Privacy Policy | Nomadra Official Website

General Terms & Introduction

Nomadra Tour LLC: ('we', 'us', 'Nomadra') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website nomadra.mn, communicate with us, or book a tour

Data Controller: Nomadra Tour LLC, Ulaanbaatar, Mongolia. Contact: info@nomadra.mn, +976-99937320. We comply with the Law of Mongolia on Personal Data Protection and, where applicable, the EU General Data Protection Regulation (GDPR)

2. What Data We Collect
We collect only what is necessary to operate your tour. We do NOT collect sensitive data beyond what you voluntarily provide for safety

Identity & Contact Data: Full name, date of birth, nationality, email, phone, address

Travel Data: Passport details (number, expiry, copy) only when required for domestic flights, national park permits, border zone permits; dietary requirements, allergies, medical conditions you choose to disclose, emergency contact

Booking Data: Tour dates, itinerary, accommodation preferences, payment transaction ID (we do not store full card numbers).

Communication Data: Emails, WhatsApp messages, inquiry forms

Technical Data: IP address, browser type, cookies for website analytics (see Section 6)

3. Why We Use Your Data (Legal Basis)

To perform our contract with you: To create itinerary, book camps/hotels/drivers, issue domestic flight tickets, obtain permits, and operate the tour

Legal obligation: To comply with Mongolian tourism, tax, and border permit laws

Legitimate interest: To respond to inquiries, improve our services, ensure safety, and for direct customer service

Consent: For marketing newsletters (only if you opt-in), and for special category data (health/dietary). You can withdraw consent at any time

3. How We Share Your Data
We never sell your data. We share only on a need-to-know basis with:

Trusted local suppliers: ger camps, hotels, transport companies, domestic airline (e.g., Hunnu Air, Aero Mongolia) for booking

Government authorities: For national park/border permits when legally required

Payment processors: Banks, Stripe/payment link provider, PayPal - only transaction data

IT providers: Secure email hosting, cloud storage (Google Workspace) with encryption

All suppliers are bound by confidentiality. No international transfer outside Mongolia except for payment processing and where you are based

4. Data Retention
We apply strict minimization. All deletion is done via secure overwrite

Passport copies: Deleted securely within 30 days after tour completion, per Mongolian data law. Only permit reference number kept for accounting if required

Booking, invoice, and tax records: Retained 5 years per Mongolian accounting law

Health/dietary disclosure: Deleted 30 days after tour

Inquiry emails from non-booked clients: Deleted after 12 months

Marketing consent: Until you unsubscribe

5. Data Security

We implement appropriate technical and organizational measures: password-protected devices, encrypted cloud storage, two-factor authentication, limited access (only owner and operations manager), and paper copies locked. Website uses SSL (HTTPS). Despite our efforts, no internet transmission is 100% secure - we will notify you within 72 hours of any data breach affecting your rights

6. Cookies & Website Analytics
Our website nomadra.mn uses

Essential cookies: Required for site to function

Analytics cookies: Google Analytics 4 (anonymized IP) to understand traffic - only with your consent via cookie banner

We do NOT use advertising or tracking cookies. You can disable cookies in your browser. Our social media pages (Facebook, Instagram) have their own privacy policies.

7. Your Rights
Under Mongolian law and GDPR (if applicable), you have the right to

Access: Request a copy of data we hold about you

Correction: Correct inaccurate data

Deletion: Request deletion ('right to be forgotten') subject to legal retention

Restriction & Objection: Restrict processing or object to direct marketing

Portability: Receive your data in a structured format

Withdraw Consent: At any time for health/marketing data

To exercise rights, email info@nomadra.mn with subject 'Data Request'. We respond within 30 days. You also have the right to lodge a complaint with the Mongolian Human Rights Commission or your EU supervisory authority

8. Children's Privacy

We collect data about children under 16 only from their parent/legal guardian for booking and safety purposes, and with explicit parental consent. We do not market to children

9. Third-Party Links

Our website may link to third parties (TripAdvisor, airlines). We are not responsible for their privacy practices. Please read their policies

10. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The latest version with 'Last Updated' date will always be on our website. For material changes, we will notify booked clients by email

11. Contact Us

For any privacy questions, data requests, or complaints: Nomadra Tour LLC, Data Protection Officer, Ulaanbaatar, Mongolia. Email: info@nomadra.mn, mongolianson@gmail.com, Phone: +976-99937320, 88068066. We will respond within 7 business daysWe may update this Privacy Policy to reflect legal or operational changes. The latest version with 'Last Updated' date will always be on our website. For material changes, we will notify booked clients by email