Legal
Privacy Policy
Note: this is a starting template, not vetted legal advice. Have a lawyer review it against your actual data practices and local requirements (especially if you plan to serve EU/UK visitors) before relying on it.
What We Collect
When you submit the Apply or Contact form, we collect the information you provide: your name, email address, tour interest, preferred timeframe, group size, and any message you write. We don't collect payment information through this site, that happens later, directly with you, once your booking is confirmed.
Cookies & Analytics
We use Google Analytics to understand how visitors use the site: which pages are viewed, roughly where visitors come from, what device they use, and whether an application was sent. This helps us improve the site. Google Analytics only runs if you click "Accept" on the cookie banner; if you decline, no analytics cookies are set and no data is sent to Google.
Google Analytics sets cookies named _ga and _ga_*, which last up to 2 years. We store your cookie choice in your browser so we don't ask again. You can change your mind at any time with the "Cookie settings" link at the bottom of every page. Google's own privacy policy is at policies.google.com/privacy.
How We Use It
Your information is used only to respond to your application or inquiry, and to coordinate your tour if you proceed. We don't sell your data, and we don't share it with third parties beyond what's needed to run the site and respond to you (see below).
Where It's Stored
Form submissions are processed through Netlify Forms and/or delivered to our email inbox. Netlify acts as our form-processing provider; their own privacy practices apply to data in transit through their systems. Apart from Google Analytics (only with your consent, see above), we do not use any other third-party service to collect personal data on this site.
Your Rights
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, at any time. Email [email protected] and we'll handle it personally, usually within a few days.
Retention
We keep application details for as long as needed to plan and deliver your tour, and a reasonable period afterward for our own records. If your application doesn't move forward, you can ask us to delete your details at any time.
International Visitors
Beyond Steppe is based in Kazakhstan and welcomes guests from around the world, including the UK and EU, on tours across Central Asia and Europe. If you're located somewhere with specific data protection rights (like the GDPR), those rights apply to you, and the section above on accessing, correcting, or deleting your data is how to exercise them.
Children
This site and our tours are intended for adults. We don't knowingly collect information from children.
Changes
If this policy changes in a meaningful way, we'll update the date at the top of this page.
Contact
Questions about this policy: [email protected].