Privacy policy

Who we are

iamnomadkg.com is the website of I AM NOMAD, a tour operator based in Bishkek, Kyrgyz Republic. We decide why and how the information you send through this website is used, and we are responsible for it.

For any question about your data, email iamnomadkgz@gmail.com or call +996 706 001 517.

What we collect

What you type into our request forms:

• your name, email, phone or WhatsApp number;
• company name, country, number of participants and budget — for corporate requests;
• preferred dates, number of guests, event type, the tour you chose;
• your message.

So that we can reply, a request needs a phone number or an email address: without one we cannot process it.

If you leave a review and sign in with Google: the name, photo and email address of your Google account, the account identifier, your rating and the text of the review. The email address is used only for sign-in: it stays in the sign-in system and is never shown to other visitors. We do not receive your password. The sign-in system also stores your IP address and browser details.

Along with a request we automatically store the page it was sent from, the site language, where you came from (the source domain and advertising tags) and an IP fingerprint (hash). We do not keep the IP address itself in the request: the fingerprint is used only to block spam. It is not fully anonymous: in principle the address can be recovered from it.

When you open the website or send a form, the services listed in section 5 see your IP address: the website cannot work without this.

Why

• to answer your request and plan the trip with you;
• to contact you by email, phone or messenger;
• to check and publish your review (your name as “First L.”, account photo, rating and text are shown on the site after review);
• to understand which sources and adverts bring requests;
• to protect the website from spam.

Our grounds are your request for a reply and preparing a tour contract, your consent to publishing a review, and protecting the website from spam.

We never sell your data or share it for advertising, and we do not send newsletters without your separate consent.

A request is not a booking

There are no payments on this website. Sending a request does not commit you to anything and is not a booking or a contract. Our manager will contact you to discuss the details; tour and payment terms are agreed separately.

Where your data is stored and who processes it

To run the website we use services from other companies:

• Supabase (Supabase Pte. Ltd., Singapore) — our database of requests and reviews, with servers in Germany (Frankfurt);
• Web3Forms (India) — forwards requests and review notices by email; it keeps copies for up to 3 years on AWS servers and may check the sender’s IP address and email through the CleanTalk and Akismet anti-spam services;
• Google (USA) — the Gmail inbox that receives requests; sign-in when you send a review (Google Sign-In); maps, if you open them (Google Maps). Google’s own privacy policy applies to sign-in and maps;
• Vercel (USA) — website hosting and anonymous visit statistics;
• Meta (USA) — if you message us on WhatsApp, Instagram or Facebook, those services’ own rules apply to your messages.

These companies are outside the Kyrgyz Republic, so your data is transferred abroad. This transfer is needed to answer your request. If you do not want it, please call us instead.

There are no other recipients, except those involved in organising your trip and cases required by law. Only I AM NOMAD staff and the website developer can access your requests.

How long we keep it

As long as needed to handle your request and organise the trip, and no longer than 3 years after our last contact with you. We delete it earlier if you ask us to. Copies at Web3Forms are kept under that service’s rules, for up to 3 years. Documents for completed tours may be kept longer if the law requires it.

Cookies and statistics

We do not set advertising or tracking cookies ourselves. Visit statistics (Vercel Web Analytics) are collected without cookies and cannot identify you. Your browser remembers your colour theme and, while the tab is open, where you came from.

Google Maps and Google sign-in load only after you click. Google then receives your IP address and may use its own cookies, such as g_state for up to 6 months.

Your rights

At any time you can:

• ask what data we hold about you, where it came from and how it is used;
• correct or complete it;
• ask us to delete it;
• restrict or object to its processing;
• receive your data in a convenient format;
• withdraw your consent.

Email iamnomadkgz@gmail.com and we will reply within 7 business days. We comply with the Digital Code of the Kyrgyz Republic. You can also complain to the State Agency for Personal Data Protection of the Kyrgyz Republic or, if you are in the European Union, to the supervisory authority in your country.

Children and travel documents

A parent or legal guardian sends requests on behalf of a child.

When you book a tour we may ask for copies of passports (for example, for border zone permits and check-in) and health details if they matter for the safety of the trip. Only those involved in organising the trip receive this data: hotels, guides, drivers and the border service. We keep it for as long as the tour and the law require.

Changes

If we update this policy, the new version will be published on this page with a new date.