Privacy Policy

Mountain Bird Bagpackers ("we", "us", "our") is a travel experiences company based in India, organising group trips, treks, and curated travel experiences across the country. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, book a trip, or communicate with us.

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.

We collect the following types of personal information:

Personal Identification Information — Full name, date of birth, gender, and government-issued ID details (Aadhaar, PAN, Passport, Voter ID, or Driving Licence) required for verification and booking purposes.

Contact Information — Email address, phone number, and residential address.

Payment Information — UPI transaction IDs, partial bank details, or payment confirmation references. We do not store full card numbers or CVV details. Payments are processed through secure third-party gateways.

Health and Medical Information — Any pre-existing medical conditions, allergies, or physical limitations you voluntarily disclose, required for your safety during treks and high-altitude trips.

Communication Data — Messages, emails, or WhatsApp conversations you initiate with us.

Device and Usage Data — IP address, browser type, pages visited, time spent on pages, and device information, collected automatically via cookies and analytics tools.

We collect your information through the following means:

• Booking forms and registration on our website
• WhatsApp, email, or phone enquiries
• Payment confirmations and receipts
• Cookies and analytics tools when you browse our website
• Social media interactions (Instagram, Facebook, Threads, YouTube, LinkedIn)
• Feedback forms and post-trip surveys

We use your personal information for the following purposes:

Trip Booking and Operations — To confirm bookings, issue invoices, coordinate logistics, verify identities before departure, and manage trip-related communication.

Safety — To maintain emergency contact records, assess physical fitness for high-altitude treks, and coordinate evacuation or medical assistance if required.

Communication — To send trip updates, itinerary details, packing lists, and important announcements related to your booking.

Customer Support — To respond to your queries, complaints, or feedback in a timely manner.

Marketing — To share information about upcoming trips, offers, and events. You may opt out of marketing communications at any time by emailing us.

Legal Compliance — To comply with applicable Indian laws, government regulations, and law enforcement requests where required.

Service Improvement — To analyse website usage patterns and improve user experience.

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

Service Providers — With trusted partners such as accommodation providers, transport operators, trek guides, and permit authorities who require your details to deliver the services you have booked.

Payment Processors — With authorised payment gateways to process transactions securely.

Legal Obligations — With law enforcement, regulatory authorities, or courts when required by Indian law or a valid legal order.

Safety Emergencies — With emergency services, hospitals, or your designated emergency contact in the event of an accident or medical emergency during a trip.

Business Transfers — In the unlikely event of a merger, acquisition, or sale of business assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

All third parties with whom we share data are required to maintain appropriate confidentiality and security standards.

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include:

• Secure HTTPS encryption on our website
• Restricted access to personal data within our team on a need-to-know basis
• Secure third-party payment gateways that are PCI-DSS compliant
• Regular review of our data handling practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences
• Understand how you use our website
• Improve website performance and content
• Deliver relevant information about our trips

Essential Cookies — Necessary for the website to function correctly.

Analytics Cookies — Help us understand visitor behaviour (e.g., Google Analytics).

Marketing Cookies — Used to display relevant content on social media platforms.

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

Our website may contain links to third-party websites, including social media platforms (Instagram, Facebook, YouTube, Threads, LinkedIn) and payment gateways. These websites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party websites you visit.

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.

• Booking and transaction records are retained for a minimum of 7 years to comply with financial and legal obligations.
• Health and medical disclosures are retained for the duration of the trip and deleted thereafter.
• Marketing preferences and communication records are retained until you opt out or request deletion.
• Website analytics data is retained in anonymised form for up to 2 years.

Under applicable Indian data protection laws, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (to the extent notified and in force), you have the following rights:

Right to Access — You may request a copy of the personal information we hold about you.

Right to Correction — You may request correction of inaccurate or incomplete personal information.

Right to Erasure — You may request deletion of your personal data, subject to legal and contractual obligations.

Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Right to Grievance Redressal — You may raise a grievance regarding our handling of your data.

To exercise any of these rights, please contact us at the details provided in Section 13. We will respond within 30 days of receiving your request.

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from minors without parental or guardian consent. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.

Minors participating in our trips must be accompanied by a parent or legal guardian, who is responsible for providing consent and accurate information on the minor's behalf.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date.

We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving any privacy-related concerns promptly and transparently.