Privacy policy

Information you provide may include your name, email address, telephone or WhatsApp number, travel dates, group size, participant names, riding preferences, pickup and drop-off details, special requests and correspondence. If you ask to join guests who booked separately, we also collect the names you provide for that purpose. Please share other people's details only with their permission. The booking form records your confirmation that you are 18 or over and your acceptance of the booking terms. Our First 100 waitlist collects your email and any optional name or WhatsApp number you provide. We may request nationality and passport or identification details separately for check-in, guest registration or services that require them. Payment information is handled through the payment method arranged for your booking; this website's enquiry form does not collect card details. Website and security services may process technical information such as your IP address, browser, device, pages requested and diagnostic logs. Optional analytics can collect visit, referral and interaction information when enabled and accepted.

Essential and preference cookies support the website. The nx_seen cookie remembers whether you have viewed the Home story. The nx_consent cookie remembers your cookie choice for 180 days. Staff authentication uses session cookies, and Cloudflare Turnstile processes technical information to protect forms against spam and automated abuse. When configured, Google Analytics and Meta Pixel load only after you accept optional cookies. They help measure visits and booking-request events. Our tracking events do not intentionally send names, email addresses, telephone numbers or the text entered in booking forms. You can decline optional cookies, or change your choice using Cookie settings in the footer when analytics is enabled. Withdrawing consent stops those trackers and clears their cookies where the website can do so. Browser settings also let you block or delete cookies; blocking essential cookies may affect functionality.

We do not sell your personal information. We may disclose it to fulfil your booking, with your permission, to comply with a legal obligation or lawful request, or where necessary to protect the rights and safety of guests, staff or others. We do not publish guest identification documents or booking details. Access within Nexus is limited to people who need the information for their work.

Depending on the law that applies to you, you may have rights to access your personal information, correct inaccuracies, request deletion, restrict or object to processing, receive a portable copy, or withdraw consent. Withdrawal does not affect processing that was lawful before you withdrew it. For people covered by European data-protection law, these rights may include access, rectification, erasure, portability, restriction and objection, and the right to complain to a supervisory authority. Where California privacy law applies, rights may include knowing what information is collected, deletion, correction, opting out of covered sale or sharing, and protection from discrimination for exercising those rights. Contact nexushostelandtour@gmail.com to make a request or raise a concern. We may need to verify your identity and will respond within the period required by applicable law.

We use access controls, secure connections and other technical and organisational measures to protect personal information. Access to booking administration is restricted to authorised staff. No internet transmission or storage system is completely secure. Please do not send full payment-card details, security codes or unnecessary identification documents through website enquiry forms, email or WhatsApp.

We may update this policy as our services or obligations change. The date at the top of this page identifies the latest version. If a change requires fresh consent or a separate notice, we will request or provide it as required.