Privacy policy

What this page is

This is the privacy policy for The Spiti, the Shimla desk at thespiti.com. The site is a way to read the routes and write to a person. There is no checkout, no payment, and no account to create.

What we keep when you write

An enquiry, a contact note, a review, or a journal comment can include your name, mobile number, email if you gave one, city, the route or machine you asked about, and the words you wrote. If you send a review, we also keep the star rating and a short title if you gave one. The desk uses the mobile or email to see whether you have written before. That is the “verified guest” mark. It is not a public profile.

Why we keep it

We keep it so a person can answer, so the same plan is not lost between two people, and so we can tell you if a plan is being checked, approved, or cannot be taken. Reviews and comments stay hidden until the desk approves them. We do not use the list for advertising, and we do not sell it.

Who can see it

The people who run this desk can see it. The hosting company that stores the site can see the database, because that is how shared hosting works. If you asked us to write to you, the email service on this hosting sends that letter. We do not pass the list to a tour marketplace, a hotel chain, or a social network.

How long we keep it

An enquiry stays until the trip has happened and the ordinary follow-up is done, or until you ask us to delete it, whichever comes first. A review or comment that we do not approve is removed. One that we approve stays on the page until you ask us to take it down, or until the route itself is removed.

What the browser stores

The site remembers the light or dark choice on your phone or computer, and it uses a short-lived cookie so the desk login and the forms can tell a real visit from a script. There is no advertising cookie and no third-party tracker in the pages we publish.

Letters

If email is switched on, submitting a form can send you a letter, and a change of status can send another. Those letters use the address you typed. You can ask us to stop.

Children

The desk is for people arranging their own travel. Do not send a child’s name, school, or contact details in a form. If we can see that a note is about a child, we delete it.

Photographs and the gallery

Pictures and short videos on the site are ours, or they are embedded from YouTube or Instagram when we have pasted a link. A review or a comment you send is your words. We do not ask you to upload a photo of yourself, and we do not keep one.

WhatsApp and the phone

If the footer shows a WhatsApp or a phone number, that is a conversation you start. We do not add you to a broadcast, and we do not share that chat with anyone outside the desk.

How the forms are protected

The forms refuse a website link, ignore a hidden field that people do not see, and ignore a note that arrives too fast to have been typed. That is to keep junk out of the desk. It is not a profile of you.

Changes to this policy

If the desk changes what it keeps, this page changes, and the date of the change is the day the page was saved. The old wording is not kept as a second copy. If you already wrote to us, the earlier note stays under the rules that applied when you sent it, unless you ask us to delete it.

Asking for a copy or a deletion

Write to the email in the footer, from the same address you used on the form if you can. Say what you want deleted or corrected. We will do it, and we will write back. If the footer has no email yet, use the contact page and say “privacy” in the first line.