Effective Date: April 07, 2024
Last Updated: October 25, 2025
1. Purpose of This Policy
This Privacy Policy explains how Nomad Outdoor Division (“NOD”, “we”, “our”, or “us”) collects, uses, shares, and safeguards your personal information when you visit our website or engage in our travel programmes.
We are dedicated to safeguarding your privacy with the same care and diligence that we apply to participant safety.
By accessing or using our website, you confirm that you have read, understood, and agreed to this Privacy Policy. If you disagree, please stop using our website and refrain from submitting any personal information.
2. Who We Are (Data Controller)
Nomad Outdoor Division (NOD)
Registered in the United Arab Emirates (UAE)
Website: www.nomad-outdoor-division.com
Email (Data Protection Inquiries): hello@nomad-outdoor-division.com
NOD acts as the Data Controller for all personal data collected via its website, forms, and enrolment systems.
3. Applicable Laws
We comply with:
• The UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL);
• The EU General Data Protection Regulation (GDPR 2016/679); and
• The UK GDPR.
If any of these laws offer greater protection, the higher standard is applicable.
4. Information We Collect
We may collect the following categories of personal information (“Personal Data”):
a) Identification and Contact Details
Name, date of birth, nationality, email address, postal address, and phone number.
b) Enrolment and Travel Data
Programme selection, travel preferences, accommodation options, payment details, and parental consent forms.
c) Health and Safety Data (Special Category)
Allergies, medical conditions, medications, vaccination status, and emergency contacts are processed only with explicit consent and solely for participant safety.
d) Technical Data
IP address, device type, browser information, and cookie identifiers.
e) Communication Records
Emails, enquiry forms, or messages exchanged with our staff.
5. How We Use Your Personal Data
We process Personal Data only for legitimate and specific purposes:
Purpose Legal Basis
| To manage enrolments, payments, and travel arrangements | Contract performance |
| To provide programme updates, newsletters, and marketing (with consent) | Consent |
| To respond to enquiries and provide support | Legitimate interest |
| To ensure participant safety and medical support | Vital interest / Consent |
| To comply with legal or regulatory obligations | Legal obligation |
We never sell or rent your Personal Data under any circumstances.
6. Processing of Minors’ Data
As our programmes involve minors, extra protections are in place:
• We require verifiable parental or guardian consent for participants under 18.
• Parents may access, correct, or delete their child’s data at any time.
• We do not knowingly collect data from children without such consent.
7. Data Sharing and International Transfers
We may share Personal Data with:
1. Trusted service providers (travel agencies, accommodation partners, IT and payment processors) strictly bound by confidentiality and data-protection agreements.
2. Governmental or regulatory authorities when legally required.
3. Emergency or healthcare professionals, if necessary for participant safety.
Some of these partners are situated outside your country.
Where data is transferred internationally (e.g., to the UAE), we implement suitable safeguards, including contractual clauses, encryption, and restricted access controls, to ensure equivalent protection.
8. Data Retention
We retain Personal Data only for as long as necessary:
• Prospective customers: up to 3 years after the last interaction.
• Participants and parents: up to 5 years after programme completion.
• Financial and legal records: as required by applicable law.
When no longer needed, data is securely deleted or anonymised.
9. Data Security
We use administrative, technical, and physical safeguards to prevent unauthorised access, alteration, or disclosure. In the event of a data breach, we will promptly notify affected individuals and the relevant supervisory authority in accordance with applicable law.
10. Your Data Protection Rights
Under GDPR, UK GDPR, and UAE PDPL, you have the following rights:
• Right of access – to obtain a copy of your Personal Data.
• Right of rectification – to correct inaccurate or incomplete data.
• Right of erasure – to request deletion where legally permissible.
• Right to restrict processing – to limit how we use your data.
• Right to object – to stop receiving marketing communications.
• Right to data portability – to receive your data in a structured format.
To exercise your rights, contact hello@nomad-outdoor-division.com.
We will acknowledge and respond to all valid requests within 30 days. You may also complain to your local Data Protection Authority (e.g., CNIL in France, ICO in the UK, or the UAE Data Office).
11. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve user experience, monitor performance, and personalise content. Essential cookies are necessary for the site to function; non-essential cookies are only used with your consent. You can change your cookie preferences at any time via your browser settings or our cookie banner.
12. Automated Decision-Making
We do not employ automated decision-making or profiling that has legal or significant impacts on individuals.
13. Data Transfers, Back-Ups, and Hosting
Our servers and data systems are hosted in the United Arab Emirates. We carry out regular encrypted backups and enforce access controls in line with international security standards (ISO 27001).
14. Changes to This Policy
We review this policy regularly to ensure compliance with changing legislation. Any updates will be posted on our website, with the “Last Updated” date adjusted accordingly. Material changes will be clearly communicated prior to implementation.
15. Contact Us
For any questions, concerns, or to exercise your data rights, please contact:
Nomad Outdoor Division
📧 hello@nomad-outdoor-division.com