Privacy policy

What personal data we collect, why, how long we keep it and how to have it deleted.

Last updated: [DATE]. This is a draft. Have a lawyer in your jurisdiction review it before you take a booking.

Who we are

[LEGAL COMPANY NAME], registered in Mongolia under number [REGISTRATION NUMBER], at [FULL ADDRESS]. You can reach us at [EMAIL].

What we collect, and why

When you send an enquiry or build a trip: your name, email address, optional phone number, number of travellers, travel dates and whatever you write in the message. We use this only to answer you and to prepare a quote.

If you book: we additionally need passport details, date of birth, nationality, emergency contact, and any dietary, medical or mobility information you choose to give us. We need these to make reservations in your name with airlines, ger camps and hotels, and to keep you safe in remote places. Health and dietary information is sensitive data, and we collect it only because you gave it to us for that purpose.

Payment: we do not store card numbers. Payments are handled by our payment processor, who holds that data under their own policy.

Automatically: your IP address, browser and pages viewed, through analytics — but only if you accept cookies.

How long we keep it

Enquiries that do not become bookings: [24 MONTHS], then deleted. Booking records: [5 YEARS] after travel, because tax and insurance rules require it. Analytics: [14 MONTHS]. Marketing consent: until you withdraw it.

Who we share it with

Only the suppliers needed to run your trip — airlines, ger camps, hotels, drivers and guides — and only the details they need. Our payment processor. Our email and analytics providers. We never sell your data to anyone.

Some of these are outside Mongolia, so your data may be transferred abroad.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or withdraw consent at any time. Write to [EMAIL] and we will reply within 30 days.

If you are in the EU or UK, GDPR gives you these rights and the right to complain to your national data protection authority. If you are in Korea, PIPA gives you equivalent rights. These apply because of where you are, not where we are.

Cookies

We use a small number of cookies. One remembers your language; one remembers your cookie choice. Analytics cookies only load after you accept them, and you can change your mind at any time from the link in the footer.

Children

We do not knowingly collect data from anyone under 14 without a parent booking on their behalf.

Changes

If we change this policy we will update the date above and, for material changes, tell anyone with a live booking by email.

Last updated: 2026-07-31