Legal

Privacy policy

Effective March 1, 2025 · Last updated March 1, 2025 · Applies to ladakhtouroperators.com

1. Who we are

Ladakh Goods LLC, 1123 N Orange St, Suite 204, Wilmington, DE 19801, USA ("Ladakh", "we"). We are the business that decides what happens to the personal information described here. Privacy questions and requests: privacy@ladakhtouroperators.com.

2. What we collect

Only the following, and only when it applies to you:

• Order and contact details: name, shipping address, email, phone if you give one. Needed to fulfill the order and to contact you about it.
• Order contents: what you bought. This one is mildly sensitive by nature — it's an adult purchase — but it is not health data.
• Payment details: card brand, last four digits, expiry. The full number goes straight to our payment processor; we never store it.
• Correspondence: emails and contact-form messages, including anything you tell us about your preferences.
• Technical data: IP address, browser and device type, pages viewed, referring URL, and a rough location derived from IP.
• Cookie and cart data: your cart lives in your browser's local storage. Marketing cookies only after you accept them.

We do not knowingly collect information about anyone under 18. The store sells adult products but does not verify age beyond a general 18+ notice.

3. Why we use it

• Take payment, pack, and ship your order, and handle returns and warranty claims.
• Answer your questions and provide support.
• Detect fraud and abuse, including card-testing on the checkout.
• Keep accounting and tax records as the law requires.
• Measure site performance and, with consent, run advertising.
• Send the newsletter, if you asked for it.

We don't profile you for automated decisions with legal effect, and we don't send different prices based on your browsing history.

4. Who we share with

Service providers, under contract, only for the purposes above:

• Payment processing — card authorization and settlement.
• Shipping — USPS and our label provider receive the name and address on the parcel.
• Hosting and email — the site and transactional email infrastructure.
• Analytics and advertising — only if you accept optional cookies.
• Accountants and lawyers — where needed, under confidentiality.

We also disclose information where legally required, or to enforce our terms. If the business is sold, customer data may transfer to the buyer; you'd be told before that happened.

We do not sell personal information for money. Under the CCPA/CPRA definition, however, sharing identifiers with ad platforms for cross-context behavioral advertising counts as "sharing" — so we treat it as such and offer an opt-out.

5. Cookies and tracking

Necessary cookies keep the cart and checkout working and are always on. Analytics and advertising cookies are optional and off until you accept. The full list, with purposes and lifetimes, is in the cookie policy, and preferences can be changed at cookie preferences.

6. How long we keep it

• Order records: 7 years, for tax and accounting.
• Support messages: 2 years from last contact.
• Newsletter subscription: until you unsubscribe, plus 30 days.
• Analytics data: 14 months.
• Cart contents: until you clear them or the browser does.

7. Your California rights (CCPA/CPRA)

If you're a California resident, you have the right to:

• Know what categories and specific pieces of personal information we've collected, the sources, the purposes, and the categories of recipients.
• Delete personal information we hold, subject to legal retention duties.
• Correct inaccurate personal information.
• Opt out of sale or sharing for cross-context behavioral advertising.
• Limit use of sensitive personal information to the purposes it was collected for — we already do, so in practice this changes nothing.
• Non-discrimination for exercising any of the above. No price increase, no downgraded service.

Do Not Sell or Share My Personal Information. Use the toggle at cookie preferences and turn off advertising cookies, or email privacy@ladakhtouroperators.com and we'll set it account-wide. If your browser sends an opt-out preference signal (Global Privacy Control), we honor it as an opt-out of sharing.

How to exercise any right: email privacy@ladakhtouroperators.com with the right you're invoking and the email address used on your order. We acknowledge within 10 business days and respond within 45 calendar days. If we need more time, we tell you why before the 45 days are up, up to a further 45.

Verification. For know and delete requests we match your email to an order. If that isn't possible, we may ask for the last four digits of the card used. An authorized agent can act for you with written permission.

Appeals. If we refuse a request, we say why and how to appeal. Appeal decisions come within 45 days.

8. Other states

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out of targeted advertising. Use the same email address and process above; we apply the same 45-day clock and the same non-discrimination rule.

9. Where your data is processed

Our hosting and payment processing are in the United States. Some service providers may process data outside the US; where that happens, transfers rely on standard contractual clauses. Order data is always processed in the US for fulfillment.

10. Security

The site runs over TLS. Payment data is handled by a PCI-DSS-compliant processor. Access to order data is limited to the two staff who need it. No system is perfect and we don't claim otherwise, but a breach affecting your data would be reported to you and to regulators as required.

11. Children

Not directed to children under 13. We don't knowingly collect their data; if we have, ask and we'll delete it.

12. Changes

Material changes get a site notice for 30 days and a new "last updated" date. Continued use after that means the new version applies.

13. Contact

Ladakh Goods LLC · 1123 N Orange St, Suite 204, Wilmington, DE 19801 · privacy@ladakhtouroperators.com

Data protection contact and EU/UK representative, if one is appointed: to confirm