Privacy Policy

We collect information you provide directly to us, as well as data gathered automatically when you use our website:

Information you provide:

• Full name, email address, and phone number when submitting a booking inquiry or contact form
• Departure city, travel dates, number of travelers, and package preferences
• Special requests, dietary requirements, or accessibility needs
• Payment details (processed securely by third-party payment providers — we do not store card numbers)
• Any messages or feedback you send to our team

Information collected automatically:

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, time spent, and click-through behavior
• Referral source (how you found our website)

We use the information we collect solely to provide you with the best travel experience possible:

• Process and manage your tour bookings and inquiries
• Communicate with you via WhatsApp, email, or phone about your reservation
• Send booking confirmations, itineraries, and pre-departure guides
• Personalise your experience and recommend tours that match your interests
• Respond to customer support requests and resolve disputes
• Send promotional offers and travel updates (only with your consent — you may unsubscribe anytime)
• Improve our website, services, and tour offerings based on usage patterns
• Comply with legal obligations under Pakistani law

We do not sell, rent, or trade your personal information to any third party. We may share your data only in the following limited circumstances:

• With our certified local guides, drivers, and accommodation partners — only the details necessary to fulfil your booking
• With payment processors (e.g., Stripe, JazzCash) who handle transactions securely under their own privacy policies
• With analytics tools (e.g., Google Analytics) to understand website usage — this data is aggregated and anonymised
• With law enforcement or government authorities if required by applicable Pakistani law
• In the event of a business merger or acquisition, with the successor entity under the same privacy protections

Our website uses cookies and similar technologies to enhance your browsing experience:

• Essential cookies — required for the website to function (session management, language preferences)
• Analytics cookies — help us understand how visitors interact with our pages (Google Analytics)
• Preference cookies — remember your currency selection and display settings
• Marketing cookies — used to show relevant ads on other platforms (only if you have consented)

You may control or disable cookies through your browser settings. Note that disabling essential cookies may affect website functionality. Our currency preference is stored in your browser's localStorage and is never transmitted to third-party servers.

We take the security of your personal data seriously and employ industry-standard measures to protect it:

• All data is transmitted over HTTPS with TLS encryption
• Our booking database is hosted on Supabase with row-level security and access controls
• Access to customer data is strictly limited to authorised Roamistan staff
• Payment transactions are processed by certified PCI-DSS compliant payment partners
• We regularly review our security practices and update them as needed

Despite our best efforts, no method of internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately at info@roamistan.com.

You have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct any inaccurate or incomplete information
• Deletion — request that we delete your personal data (subject to legal retention requirements)
• Portability — receive your data in a structured, machine-readable format
• Opt-out — unsubscribe from marketing communications at any time
• Objection — object to processing of your data for direct marketing purposes

To exercise any of these rights, please contact us at info@roamistan.com. We will respond within 30 days.

Our website may contain links to third-party websites including social media platforms (Instagram, Facebook, YouTube, TikTok), Google Maps, and payment providers. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the 'Last Updated' date at the top of this page
• Post a notice on our website homepage for 30 days
• Send an email notification to customers with active bookings (where applicable)

Your continued use of our website after any changes indicates acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please reach out to us: