Wadi Rum Nomads privacy policy
Last updated: April 2026
1. Who we are
Wadi Rum Nomads is a locally run Bedouin business based in Wadi Rum, Jordan. We offer desert experiences and overnight stays for travelers visiting the Wadi Rum Protected Area.
Owner and Data Controller:
Wadi Rum Nomads
PO Box 2080, Aqaba 77110, Jordan
Contact:
Email: info@wadirumnomads.com
Phone/WhatsApp: +962795467190
2. What information do we collect
When you contact us or make a booking, we may collect:
• First name and last name
• Nationality
• Email address
• Phone number (including WhatsApp)
• Travel details (such as travel dates, group size, names of other travelers, age of children, dietary requirements, transportation plans, and how you found us)
We only collect information necessary to communicate with you and to organize your experience.
If you provide information about other people in your group, we assume you have their permission to share it with us.
3. Children’s data
We may collect limited information about children as part of a booking, such as name, age, and dietary requirements.
This information is provided by parents or guardians and is used only to organize the experience safely and appropriately.
We do not knowingly collect personal data directly from children.
4. How we collect your information
We collect your information through:
• Contact and booking forms on our website (via Gravity Forms)
• Direct email communication
• Messaging apps such as WhatsApp, Signal, Viber, and KakaoTalk
• In-person communication at our office in Wadi Rum Village
5. How we use your information
We use your information to:
• Respond to your inquiries
• Organize and manage your booking
• Coordinate logistics (such as transportation and timing)
• Provide the experience you booked with us
• Improve how we communicate and operate
We do not sell your data or use it for unrelated marketing.
6. Legal basis for processing
For visitors from regions such as the European Union, we process your data in accordance with the General Data Protection Regulation (GDPR).
This means we rely on:
• Your request for information or a booking (pre-contract communication)
• The need to deliver the services you booked
• Your consent (for example, sharing your phone number with a driver/pilot or using photos)
• Our legitimate interest, such as maintaining records of past bookings and improving our services, provided this does not override your rights
7. Sharing your information
We keep your data private and only share it when necessary to deliver your experience.
This may include:
• Drivers/pilots (name and nationality, and your phone number, only with your consent)
• Local service providers involved in your booking (when needed)
We do not share your data for advertising or resale.
8. International data transfers
As we work with travelers from around the world and use online tools, your data may be processed outside your country of residence.
This may include services such as:
• Google Analytics
• Email providers
• Website hosting services
We take reasonable steps to ensure your data is handled securely and only used for the purposes described in this policy.
9. Payments
We do not store or process payment data through our website.
Most payments are made in cash on arrival.
In some cases, a deposit may be arranged through direct communication. We do not store financial details.
10. Photos and media
During your time with us, we may take photos.
• If you are clearly visible, we will ask for your permission before using the photo on our website or social media
• You always have the right to say no
• You can request the removal of a photo at any time
11. Data storage and security
We store and manage personal data using a combination of secure systems needed to operate our business, including our website, email systems, and internal communication and booking tools.
These include:
• Our website database (WordPress)
• Our email systems (such as Gmail and domain-based email via our provider)
• Booking and contact forms (Gravity Forms)
• Communication tools such as WhatsApp and other messaging apps we use to communicate with guests
• Secure cloud storage and backup services, including Apple iCloud, used for storing and backing up business data
We take reasonable steps to protect your data, including limiting access to your information, using secure systems where possible, and only working with trusted service providers.
Access to personal data is restricted to members of our organization who need it to manage bookings and communications.
12. Cookies and website tracking
Our website uses cookies and similar technologies to improve your experience and understand how our website is used.
We use Google Analytics to collect anonymous usage information such as pages visited, time spent on the site, and general location (country level).
We only activate non-essential cookies, including analytics cookies, after you have given consent through our cookie banner.
You can choose to accept or reject cookies, and you can change or withdraw your consent at any time through the cookie settings on our website or in your browser.
This data is used only to improve our website and services.
13. Third-party tools we use
We use a small number of trusted tools to operate our website and communication:
• WordPress (website platform)
• Elementor (website builder)
• Gravity Forms (forms)
• Google Analytics (analytics) is only activated after user consent, where required.
• Messaging apps such as WhatsApp, Signal, Viber, and KakaoTalk
• SiteGround (hosting provider)
These providers may process data as part of their services, in accordance with their own privacy policies.
14. How long do we keep your data
We keep your information for as long as necessary to operate our business and provide our services.
This includes:
• Managing your booking and communication
• Keeping a record of past bookings
• Being able to assist guests who contact us again in the future
• Understanding and improving how we plan and organize our services
Most of the information we keep is basic booking and contact information.
We periodically review the data we hold and remove information that is no longer relevant.
We do not use this information for unsolicited marketing or automated profiling.
You can request that we delete your personal data at any time, and we will do our best to honor your request unless we are required to keep it for legal or operational reasons.
15. Your rights
Depending on your location, you may have the right to:
• Access the data we hold about you
• Request correction of your data
• Request deletion of your data
• Withdraw consent at any time
To exercise any of these rights, you can contact us at info@wadirumnomads.com.
We aim to respond to requests within a reasonable timeframe, typically within 30 days.
16. Data breaches
In the unlikely event of a data breach, we will take appropriate steps to address the issue and, where required by law, inform affected individuals.
17. Legal requests and obligations
We may disclose personal data if required by law or by public authorities.
18. Governing law
This privacy policy is governed by the laws of Jordan.
19. Changes to this policy
We may update this privacy policy from time to time.
The most recent version will always be available on our website, with the updated date shown at the top.