This policy explains how Kiyul Odyssey collects, uses and protects your personal information when you contact us, book a trip, or use our website at https://kiyulodyssey.com.

We are a travel agency licensed by the Tourism Council of Bhutan (TCB). For the purposes of data protection law, including the UK and EU General Data Protection Regulation where it applies to you, Kiyul Odyssey is the controller of your personal data.

If you have any questions about this policy or your data, contact us at explore@kiyulodyssey.com.

The information we collect

Depending on how you interact with us, we may collect:

• Contact details you give us, such as your name, email address, phone number and country of residence, when you enquire or sign up for our newsletter
• Booking and travel details needed to plan and deliver your trip, such as your itinerary preferences, dietary needs, medical or accessibility information you choose to share, and emergency contact details
• Passport and identity details required to obtain your Bhutan visa and TCB permits, such as your full name, nationality, date of birth, passport number and a copy of your passport
• Payment information, which is processed by our payment provider. [Confirm your provider, for example we do not store full card details ourselves.]
• Technical and usage data collected automatically when you visit the site, such as your IP address, browser type and pages viewed, through analytics tools

How we use your information

We use your information to:

• Respond to your enquiries and prepare itineraries and quotes
• Arrange and deliver your trip, including your permits, visa, accommodation, transport and guides
• Take payment and keep records required for accounting and tax
• Send you the newsletter and travel updates, where you have asked to receive them
• Meet our legal and regulatory obligations, including those of the Tourism Council of Bhutan and Bhutanese immigration

Our legal bases for using your data

Where UK or EU data protection law applies, we rely on the following legal bases. We process your booking and travel data because it is necessary to perform our contract with you. We process passport and permit data to meet legal obligations connected with entry to Bhutan. We send marketing emails on the basis of your consent, which you can withdraw at any time. We use limited technical data on the basis of our legitimate interest in running and improving our website.

Who we share your information with

We share your information only where it is needed to deliver your trip or run our business. This may include:

• The Tourism Council of Bhutan and Bhutanese immigration authorities, to issue your permits and visa
• Our trusted suppliers, such as hotels, airlines, transport providers and guides, with only the details they need
• Our payment provider [insert name] to process payments
• Our email and newsletter platform [insert name] to manage subscriptions, where you have signed up
• Analytics providers such as Google, as described under cookies below

We do not sell your personal information to anyone.

International transfers

We are based in Bhutan, which is outside the UK and the European Economic Area. If you contact or book with us from those regions, your information will be transferred to and processed in Bhutan, and shared with Bhutanese authorities as needed to arrange your trip. By booking with us you understand that this transfer is necessary to provide the service you have requested.

Cookies and analytics

Our website uses cookies and similar technologies to function properly and to help us understand how visitors use the site. We use Google analytics tools for this purpose. You can control or block cookies through your browser settings, although some parts of the site may not work as well if you do.

How long we keep your information

We keep your information only as long as we need it. Booking and financial records are kept for as long as required by law and for our legitimate business records. Enquiry and marketing data is kept until it is no longer needed or until you ask us to remove it. [Confirm your retention periods, for example financial records kept for X years.]

Your rights

Depending on where you live, you may have the right to ask us to give you a copy of the personal data we hold about you, correct information that is wrong, delete your data, restrict or object to how we use it, or receive it in a portable format. You can also withdraw consent to marketing at any time, either by using the unsubscribe link in our emails or by contacting us.

To exercise any of these rights, email us at explore@kiyulodyssey.com. We will respond within the time required by law.

Keeping your information secure

We take reasonable steps to protect your information against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, so while we work to protect your data we cannot guarantee absolute security.

Children

Our services are intended for adults. Where children travel as part of a family booking, we collect their details only as needed for permits and trip arrangements, and only from a parent or guardian.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown below.

How to contact us or complain

If you have a question or concern about your data, contact us first at explore@kiyulodyssey.com and we will try to put things right. If you are in the UK and remain unhappy, you can also complain to the Information Commissioner's Office at ico.org.uk. If you are in the EU, you can complain to your local data protection authority.

This policy was last updated on 18/06/2026.