Privacy Policy

Meru Himal

Last updated: 20 January 2026

Meru Himal (“we,” “our,” or “us”) respects your privacy and is committed to protecting personal data collected through our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services.

1. What Is a Privacy Statement?

A privacy statement explains how an organization collects, processes, stores, and protects personal data of its website visitors and customers. It also outlines the rights individuals have regarding their personal data.
This Privacy Policy applies to all visitors, users, and customers of Meru Himal.

2. When This Privacy Policy Applies

This Privacy Policy applies whenever:

• You visit our website

• You submit information through forms (e.g., enquiries, bookings, contact forms)

• You interact with us via email, phone, or messaging platforms

• We collect data indirectly through cookies, analytics tools, or embedded services

3. Personal Data We Collect

We may collect the following categories of personal data:

a. Information You Provide Directly

• Full name

• Email address

• Phone number

• Travel preferences or enquiry details

• Any information submitted through contact or booking forms

b. Information Collected Automatically

• IP address

• Browser type and device information

• Pages visited and interaction data

• Date and time of access

c. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Website functionality

• Performance and analytics

• Improving user experience

Details are provided in our Cookie Policy.

4. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

5. Disclosure of Personal Data

We may share personal data with:

• Service providers (hosting, analytics, email services)

• Travel partners, where necessary, to fulfill a booking

• Legal or regulatory authorities, if required by law

We do not sell personal data.

6. International Data Transfers

Personal data may be processed outside your country of residence, including outside the European Union. Where applicable, we ensure appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)

• Adequate data protection agreements

7. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Secure hosting infrastructure

• Access controls

• Encryption where applicable

However, no transmission over the internet is completely secure.

8. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: up to 24 months

• Booking-related data: as required by legal or accounting obligations

• Analytics data: anonymized or aggregated where possible

9. Automated Decision-Making

Meru Himal does not use automated decision-making or profiling that produces legal or significant effects on users.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data

• Rectify inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent at any time

Requests can be sent to the contact details below.

11. Regional Privacy Law Disclosures

a. GDPR (European Union / UK)

We comply with the General Data Protection Regulation (GDPR). EU users may lodge complaints with their local Data Protection Authority.

b. CPRA / CCPA (California)

California residents have rights under the California Privacy Rights Act (CPRA), including:

• Right to know

• Right to delete

• Right to limit sensitive personal information

• Right to opt out of sharing personal data

Meru Himal honors Global Privacy Control (GPC) signals where applicable.

c. Quebec Bill 64 (Law 25)

Residents of Quebec have enhanced rights, including transparency, consent, and access rights regarding personal data.

d. CTDPA, CPA, UCPA, CDPA, NRS 603A

We comply with applicable US state privacy laws, including:

• Connecticut Data Privacy Act (CTDPA)

• Colorado Privacy Act (CPA)

• Utah Consumer Privacy Act (UCPA)

• Virginia Consumer Data Protection Act (CDPA)

• Nevada Revised Statutes (NRS 603A)

12. Accessibility and ADA Compliance

We strive to ensure our website is accessible and usable for all users, including those with disabilities. Where applicable:

• ARIA labels may be used for accessibility

• Website content is structured for assistive technologies

13. Contact Information

Data Controller:
Meru Himal

Contact Email: contact@meruhimal.in
Location: India

If required, a Data Protection Officer (DPO) will be appointed in accordance with applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised “Last updated” date.