Privacy policy
What we collect when you book a shared tour, why we need it, and how we look after it.
Last updated
01Who we are
North Sikkim Sharing Travel LLP ("we", "us") operates North Sikkim Sharing and this website. We decide why and how your personal data is used, which makes us the data fiduciary for it. Our office is at Gangtok, East Sikkim 737101.
02What we collect
To book a shared departure and arrange your permits, we collect only what those steps require:
- Your name, phone number and email address.
- Traveller details needed for permits: each traveller's name, nationality, and where the route requires it, gender.
- Permit documents you choose to upload: a government photo ID (passport or voter ID) and a passport-size photo. We do not accept Aadhaar or PAN, which are not valid for Sikkim permits.
- Your booking history with us: trips, dates, payments and refunds.
- If you start a booking and do not finish it, the contact details you had entered, so we can help you complete it. This only happens if you tick the box asking us to.
We do not ask for your date of birth, your home address, or your ID number at checkout.
03Why we use it
We use your information to run your trip and support you:
- To confirm your seats and send your booking, voucher and QR code.
- To apply for the Restricted and Protected Area Permits your route requires.
- To contact you about your booking, a departure change, a balance due, or a refund.
- To meet our legal, tax and safety obligations.
- If you have agreed to advertising cookies, to measure how well our ads work.
We never sell your personal data.
04Who we share it with
We share the minimum necessary with the people and companies who make your trip happen, and with the service providers that run this website on our behalf:
- The Sikkim authorities that issue your permits, and the drivers and lodges operating your specific trip.
- Razorpay, to take and refund your payment. We never see or store your card details.
- Resend, which delivers our booking and cancellation emails.
- BotPenguin and WhatsApp (Meta), which deliver our WhatsApp booking messages.
- Supabase and Vercel, which host this site and our database.
- Cloudflare R2, which stores uploaded permit documents in a private bucket.
- Meta (Facebook), for advertising measurement, but ONLY if you accept advertising cookies. This is off unless you choose it, and never runs on your booking, checkout or account pages.
Beyond the recipients listed above, we share your details with no one. We never sell your personal data, and we do not pass it to anyone for their own marketing.
05Cookies and tracking
Some cookies are needed to keep you signed in and to hold your seats while you pay. Those always run. Advertising cookies set by Meta only run if you accept them, and you can withdraw that at any time using the Cookie settings link in the footer. Our full list is on the cookie policy page.
06How long we keep it
We keep each kind of record only as long as it is needed:
- Booking, payment and refund records: eight years, because tax law requires it.
- Permit documents and photos you upload: deleted after the permit has served its purpose and our record-keeping obligation for that trip has ended.
- Unfinished booking enquiries: deleted within 24 hours.
- Your consent choice for cookies: stored in your own browser until you change it.
07Children
Bookings must be made by an adult. Where a traveller under 18 is included, we collect only the details the permit authorities require, and the adult making the booking confirms they are authorised to provide them. We do not use children's data for advertising and we do not run advertising cookies on the booking or checkout pages at all.
08Your rights
You can ask us to:
- Show you the personal data we hold about you.
- Correct anything that is wrong or out of date.
- Delete your data, except records we are legally required to keep.
- Withdraw a consent you gave, including advertising cookies.
- Nominate someone to exercise these rights on your behalf if you are unable to.
Email info@northsikkimsharing.com and we will respond within 30 days. There is no charge.
09Security
Payments are handled entirely by Razorpay; no card details ever reach our systems. Permit documents are stored in a private bucket that is not publicly reachable, and staff can only open one through a link that expires within minutes. Access to our booking console is restricted by role.
10Complaints
Contact our grievance team at info@northsikkimsharing.com or +91 94296 94567.
We acknowledge every complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with how we have handled your personal data, you may escalate to the Data Protection Board of India.
Questions about your data? Email us at info@northsikkimsharing.com. See also our cookie policy.
