Last updated: 6th September 2026

White Tiger Holidays (“we”, “us”, “our”) is a travel agency registered in Nepal (Reg. No. 284848/078/079, VAT No. 610224931) and licensed by the Nepal Tourism Board, with offices in Kathmandu, Dubai, London and Lisbon.

This policy explains what personal information we collect through our website (whitetigerholidays.com) and our mobile application, why we collect it, who we share it with, and the choices you have. It applies to travellers, visa applicants and website visitors.

1. Information we collect

Information you give us

Contact details — full name, email address, mobile number.
Booking information — travel dates, destinations, number of travellers, accommodation and flight preferences, and the names of everyone travelling on your booking.
Visa application information — passport number, passport expiry date, date of birth, nationality, and the destination you are applying for.
Visa supporting documents — copies of documents required by the relevant embassy or consulate. Depending on the destination this may include your passport photo page, photographs, bank statements, employment letters, birth certificates and similar records.
Payment information — the payment method you choose and, where you pay by bank transfer, the deposit slip or reference you provide. Card payments are processed by our payment provider; we never receive or store your full card number, expiry date or security code.
Correspondence — messages you send us by email, WhatsApp, our website chat or in the app.

Information collected automatically

Account and device data — sign-in method, the date and time of your last sign-in, and a push-notification token so we can send you updates about your trip.
Website analytics — pages viewed, approximate location, browser and device type, collected through Google Analytics.
Cookies — see section 8.

Information about other people

If you make a booking or visa application that includes other travellers, you will provide their personal information to us. Please make sure they know their details are being shared with us and that they agree to this policy. If a traveller is under 18, their parent or legal guardian must provide their information.

2. How we use your information

To arrange, confirm and manage your bookings — flights, hotels, transfers and tours.
To prepare and submit visa applications to the relevant embassy or consulate on your behalf, and to keep you informed of their progress.
To issue confirmation vouchers, itineraries, invoices and travel documents.
To contact you about your trip, including reminders, changes and urgent updates before or during travel.
To provide 24/7 support and to respond to your enquiries.
To take payment and keep accounting records.
To send you offers and promotions where you have chosen to receive them. You can opt out at any time.
To meet our legal, tax and regulatory obligations.

3. Our legal basis

Where UK or EU data protection law applies to you, we rely on: performance of a contract (arranging the travel services you have booked); consent (marketing messages, and the handling of visa documents as described below); legal obligation (tax and accounting records); and legitimate interests (running and improving our business, and preventing fraud).

Passport details and visa supporting documents are treated as sensitive. We collect and share them only to process the visa application you have asked us to make, and only with the embassy, consulate or authorised visa centre concerned.

4. Who we share your information with

We share your information only where it is necessary to deliver the service you have asked for:

Embassies, consulates and visa application centres — for visa applications, including the supporting documents they require.
Airlines, hotels, transport providers and local tour operators — the traveller details needed to hold and honour your reservation.
Payment providers — to process card payments securely.
Technology providers — Google (sign-in, push notifications and analytics) and our website hosting provider, who store data on our behalf.
Professional advisers and authorities — where we are required to do so by law.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

5. International transfers

We operate in Nepal, the UAE, the United Kingdom and Portugal, and your information may be transferred between these locations. Visa documents are necessarily transferred to the country you are applying to. Where information is transferred out of the UK or EEA, we take steps to ensure it remains protected to an equivalent standard.

6. How long we keep your information

Booking and financial records — up to 7 years, to meet tax and accounting requirements.
Visa supporting documents — deleted within 12 months of the application being decided, unless you ask us to keep them for a future application or we are required to retain them.
Account information — for as long as your account is active. If you close your account we delete it, other than records we must keep by law.
Marketing preferences — until you opt out.

7. How we protect your information

Traffic between your device and our systems is encrypted using HTTPS. Visa documents are stored privately: they are not published, are not listed publicly, and can only be retrieved by the account that uploaded them after an access check. Access by our staff is limited to those who need it to process your booking or application. Passwords are stored using one-way encryption and are never visible to us.

No system can be guaranteed completely secure. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by law.

8. Cookies and analytics

Our website uses cookies to keep the site working, remember your preferences and understand how the site is used. We use Google Analytics for website statistics. You can block or delete cookies in your browser settings, though parts of the site may not work as intended. Our mobile app does not use advertising cookies or trackers.

9. Your rights

You can ask us to:

give you a copy of the personal information we hold about you;
correct anything that is wrong or out of date;
delete your information, where we are not required to keep it;
restrict or object to how we use it;
transfer it to another provider;
stop sending you marketing — you can also use the unsubscribe link in any email.

To exercise any of these, contact us using the details in section 12. We will respond within 30 days. If you are in the UK you may also complain to the Information Commissioner’s Office (ico.org.uk).

10. Deleting your account and data

You can request deletion of your app account and associated personal data at any time by emailing [email protected] with the subject “Account deletion”. We will confirm within 30 days. Booking and financial records we are legally required to retain will be kept for the period set out in section 6 and then deleted.

11. Children

Our app and website are intended for adults. We do not knowingly create accounts for anyone under 18. We do process children’s information when they are included as travellers or visa applicants on a booking made by a parent or guardian.

12. Contact us

White Tiger Holidays
Email: [email protected]
Phone / 24-hour support: +977 984-4834344
Kathmandu, Nepal | Dubai, UAE | London, UK | Lisbon, Portugal
Reg. No. 284848/078/079 | VAT No. 610224931

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change we will tell you through the app or by email.

Privacy Policy