DUST

Privacy Policy

Last updated: May 24, 2026

Nomadic Off-Road LLC ("we", "us") operates the @nomadic_offroadInstagram account and the customer service chatbot ("ORGO") that responds to messages there. This policy explains what data we collect when you contact us via Instagram Direct, why we collect it, how it is stored, and how you can have it deleted.

This policy covers DM-based interactions only. Information you provide via email, phone, or our booking pages on nomadicoffroad.mn is governed by the same principles but may involve different data flows — contact us at the address below if you need details on a specific channel.

1. Who we are

Nomadic Off-Road LLC, a tour operator registered in Mongolia. Postal contact: Ulaanbaatar, Mongolia. Data-protection enquiries: info@nomadicoffroad.mn.

2. What we collect via Instagram DMs

When you send a message to @nomadic_offroad, we receive:

  • Your Instagram-scoped user identifier (a numeric ID assigned by Meta, not your email or phone)
  • Your Instagram username and display name as Meta supplies them
  • The text and attachment metadata of the messages you send
  • Whether you tapped one of our suggested reply buttons (e.g. "See dates", "Get the kit")
  • How you arrived at our chat (organic, ad click, Story mention) when Meta provides that signal
  • Any email address you voluntarily share when we offer to send a tour information kit

We do not access your Instagram media, follower lists, profile bio, or any account information beyond what is listed above.

3. Why we collect it

  • To answer your questions about our motorcycle tours
  • To send you tour information packs (PDF itineraries, pricing, dates) when you ask for them
  • To allow a member of our team to follow up personally if your question needs a human
  • To understand which marketing surfaces drive interest (aggregate attribution — not used to track individuals)

We do not sell your data. We do not share it with advertising networks or data brokers. We do not use it to target ads back at you.

4. Where it is stored

Your data is processed by a small number of named sub-processors:

  • Meta Platforms, Inc.— message transport (Instagram Direct and the Messenger Platform). Meta's own privacy policy applies to the period before a message reaches us.
  • Google Cloud (Cloud Run + Cloud SQL) — our application server and database, hosted in the European Union (Frankfurt region, europe-west3).
  • Google Vertex AI (Gemini Flash)— message classification only. Per our contract with Google, your messages are not used to train Google's models.

5. How long we keep it

Conversations and captured email addresses are retained for 24 months from the date of last interaction, or until you request deletion — whichever is sooner.

Audit records of deletion requests are kept indefinitely (without the underlying personal data) so we can prove a deletion happened if you or a regulator asks.

6. Your rights

Under the EU General Data Protection Regulation (GDPR) and equivalent Mongolian law, you have the right to:

  • Know what data we hold about you (right of access)
  • Correct any inaccurate data (right of rectification)
  • Have your data deleted (right of erasure)
  • Receive a copy in a portable format (right of portability)
  • Object to specific uses of your data

To exercise any of these rights, email info@nomadicoffroad.mn. We respond within 30 days. There is no charge.

7. Data deletion

Two ways to delete your data:

  • Automated:Meta provides a "Remove Connection and Data" option for connected apps. Selecting it triggers our Data Deletion Callback, which removes all stored conversation history and any captured email address tied to your Instagram account within 30 days. You will receive a confirmation code you can use to verify the deletion at any time.
  • Manual: email info@nomadicoffroad.mn with the subject line Data Deletion Request and include your Instagram handle. We confirm receipt within 5 business days and complete the deletion within 30 days.

8. Changes to this policy

We may update this policy as our practices evolve. Material changes will be communicated by updating the "Last updated" date above; significant changes (new sub-processors, new data categories) will be announced separately in our Instagram bio.

9. Questions or complaints

Contact info@nomadicoffroad.mn. If you are an EU resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.