Privacy policy

Last updated: 9 July 2026

Nomad Moto Tours ("we", "us", "our") operates the website nomadmototours.com. This policy explains what personal data we collect, why, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Data controller: RO MOTO TOURS SRL (Fiscal code / CUI 52002535), Bd. Râmnicu Sărat nr. 18, Sector 3, Bucharest, Romania. Questions or requests: contact@nomadmototours.com or +40 748 885 529.

1. What we collect

We collect only what we need to run your tour and communicate with you:

Booking details — your name, email address, phone number, chosen tour, dates, and any options (bike, passenger, ride-along) you select.
Contact form messages — your name, email, and the message you send us.
Newsletter subscriptions — your email address, if you choose to subscribe.
Payment records — the amount, date, and status of your payment. We do not collect or store your card number (see section 3).

We do not knowingly collect data from anyone under 18.

2. How we use it, and our legal basis

| Purpose | Legal basis (GDPR Art. 6) | |---|---| | Process and manage your booking | Performance of a contract | | Send booking confirmations and tour-related emails | Performance of a contract | | Reply to contact-form messages | Legitimate interest / pre-contract steps | | Send newsletters about new tours | Your consent (you may withdraw anytime) | | Handle refunds and disputes | Contract / legal obligation | | Keep financial and tax records | Legal obligation |

3. Payments

Payments are processed by Stripe. Your card details are entered directly with Stripe and are never seen or stored by us. Stripe acts as an independent controller/processor for card data under its own privacy terms (stripe.com/privacy).

4. Who we share data with

We do not sell your personal data. We share it only with the service providers needed to deliver the service ("processors"), and only to the extent required:

Stripe — payment processing.
Resend — sending booking-confirmation and transactional emails.
Hosting provider (Vercel) and database (Neon) — storing booking, message, and subscription records.

We may also disclose data where required by law or to protect our legal rights.

5. International transfers

Some providers above may process data outside the EU/EEA (e.g. in the US). Where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep it

Booking and payment records — retained as required by Romanian accounting and tax law.
Contact messages — kept while relevant, then deleted.
Newsletter subscriptions — kept until you unsubscribe.

7. Your rights

Under the GDPR you may, at any time:

Access a copy of the data we hold about you.
Rectify inaccurate data.
Erase your data ("right to be forgotten"), where no legal obligation requires us to keep it.
Restrict or object to certain processing.
Port your data to another provider.
Withdraw consent for the newsletter (use the unsubscribe link, or email us).

To exercise any right, email contact@nomadmototours.com. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, dataprotection.ro).

8. Cookies

We use only the strictly necessary cookies required for the site and the admin area to function. We do not use advertising or third-party tracking cookies.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the current version.