PURE NOMAD PRIVACY POLICY

This privacy notice tells you what to expect us to do with your personal information. 

Last updated: 31st January 2026
 

1. CONTACT DETAILS

Email: info@purenomadadventures.com
 

2. WHAT INFORMATION WE COLLECT, USE AND WHY

We collect or use the following information to provide services and goods, including delivery: 

  • Names and contact details 
  • Addresses 
  • Date of birth 
  • Purchase or account history 
  • Payment details (including card or bank information for transfers and direct debits) 
  • Health information (including dietary requirements, allergies and health conditions) 
  • Health and safety information 
  • Identification documents 
  • Information relating to compliments or complaints 

We also collect or use the following special category information to provide services and goods, including delivery. This information is subject to additional protection due to its sensitive nature: 

  • Health information 

We collect or use the following information for the operation of customer accounts and guarantees: 

  • Names and contact details 
  • Addresses 
  • Payment details (including card or bank information for transfers and direct debits) 
  • Purchase history 
  • Account information, including registration details 
  • Information used for security purposes 
  • Marketing preferences 

We collect or use the following information to prevent, detect, investigate or prosecute crimes: 

  • Names and contact information 
  • Financial transaction information 

We collect or use the following information for service updates or marketing purposes: 

  • Names and contact details 
  • Addresses 
  • Marketing preferences 
  • Recorded images, such as photos or videos 
  • Purchase or viewing history 
  • IP addresses 
  • Website and app user journey information 
  • Records of consent, where appropriate 

We collect or use the following information to comply with legal requirements: 

  • Name 
  • Contact information 
  • Identification documents 
  • Financial transaction information 
  • Any other personal information required to comply with legal obligations 
  • Health and safety information 

We also collect or use the following special category information to comply with legal requirements. This information is subject to additional protection due to its sensitive nature: 

  • Health information 

We collect or use the following personal information for dealing with queries, complaints or claims: 

  • Names and contact details 
  • Address 
  • Payment details 
  • Account information 
  • Purchase or service history 
  • Witness statements and contact details 
  • Relevant information from previous investigations 
  • Customer or client accounts and records 
  • Financial transaction information 
  • Information relating to health and safety 

We also collect the following special category information for dealing with queries, complaints or claims. This information is subject to additional protection due to its sensitive nature: 

  • Health information
     

3. INFORMATION ABOUT CHILDREN

While Pure Nomad Ltd does not directly offer services to children, we may collect limited personal information about children aged 12 or over where they are included in a family or private booking. This information (such as name, date of birth, nationality, and relevant health or dietary details) is collected only with the consent of a parent or legal guardian and used solely to arrange and deliver the booked travel services safely. We do not knowingly collect data from children without parental involvement, and our website and marketing are not directed at individuals under the age of 18.
 

4. LAWFUL BASES AND DATA PROTECTION RIGHTS

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. 

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website: 

  • Your right of access – You have the right to ask us for copies of your personal information. 
  • Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. 
  • Your right to erasure – You have the right to ask us to delete your personal information. 
  • Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. 
  • Your right to object to processing – You have the right to object to the processing of your personal data. 
  • Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. 
  • Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. 

If you make a request, we must respond to you without undue delay and in any event within one month. 

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
 

5. OUR LAWFUL BASES FOR THE COLLECTION AND USE OF YOUR DATA

To provide services and goods: 

  • Lawful basis: Contract – we have to collect or use the information so we can enter into or carry out a contract with you. 

To operate customer accounts and guarantees: 

  • Lawful bases: Contract and Legitimate interests. 
  • Legitimate interest: Pure Nomad Ltd has a legitimate interest in maintaining accurate and secure customer account information to manage bookings, payments, and travel arrangements efficiently. Processing personal information such as contact details, purchase history, and payment records enables us to provide ongoing customer service, administer bookings, resolve issues, and ensure travellers receive the services they have purchased. 

To prevent, detect, investigate or prosecute crimes: 

  • Lawful bases: Legal obligation and Legitimate interests. 
  • Legitimate interest: Pure Nomad Ltd has a legitimate interest in using limited personal information to help prevent and detect fraud or other criminal activity that could harm our customers, suppliers, or business operations. 

For service updates or marketing purposes: 

  • Lawful bases: Consent and Legitimate interests. 
  • Legitimate interest: Pure Nomad Ltd has a legitimate interest in keeping customers informed about service updates or travel information relevant to their bookings, and about similar tours or services they may be interested in. 

To comply with legal requirements: 

  • Lawful basis: Legal obligation – we have to collect or use your information so we can comply with the law. 

For dealing with queries, complaints or claims: 

  • Lawful bases: Contract and Legitimate interests. 
  • Legitimate interest: Pure Nomad Ltd has a legitimate interest in processing personal information to handle enquiries, complaints, and claims effectively and improve our customer service.
     

6. WHERE WE GET PERSONAL INFORMATION FROM

  • Directly from you 
  • Suppliers and service providers 
  • Third parties: 
  • Booking agents and travel partners who collect traveller details on our behalf. 
  • Destination management companies (DMCs) and local suppliers who help coordinate accommodation, transport, and guided activities. 
  • Payment processors or financial service providers who confirm payment details or transaction status for bookings. 
  • Tour leaders or guides who provide on-trip updates or incident information relating to a customer’s booking. 

We only receive the information necessary to deliver or support a booking and ensure the safe and lawful operation of our tours. All third parties are required to handle personal information securely and in accordance with UK data protection laws. 

7. HOW LONG WE KEEP YOUR INFORMATION

We keep personal information only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. 

Data Retention Policy 

Pure Nomad Ltd retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. The following outlines how long different types of personal information are kept and why: 

  • Booking and travel records: Retained for up to six years after the end of the tour. This is to manage bookings, provide services, and handle any post-travel queries or claims. 
  • Payment and financial records: Retained for six years after the end of the financial year in which the transaction took place, in order to comply with HMRC and accounting regulations. 
  • Supplier and partner records: Retained for up to six years after the end of the working relationship to manage contracts and ongoing relationships with suppliers and local agents. 
  • Customer service records: Retained for up to six years after the matter is resolved, to respond to enquiries, handle complaints, or defend potential legal claims. 
  • Incident and health and safety reports: Retained for up to six years after the incident (or longer if required by law) for legal and insurance purposes. 
  • Marketing data: Retained until consent is withdrawn or for up to two years of inactivity, to send marketing communications in accordance with consent provided. 
  • Website and analytics data: Retained for up to two years, depending on the lifespan of the relevant cookies, to analyse website performance and user engagement. 
  • Employment or recruitment information: Retained for up to six years after the end of employment or the conclusion of the recruitment process, to manage recruitment and employment records. 

After these periods expire, data is securely deleted or anonymised unless a longer retention period is required by law (for example, in connection with legal claims or insurance matters). 

For more information on how long we store your personal information or the criteria we use to determine this, please contact us using the details provided above.
 

8. WHO WE SHARE INFORMATION WITH

Data processors 

  • Website hosting provider – IT / Web Hosting 
  • Email provider – IT / Cloud Services 
  • Payment processor – Financial Services 
  • Booking and reservation platform provider – Travel Technology 
  • Marketing email platform – Marketing Technology 
  • IT support provider – IT Support and Maintenance 
  • Cloud storage and backup provider – IT / Data Storage 

Others we share personal information with 

  • Insurance companies 
  • Professional or legal advisors 
  • Relevant regulatory authorities 
  • Organisations we’re legally obliged to share personal information with 
  • Emergency services 
  • Suppliers and service providers 

Other relevant third parties:
Pure Nomad Ltd shares limited personal information with trusted third parties where this is necessary to deliver our travel services or to meet legal and contractual obligations. These include: 

  • Destination management companies (DMCs) and local suppliers such as accommodation providers, transport companies, and activity operators who help deliver parts of our tours abroad. 
  • Booking agents or travel partners who take bookings or referrals on our behalf. 
  • Insurance companies to assist travellers with policy administration or claims. 
  • Professional advisers such as accountants, auditors, or legal representatives who provide business, financial, or compliance advice. 
  • Regulatory and government authorities (for example HMRC, the Information Commissioner’s Office, or law-enforcement agencies) when disclosure is legally required. 
  • Emergency services in the event of an accident, illness, or other emergency affecting a traveller. 

All third parties are required to handle personal information securely and use it only for the agreed purpose, in accordance with UK data-protection law.
 

9. SHARING INFORMATION OUTSIDE OF THE UK

Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. 

Organisation name: Destination Management Companies (DMCs) and local suppliers
Category of recipient: Travel and tourism service providers (e.g. local agents, accommodation, transport, and activity operators)
Country the personal information is sent to: Mongolia, Armenia, Georgia, and Kyrgyzstan
How the transfer complies with UK data protection law: An exception listed in UK GDPR (Article 49(1)(b) – transfer necessary for the performance of a contract with the data subject) 

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place. 

Organisation name: Cloud and software service providers (e.g. email, CRM, marketing, and booking platforms)
Category of recipient: IT and cloud service providers
Country the personal information is sent to: EEA and United States
How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (Adequacy Regulations / UK Data Bridge).
 

10. HOW TO COMPLAIN

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice. 

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO. 

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF 

Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint 

11. MARKETING COMMUNICATIONS AND COOKIES

Marketing communications 
We may contact you by email, SMS, or other electronic means about our services, travel updates, or offers. Under the Privacy and Electronic Communications Regulations (PECR), we will only send you marketing messages if: 

  • You have given us your consent, or 
  • You are an existing customer and we are sending information about similar services (soft opt-in). 

You can withdraw your consent or opt out of marketing communications at any time by: 

  • Clicking the “unsubscribe” link in any marketing email, or 
  • Contacting us directly info@purenomadadventures.com. 

Cookies and website tracking 
Our website uses cookies and similar technologies to improve your browsing experience, analyse website performance, and provide relevant marketing. When you first visit our website, a cookie banner will appear giving you the choice to accept or manage your cookie preferences. 

You can learn more about the cookies we use and manage your preferences in our Cookie Policy, which is accessible at https://purenomadadventures.com/cookie-policy. 

By continuing to use our website, you consent to the use of cookies in accordance with your preferences. You can change or withdraw your consent at any time through the cookie settings on our website.