Privacy Policy

1. Who we are

gobi (“we”, “us”) is responsible for the personal data you give us when you book a tour on this website. You can reach us at the contact details published on this website.

2. The data we collect

About the lead traveler

• Full name, email address, phone number and country of residence.

About every traveler

• Given and family name, traveler type (adult, child or infant) and date of birth.
• Nationality and passport number, when you provide them.
• Dietary requirements and anything else you choose to tell us.

About your booking

• The tour and dates, prices, payments and our correspondence with you.

Technical data

• Your IP address and basic request logs, used to keep the website secure and to prevent abuse of the booking form.
• This website does not use advertising or tracking cookies. Your browser’s session storage is used only to show your booking confirmation in the same tab.

3. Why we use it

• To reserve and manage your booking and to contact you about it.
• To run the tour: guides, drivers, ger camps and park authorities need some traveler details (for example names, passport numbers or dietary needs).
• To record payments and meet our accounting and tax obligations.
• To keep the website and our systems secure.

4. Who we share it with

We share only what is needed with the partners who deliver your tour — accommodation, transport and activity providers, national park and border authorities where permits are required — and with our bank and IT service providers. We never sell your personal data.

Within our own team, access to sensitive details such as passport numbers is limited to staff who need them; others see them masked.

5. How long we keep it

We keep booking and payment records for as long as the law requires for accounting purposes. Passport and other sensitive traveler details are kept only as long as they are needed for the tour and any related legal requirement, and are then deleted or anonymised. The exact periods will be stated in the final version of this policy.

6. How we protect it

Data is sent over encrypted connections, stored on access-controlled systems, and every change to a booking is logged. Staff accounts use individual logins with role-based permissions.

7. Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it when we no longer need it for your booking or a legal obligation. You can also object to any use of your data you did not expect. Write to us with your booking code and we will reply as soon as possible.

8. Children

Details of children and infants are provided by the lead traveler or a parent or guardian, and are used only to arrange their participation in the tour.

9. Changes to this policy

We will publish any changes on this page. If a change significantly affects how we use data from an existing booking, we will tell you by email.