Privacy Policy

Last updated: October 11, 2026

1. Who we are

This website, https://www.sayattravel.com, is operated by Sayat Travel LLC (“Sayat Travel”, “we”, “us”), based in Mongolia. We welcome guests from many countries.

For any question about this policy or your personal information, email info@sayattravel.com.

2. What we collect and why

Enquiries. Our enquiry form asks for:

• your name and email address;
• the tour you are interested in;
• your travel dates;
• the number of travellers;
• your message.

We use these details to reply to you and plan your trip. The form is not stored on our website. It is sent by email to two inboxes we use to answer enquiries: our business mailbox (info@sayattravel.com) and our Gmail account.

Bookings. When you book a tour, we record:

• the tour and travel date;
• the number of travellers;
• the tour price, the amount you pay now and any remaining balance.

At checkout we ask for your email address and your billing name and address. Your phone number and an order note are optional. You book as a guest; we do not create user accounts. We do not ask for passport or health information on our website.

We use booking details to confirm and run your tour, take payment, and keep the records the law requires.

Payments. Card and SocialPay payments are made on Golomt Bank’s secure payment page, under Golomt Bank’s privacy notice. Our website sends Golomt Bank only the amount, a transaction reference and a return link. We do not see or store your full card details.

If you choose another payment option offered at checkout, such as a bank transfer, the banks involved handle that payment.

Booking information shared with our email service. When a booking is placed and its payment is being processed, our website sends booking information to our email service, Hostinger Reach. It sends:

• your email address, first and last name, and phone number;
• your billing address (and company name, if you gave one);
• the order number and date, and the payment method used;
• the order totals and currency;
• general details of the booking product.

This happens for every booking, so that all our booking records are kept together in one place. It does not subscribe you to marketing emails. We only send marketing emails if you tick the marketing checkbox at checkout (see “Email updates”).

Unfinished bookings. If you enter your email address at checkout but do not complete your booking, our website records:

• your email address;
• the contents and value of your booking cart.

This record is kept on our website. If the booking is not completed, after about one hour it is also sent to Hostinger Reach. We do not currently send reminder emails about unfinished bookings. If we start, we will only send them to people who have agreed to receive marketing emails, and we will update this policy first.

Email updates. If you tick the marketing checkbox at checkout, we add your email address and name to our subscriber list in Hostinger Reach, and we may occasionally send you news and offers. Every email includes an unsubscribe link, and you can ask us to remove you at any time. We do not send marketing emails to people who have not subscribed.

Our chat assistant. Our website offers an optional chat assistant (“Ask Sayat Travel”). If you use it, your messages and the recent conversation are sent to our AI provider, Anthropic, to generate replies.

We do not store chat conversations on our website. Anthropic processes and keeps them under its own terms and policies. To prevent misuse, our website keeps a scrambled (one-way hashed) form of your IP address for 10 minutes.

Please do not share passport details, health information or other sensitive information in the chat.

WhatsApp. If you message us on WhatsApp, WhatsApp (Meta) handles the conversation under its own privacy policy. We use it only to reply to you.

3. Our legal grounds

We use your information:

• to reply to your enquiry and take the steps you ask for before booking;
• to perform our contract with you when you book;
• to meet legal obligations, such as accounting;
• with your consent, for marketing emails;
• for our legitimate interest in running, improving and protecting our website and business, including keeping records of bookings and unfinished bookings.

Where the law requires your consent, we ask for it.

4. Cookies and similar technologies

• Cart cookies (woocommerce_items_in_cart, woocommerce_cart_hash) keep your booking in the cart during checkout.
• Order attribution cookies (names starting sbjs_) record how you reached our website, for example from a search engine, and are saved with your booking.
• Display preference (theme-mode) remembers how the site is shown.
• Email sign-up forms store in your browser’s local storage when a form was last shown, so it does not appear too often.

We do not use advertising cookies or analytics trackers. You can block or delete cookies in your browser, but the booking cart may not work without them.

5. Who receives your information

We do not sell your personal information. We share it only as needed to run our business:

• Hostinger: hosts our website and its database, including bookings and unfinished-booking records; keeps backups and delivers the website through its network, which processes visitors’ IP addresses; and provides our email-marketing service, Hostinger Reach, as described in section 2.
• Titan (provided through Hostinger): our business mailbox, info@sayattravel.com, which receives enquiries and emails you send us.
• Google (Gmail): a second inbox that receives enquiries and website notifications, including booking notifications.
• WooCommerce: the booking and checkout software. It runs on our own website, so your booking information stays in our website database unless described elsewhere in this section.
• Golomt Bank: processes card and SocialPay payments.
• Anthropic: powers the chat assistant.
• WhatsApp (Meta): if you choose to message us there.
• Local partners who arrange and deliver your tour: such as guides, drivers, cooks, ger camps or homestays, hotels and domestic airlines. We share only the guest information necessary to arrange and deliver your tour, including required travel information where applicable.
• Authorities: where the law requires it.

6. International processing

Some of the providers listed in section 5 may process your information outside Mongolia:

• Hostinger hosts our website in the United States (Arizona), with backups in the United States (Boston).
• Hostinger Reach, Titan, Google, Anthropic and WhatsApp (Meta) may process information in the United States or other countries. We have not confirmed the exact locations these providers use.

Each provider handles information under its own terms and policies. Contact us if you would like more information.

7. How long we keep your information

• Enquiries that do not lead to a booking: kept for up to 12 months after our last contact with you, then deleted where lawful and operationally possible.
• Booking, payment and accounting records: kept for as long as the law requires.
• Unfinished-booking records on our website: we review these periodically and delete older records by hand. Copies already sent to Hostinger Reach are kept under that service’s own terms. You can ask us to delete your record at any time.
• Email subscribers: kept until you unsubscribe or ask us to remove you.
• Chat assistant: not stored by us. Anthropic keeps chats under its own terms.
• Backups: our hosting provider’s backups may contain copies of deleted information until those backups expire.

8. Your rights

You can ask us to:

• access the personal information we hold about you;
• correct it;
• delete it;
• restrict or object to how we use it;
• give you a copy of it.

You can also withdraw your consent to marketing at any time.

To make a request, email info@sayattravel.com. We may need to confirm your identity. We aim to reply within 30 days. Where the law requires a shorter period, we will follow it. Some information, such as accounting records, may have to be kept even if you ask us to delete it.

If you live in the EU, the UK or another country with data-protection law, you may also complain to your local data-protection authority.

9. Security

Our website uses HTTPS encryption, and card payments are handled on Golomt Bank’s secure payment page. Access to booking information is limited to our team, the service providers listed in section 5 where they need it to provide their service, and tools we use to manage our website.

No website or email system is completely secure, but we take reasonable steps to protect your information.

10. Changes to this policy

We will post any changes on this page and update the date at the top.

11. Contact

Sayat Travel LLC: info@sayattravel.com