Privacy Policy

1. Data Controller

The data controller responsible for your personal information is Aryan Ladakh Tour & Travel, the registered business entity that owns and operates the Ladakh Bikers brand. Registered address: Karzu Rd, Leh, Ladakh — 194101, India. Contact: booking@ladakhbikers.com

2. Personal Documents Collected for Permits

Due to the strategic border location of Leh Ladakh, visiting areas such as Nubra Valley, Pangong Lake, Hanle, and Umling La requires official military and administrative permit clearance. We collect the following identification documents solely for permit processing:

• Indian Citizens: Aadhaar Card, Voter ID, Passport, or Driving Licence copies.
• Foreign Nationals: Passport bio-data page, Indian Tourist Visa / e-Visa, and port-of-entry immigration stamp images. These are mandatory for Protected Area Permit (PAP) applications submitted to the Leh Deputy Commissioner.

3. How We Use and Share Your Data

Your identification and contact information is used exclusively for the following purposes:

• Official Permit Portals: Uploaded directly to government permit systems (e.g., LAHDC Leh permit portal, Deputy Commissioner Leh office).
• Military Checkpoints: Printed and submitted to verification officers at army and police checkpoints (South Pullu, North Pullu, Tangtse, Loma, Nyoma).
• Tour Logistics: Contact details (phone, WhatsApp, email) are used only for expedition coordination, booking confirmations, and emergency communication during the tour.
• Zero Commercial Sharing: Aryan Ladakh Tour & Travel does not sell, rent, trade, or distribute your personal documents or contact information to any third-party commercial marketing agency, advertiser, or data broker.

4. Document Retention & Deletion Policy

To protect your identity and ensure maximum security, we enforce a strict data retention timeline. All digital copies of your identification documents (passports, visas, Aadhaar, driving licences) are permanently and securely deleted from our servers, email accounts, and messaging platforms within 30 days of the completion of your tour or rental period. Contact information (name, phone, email) may be retained for up to 12 months for warranty, feedback, and service continuity purposes, after which it is also deleted.

5. Payment & Financial Information Security

All credit card, debit card, or international bank transfer transactions are processed through secure, PCI-DSS compliant third-party payment gateways (Razorpay, Wise, or authorised bank SWIFT channels). Aryan Ladakh Tour & Travel (Ladakh Bikers) does not collect, capture, or store your credit card numbers, CVV codes, or bank account credentials on our servers at any point.

6. Cookies & Website Analytics

Our website (ladakhbikers.com) uses the following cookies and tracking technologies:

• Google Analytics 4 (GA4): Anonymised session analytics to understand traffic sources, page performance, and user journeys. No personally identifiable information is transmitted to Google Analytics.
• Google Tag Manager (GTM): Used to manage analytics and marketing tags. No personal data is stored via GTM.
• Essential Cookies: Required for basic website functionality (Angular routing, session preservation). These cannot be disabled.

You may disable non-essential cookies via your browser settings. This will not affect your ability to browse our website or make bookings.

7. International Visitor Rights (GDPR / UK GDPR)

If you are a resident of the European Economic Area (EEA), United Kingdom, or another jurisdiction with comprehensive data protection laws, you hold the following rights regarding your personal data held by Aryan Ladakh Tour & Travel:

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request immediate deletion of your personal data at any time — including before our standard 30-day retention window expires.
• Right to Object: Object to the processing of your personal data for any purpose beyond permit compliance and tour logistics.
• Right to Data Portability: Request that your data be provided to you in a structured, machine-readable format.

To exercise any of these rights, contact us at booking@ladakhbikers.com. We will respond to all verified requests within 30 days. Note: As an Indian-registered business, our primary regulatory framework is the Digital Personal Data Protection Act, 2023 (DPDPA). We honour EEA/UK GDPR rights as a courtesy to our international clientele.

8. Children's Data

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If a booking is made for a group including a minor, the responsible adult accompanying the minor consents on their behalf for permit purposes only.

9. Changes to This Policy

Aryan Ladakh Tour & Travel reserves the right to update this Privacy Policy at any time. Material changes will be communicated via our website and, where required, via email to active booking holders. Continued use of our services after the effective date of any revision constitutes acceptance of the updated policy.

10. Contact & Data Safety Requests

For any privacy queries, immediate data deletion requests, or security concerns, contact our data safety coordinator at:
Aryan Ladakh Tour & Travel (Ladakh Bikers)
Karzu Rd, Leh, Ladakh — 194101, India
Email: booking@ladakhbikers.com  |  WhatsApp: +91-8491838966