Last updated: February 2026
At The Indus River Camp, we value your privacy. This policy explains what personal information we collect, why we collect it, and how we keep it safe. We aim to be straightforward — if anything is unclear, please don't hesitate to ask us.
1. Information We Collect
When you make a booking or enquiry, we may collect the following:
- Contact details: name, email address, phone number
- Nationality and identification: passport or government ID details, required for hotel registration under Indian law and for permit applications in restricted areas of Ladakh
- Stay preferences: dietary requirements, room preferences, special requests
- Travel details: arrival and departure dates, flight information, group size
- Payment information: processed securely through our payment gateway (see Section 4)
2. How We Use Your Information
We use your information for the following purposes:
- Booking management: confirming reservations, processing payments, and coordinating your stay
- Itinerary planning: arranging travel, accommodation, permits, and activities through Indus River Travels
- Permit applications: applying for Inner Line Permits and Protected Area Permits on your behalf where required
- Guest communication: sending booking confirmations, pre-arrival information, and post-stay feedback requests via email or WhatsApp
- Improving our services: understanding guest preferences to enhance future stays
- Legal compliance: meeting hotel registration requirements and tax obligations under Indian law
3. Sharing Your Information
We only share your personal information when necessary for the services you've requested:
- Payment processing: Razorpay processes all online payments. Razorpay is PCI-DSS compliant, meaning your card data is handled to the highest security standards. We do not store your card details on our systems.
- Travel partners: When you book travel services through Indus River Travels, we share relevant details (name, dates, group size) with external hotel partners, taxi operators, and activity providers as needed to fulfil your bookings.
- Government authorities: As required by Indian law, we share guest information for foreigner registration (C-Form submissions) and permit applications.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Payment Security
Online payments are processed through Razorpay, a PCI-DSS Level 1 compliant payment gateway. This means:
- Your card details are encrypted and processed directly by Razorpay
- We never see or store your full card number
- All transactions use industry-standard SSL encryption
5. Communication Preferences
We may contact you with:
- Booking confirmations and payment receipts
- Pre-arrival information about your stay and Ladakh travel tips
- Post-stay feedback requests
These communications are sent via email and WhatsApp. If you'd prefer not to receive post-stay or promotional messages, simply let us know and we'll update your preferences. Transactional messages related to active bookings will still be sent.
6. Data Retention
- Booking records: retained for 7 years as required for Indian tax and accounting compliance
- Guest preferences: retained to improve your future stays, unless you request deletion
- Enquiry information: retained for up to 2 years to assist with follow-up bookings
7. Data Security
We take reasonable measures to protect your personal information:
- Data is stored securely with access limited to authorised staff
- Payment information is handled exclusively by our PCI-DSS compliant payment processor
- We regularly review our data handling practices
8. Cookies and Analytics
Our website uses Google Analytics and Meta Pixel to understand how visitors use our site. These tools collect anonymised usage data such as pages visited, time on site, and referral sources. This information helps us improve the website experience. No personally identifiable information is collected through these tools.
9. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete information
- Request deletion of your personal data, subject to our legal retention obligations
- Opt out of non-essential communications
To exercise any of these rights, contact us using the details below.
10. Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available on this page, with the "Last updated" date at the top.
Contact Us
For any privacy-related questions or requests:
