure. If you have concerns about a potential data breach, please contact us immediately at
info@whitetigerholidays.com.
06
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Booking and transaction records are retained for a minimum of 7 years for accounting and legal compliance
- Marketing preferences and enquiry records are retained for 3 years from last contact
- Website analytics data is retained in aggregated, anonymised form for up to 2 years
- Passport and visa documentation is deleted within 60 days of trip completion unless otherwise required
07
Your Rights & Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Ask us to correct any inaccurate or incomplete information
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Opt-Out: Unsubscribe from marketing communications at any time
- Portability: Request your data in a portable, machine-readable format
- Objection: Object to processing of your data for direct marketing purposes
To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days of receiving your request.
08
Third-Party Links
Our website may contain links to third-party websites, including airline booking platforms, hotel sites, and social media pages. This Privacy Policy applies only to our website and services.
We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any external sites you visit through links on our website.
09
Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16 without verifiable parental consent.
When booking travel that includes minors, all personal data must be provided and consented to by the parent or legal guardian. If you believe we have inadvertently collected information from a child under 16, please contact us immediately and we will promptly delete it.
10
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to customers with active bookings where appropriate
We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.
11
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us through any of the following channels: