Privacy

What this site actually does

This is a working site, not a mockup: the enquiry form submits for real, the chat assistant talks to a real AI provider, and everything you send is stored in a database and, where relevant, emailed to the operator. This page describes exactly what happens to your data — not what a future version might do.

We never ask for payment details anywhere on this site. No card is collected, and nothing is charged.

Data we collect

  • The enquiry form ("Plan a trip" / Contact): your name, email, phone or WhatsApp number if you give one, the trek you're asking about, roughly when you want to travel, group size, lodging preference, and anything you write in "anything we should know?"
  • The chat assistant: whatever you type in the chat panel, plus the trek, dates, traveller count and any add-ons it works out from that conversation
  • Booking a call: your name, email, the time slot you pick, and the time zone your browser reports

Where it goes

  • Stored: enquiry, chat and call-booking records are kept in our database
  • Emailed: sending an enquiry or booking a call sends a confirmation to you and a notification to the operator, using Resend as our email provider
  • Sent to an AI provider: chat messages are sent to a third-party AI model to generate the assistant's replies. That provider processes the message to return a response; it is not used for advertising

Cookies and local storage

  • The only cookie this site sets is for staff sign-in to the admin dashboard — it's http-only, sent solely over HTTPS, and never set for ordinary visitors browsing or enquiring
  • If you use the chat assistant, your browser keeps a session id in local storage so your conversation is still there if you come back — that id stays on your device except when sent with your messages so the assistant can find your conversation again
  • The map on our Contact page is a Google Maps embed. Loading it may let Google set its own cookies, under Google's privacy policy — not ours
  • We run no analytics and no third-party advertising trackers

What we don't do

  • No selling or renting your data, ever
  • No marketing emails without a separate, explicit opt-in
  • No third-party advertising trackers
  • No retention of medical disclosures beyond the trip they relate to

How long we keep it

Enquiry and booking details are kept for as long as needed to plan and run your trip, then for a reasonable period afterwards for our own records, before being deleted. Chat history is kept so a returning visitor's conversation isn't lost, and can be deleted early on request.

Your rights

You can ask to see, correct, or delete the personal data we hold about you, or object to how it's used, at any time. Email hello@brandaidhq.com and we'll respond within a reasonable period, in line with whichever data protection law applies to you — including GDPR and UK GDPR where relevant.

Who's responsible for this

This site is built and operated by BrandAid as a demonstration project for Trek Nepal. Any question about this policy, or about data held about you, goes to the same address: hello@brandaidhq.com.