Privacy Policy | Wonderland Treks & Tours

1. Who We Are

Wonderland Treks & Tours ("we", "us", "our") is a licensed inbound tour operator registered with the Directorate of Tourist Services Gilgit Baltistan (DTSGB), Pakistan. Our registered office is Near Serena Hotel, Karimabad, Hunza, Gilgit Baltistan 15700, Pakistan. We operate the website wonderland-tours.com.

Contact: info@wonderland-tours.com | +92 344 378 8887

2. What Data We Collect

We collect the following personal data when you use our website, contact us, or make a booking:

Identity data: first name, last name, nationality, passport information (for permits)
Contact data: email address, phone/WhatsApp number
Booking data: package chosen, travel dates, group size, special requirements, payment method
Communication data: messages you send us via the contact form or email
Technical data: IP address, browser type, pages visited (via anonymous analytics)

3. How We Use Your Data

We use your personal data to:

Process and confirm your trek, tour, or expedition booking
Obtain trekking permits, expedition permits, and liaison officer assignments on your behalf (requires passport details)
Send booking confirmations, pre-departure information, and trip updates
Respond to your enquiries
Comply with Pakistan legal and regulatory requirements (DTSGB licensing, DTS Gilgit Baltistan)
Improve our website and services (anonymous analytics only)

4. Legal Basis for Processing

We process your data on the following legal bases:

Contract performance: to fulfil your booking
Legal obligation: permit applications require personal data by law
Legitimate interests: customer service, safety, and trip logistics
Consent: marketing emails (you can unsubscribe at any time)

5. Data Sharing

We share your data only where necessary:

Pakistan government authorities: for trekking/expedition permits (CKNP, Ministry of Tourism)
Local partners: hotels, transport providers, and guides who deliver your trip services
Payment processors: we do not store card details; payments are processed by secure third parties
Email service provider: Hostinger (for transactional emails only)

We never sell your data to third parties.

6. Data Retention

We retain booking records for 7 years to comply with Pakistani tax and business regulations. Contact enquiries are retained for 2 years. You may request deletion of non-legally-required data at any time.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (where not legally required to retain)
Object to processing for marketing purposes
Withdraw consent at any time

To exercise any right, email info@wonderland-tours.com. We will respond within 30 days.

8. Cookies

Our website uses minimal cookies for essential functionality only. We do not use advertising or tracking cookies. Anonymous analytics may use a first-party cookie to count page visits.

9. Security

We use HTTPS encryption on all pages. Sensitive booking data is transmitted via secure email using Hostinger's encrypted mail servers. We do not store payment card numbers.

10. Changes to This Policy

We may update this policy periodically. The date at the top of this page shows the last update. Continued use of our website after changes constitutes acceptance.

11. Contact

Questions about this policy: info@wonderland-tours.com
Wonderland Treks & Tours, Near Serena Hotel, Karimabad, Hunza, Gilgit Baltistan 15700, Pakistan