Last updated 30 October 2026
Who we are
Steppe & Sky ("we", "us", "our") plans and arranges private, tailor-made journeys in Mongolia. Our business address is Regus Central Tower, Great Chinggis Khaan Square 2, Sükhbaatar District, Ulaanbaatar, Mongolia. You can reach us at steppeandsky@tourground.com.
We are the controller of the personal information described in this notice. For any privacy question or request, email steppeandsky@tourground.com.
What we collect
Information you give us when you send an enquiry or plan a journey with us: your name, email address, phone number if you choose to give it, where you live, how you would like us to contact you, your travel dates, the number and ages of travellers, your interests, budget range and any notes you add.
Information needed to arrange a journey once you decide to go ahead: names as they appear on passports, dates of birth, passport details where a supplier or authority requires them, flight details, dietary needs, mobility or medical information that affects your arrangements, and emergency contact details. We only ask for health information when it is needed to look after you, and we use it only for that purpose.
Limited technical information when you use this website, such as your browser type, device, pages visited and the date and time of your visit, recorded in our hosting provider's server logs for security and to keep the site working.
How we use it and why
To answer your enquiry and prepare proposals for you, because you have asked us to (steps taken at your request before a contract).
To book, arrange and look after your journey, including passing details to the suppliers who deliver it, because this is necessary to perform our contract with you.
To keep records for accounting, tax and legal purposes, because the law requires it.
To keep this website secure, prevent misuse of our forms and improve our service, because we have a legitimate interest in doing so.
To send you occasional news about journeys, only if you have asked us to. You can unsubscribe at any time using the link in every message or by emailing us.
We do not sell your personal information and we do not use it for automated decision-making.
Who we share it with
The suppliers needed to deliver your journey, such as guides, drivers, transport operators, hotels, lodges and activity providers, and only the details each one needs.
Service providers who process information on our behalf under contract, such as our website host (Vercel) and our email provider. They may only use it to provide their service to us.
Public authorities, insurers or professional advisers where the law requires it, or where it is needed to protect your safety or vital interests, or to establish or defend legal claims.
International transfers
Because we arrange travel, some of your information has to be shared with suppliers in the country you are visiting, and some of our service providers store data in other countries. Where information leaves the country it was collected in, we take reasonable steps to make sure it is protected, for example by using providers that offer recognised contractual safeguards.
How long we keep it
Enquiries that do not lead to a booking are kept for up to two years, so that we can pick up the conversation if you come back to us, and then deleted. Booking records are kept for as long as accounting, tax and limitation rules require, normally up to seven years after your journey. Server logs are kept for a short period by our hosting provider.
How we protect it
Information sent through this website travels over an encrypted connection. Access to your information is limited to the people who need it to plan and look after your journey, and our service providers are chosen for their security standards.
Your rights
Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given at any time.
To make a request, email steppeandsky@tourground.com. We will reply within one month. If you are unhappy with how we have handled your information, please tell us first so we can try to put it right; you also have the right to complain to the data protection authority in the country where you live or work.
Children
We plan journeys for families, but we only accept enquiries from adults. Information about children travelling is provided by, and used on behalf of, their parent or guardian.
Changes to this notice
We may update this notice from time to time. The date at the top of the page shows when it last changed.