Privacy Policy

1. Introduction

SummitX Adventures (“we,” “our,” or “us”) is committed to protecting the privacy of our clients, partners, and website visitors. This Privacy Policy outlines how we handle personal data across all our digital platforms, booking systems, and field operations.

By accessing our website, booking a trip, or communicating with us, you consent to the practices described herein. This policy complies with GDPR, CCPA, and other applicable data protection regulations.

2. Information We Collect

2.1 Information You Provide

We collect data you voluntarily submit when:

• Booking an expedition or adventure package
• Creating an account or logging into our portal
• Subscribing to newsletters or marketing communications
• Contacting support or emergency coordinators
• Entering competitions, surveys, or community forums

This may include your name, email, phone number, mailing address, emergency contact details, physical profile, medical/disability disclosures, payment information, and trip preferences.

2.2 Information Collected Automatically

When you visit our site or use our mobile applications, we automatically gather:

• IP address, device type, browser, and operating system
• GPS/location data (only with explicit consent for guided trips)
• Page interaction, clickstream data, and referral sources
• Cookies and similar tracking technologies (detailed in Section 5)

3. How We Use Your Information

We process your data to:

• Facilitate trip bookings, itinerary planning, and permit applications
• Ensure participant safety and provide emergency response coordination
• Process payments and issue refunds or travel insurance claims
• Personalize your booking experience and recommend suitable expeditions
• Communicate itinerary updates, weather alerts, and guide instructions
• Improve website functionality, analytics, and customer support
• Send marketing updates, seasonal offers, and conservation initiatives (opt-in required)

4. Data Sharing & Third Parties

We do not sell your personal information. We share data only when necessary for service delivery or legal compliance:

• Service Providers: Payment processors, mapping services, emergency evacuation partners, and cloud hosting platforms
• Trip Partners: Local lodges, transport providers, and outfitters involved in your booked adventure
• Legal & Safety: Authorities, insurance carriers, or medical facilities in emergency situations
• Business Transfers: In the event of a merger, acquisition, or asset sale

All third parties are bound by data processing agreements and are required to maintain confidentiality and security standards.

5. Cookies & Tracking Technologies

We use cookies to enhance your experience, analyze site traffic, and serve relevant content. Categories include:

• Essential: Authentication, cart functionality, and security
• Analytics: Google Analytics, heatmap tracking, and performance metrics
• Marketing: Retargeting pixels and newsletter preference storage
• Preferences: Language, currency, and accessibility settings

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may impair booking functionality.

6. Data Security

We implement industry-standard security measures including:

• 256-bit SSL/TLS encryption for all data transmissions
• Encrypted databases with role-based access controls
• Regular security audits and penetration testing
• Secure offsite backups and disaster recovery protocols

While we strive to protect your data, no system is 100% immune to threats. We encourage strong password practices and prompt reporting of suspicious activity.

7. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Withdraw consent for marketing or location tracking
• Port your data to another service provider
• Lodge a complaint with a relevant data protection authority

To exercise these rights, email privacy@summitxadventures.com or use the account portal. We respond to verified requests within 30 days.

8. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. If we discover unintentional collection, we will promptly delete the information. Parents or guardians should contact us immediately if they believe a child has submitted data.

9. Policy Updates

We may update this Privacy Policy to reflect legal changes, business practices, or technology updates. Material changes will be communicated via email or prominent website notice. Your continued use of our services constitutes acceptance of the revised policy.

10. Contact Us