Legal
Privacy policy
What we collect when you enquire, book or create an account, why we need it, and how you can ask us to remove it.
Last updated: 10 November 2026
1. Who is responsible
KayinaatTrip, based in Skardu, Gilgit-Baltistan, Pakistan, is responsible for the personal information collected through this website. You can contact us at admin@kayinaattrip.com.
2. What we collect
- Enquiries: your name, email, phone number, travel date, number of travellers and the message you send.
- Bookings: contact details, dates, group composition and any notes you add about the trip.
- Accounts: your name, email, password hash, and optionally phone, city, country, date of birth and profile photo.
- Newsletter: your email address and confirmation status.
- Technical data: a one-way hash of your IP address used to prevent spam and abuse, and standard server logs.
We do not ask for card numbers or bank details through this website.
3. Why we use it
We use your information to answer enquiries, prepare quotations, confirm and operate trips, manage your account and bookings, send service messages, prevent fraudulent or abusive submissions, and keep records required for accounting and legal purposes.
If you ask to receive news or offers, we use your email for that purpose until you unsubscribe. Every marketing email includes an unsubscribe link.
4. Lawful basis
We process most of your information because it is needed to respond to your request or perform the trip you have booked. Where you have agreed to marketing, we rely on that consent. We also have a legitimate interest in keeping the website secure and preventing spam.
5. Sharing
We share only what is necessary with the providers who deliver your trip — hotels, guesthouses, transport operators, guides and, where relevant, permit authorities. We do not sell your personal information.
Our email and hosting providers process data on our behalf under their own security and privacy terms. We may disclose information where we are legally required to do so.
6. Cookies and sessions
This website uses a single essential session cookie to keep you logged in, protect forms against forgery and remember messages between pages. We do not use advertising cookies or third-party tracking cookies by default.
If site analytics is enabled by the site owner, it may set its own cookies or identifiers. You can block cookies in your browser, although logging in and submitting forms may stop working.
7. How long we keep it
Enquiries are kept while we are dealing with them and for a reasonable follow-up period. Booking and accounting records are kept for as long as required by applicable law. Account details remain until you ask us to close the account. Newsletter subscriptions remain until you unsubscribe.
Spam-prevention records and rate-limit counters are short-lived and are deleted or overwritten automatically.
8. Security
Passwords are stored as one-way hashes, never in plain text. Form submissions are checked with security tokens and rate limits. Access to booking and account information is restricted to authorised staff. No system is completely secure, so please use a unique password and tell us promptly if you suspect unauthorised access.
9. Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. You can also withdraw marketing consent at any time.
Send requests to admin@kayinaattrip.com. We may need to verify your identity before acting on a request.
10. Children
Bookings for children are made by a parent or guardian, who is responsible for the information provided. We do not knowingly create accounts for children.
11. Changes
We may update this policy as the website or our services change. The date at the top shows when it was last revised. Significant changes will be highlighted on the website.