Privacy Policy

Last updated: October 2026

This Privacy Policy explains how personal data and other information may be collected and processed when you visit or use NomadRoute.

Data Controller

NomadRoute is operated by:

OÜ LTO
Registry code: 17371686
Registered address: Sellä-Torimo, Sammaste küla, Mulgi vald, Viljandi maakond, 69521, Estonia
Email: info@nomadroute.eu
Website: https://www.nomadroute.eu/

For the purposes of the General Data Protection Regulation (GDPR), OÜ LTO is the data controller for personal data processed through NomadRoute where OÜ LTO determines the purposes and means of processing.

Independent travel, analytics, advertising, affiliate and other third-party providers may act as separate controllers or processors for information they receive through their own services.

Information We Collect

You can browse destination guides and use many NomadRoute features without creating a user account.

When you use the website, the following types of information may be collected:

  • browser type, operating system and device category;
  • IP address and approximate geographic information;
  • pages and destinations viewed;
  • referring website, campaign or traffic source;
  • date, time and duration of visits;
  • interactions with website features, navigation links and calls to action;
  • flight searches, flight-result views and interactions with travel offers;
  • outbound clicks to travel and affiliate partners;
  • cookie preferences and consent records;
  • technical logs, errors, security information and diagnostic data;
  • information you voluntarily provide when contacting us or subscribing to communications.

We do not require users to provide their name, payment details or other directly identifying information merely to browse destination guides or search for flights.

NomadRoute does not directly process payments for flights, accommodation, activities or other travel bookings.

Analytics and Measurement

NomadRoute uses analytics and measurement tools to understand how visitors use the website, evaluate traffic sources and improve content, functionality, performance and marketing.

These tools may include:

  • Google Analytics 4 (GA4) for website analytics and aggregated usage reporting;
  • Google Tag Manager (GTM) for managing and deploying measurement tags;
  • Meta Pixel and Meta Business Tools for measuring advertising traffic, website interactions and campaign performance.

Depending on your consent choices and the technology involved, these tools may process information such as:

  • pages and destinations viewed;
  • session and campaign information;
  • device and browser information;
  • approximate location;
  • interactions with navigation elements, travel searches and external links;
  • identifiers stored in cookies or similar technologies;
  • information about whether an advertisement resulted in a website visit or another measured action.

Google Tag Manager is primarily used to manage website tags. The individual services deployed through it may separately collect and process information.

Analytics and advertising technologies that are not strictly necessary should only be activated where the required consent has been obtained.

Advertising Measurement

NomadRoute may advertise through platforms such as Facebook and Instagram.

Meta Pixel and related Meta Business Tools may be used to:

  • measure whether advertisements result in visits to NomadRoute;
  • understand interactions with advertised destination pages;
  • measure actions such as page views, navigation clicks, flight searches or outbound clicks;
  • create aggregated advertising reports;
  • improve the relevance and performance of future advertising;
  • support audience creation or retargeting where permitted and appropriately consented to.

Meta may receive information about visits and interactions through its business tools. Meta processes information according to its own terms and privacy policies and may act as an independent controller for some processing activities.

NomadRoute does not intentionally send payment card information, passport information or sensitive travel documents to Meta.

Cookies and Similar Technologies

NomadRoute uses cookies and similar technologies for purposes that may include:

  • providing essential website functionality;
  • maintaining security;
  • remembering preferences;
  • recording consent choices;
  • measuring website usage and performance;
  • attributing visits to advertising or other traffic sources;
  • supporting affiliate tracking and referral attribution;
  • improving the relevance of content and advertising.

Strictly necessary cookies may be used without consent where permitted by law because they are required to operate or secure the website.

Analytics, advertising and other non-essential cookies should only be used after the relevant consent has been provided where required.

You can review or change your choices through the website’s cookie-consent controls. You may also manage or delete cookies through your browser settings.

Disabling certain cookies may affect measurement, preferences or some website functionality.

Further information about the categories of cookies used by NomadRoute is available in our Cookie Policy and consent-management interface.

Flight Searches and Travel Partners

NomadRoute helps users discover flight options, destination information and other travel services offered by independent third parties.

When you perform a flight search or interact with a travel offer, technical search information may be transmitted to the service provider required to generate or display the requested results. This may include:

  • origin and destination;
  • travel dates;
  • number of passengers;
  • selected currency or language;
  • referral or affiliate identifiers;
  • technical information required to operate the search or redirect.

When you select an offer or leave NomadRoute for a partner website, the relevant provider’s own privacy policy and terms apply.

NomadRoute does not control how independent airlines, travel agencies, booking platforms, activity providers or other third parties process information on their own websites.

Affiliate Tracking

NomadRoute participates in affiliate and referral programs.

When you follow certain links to travel providers, referral information may be used to identify that the visit originated from NomadRoute. This allows an affiliate partner to attribute a booking or purchase and, where applicable, pay NomadRoute a commission.

Affiliate tracking may use:

  • cookies;
  • referral identifiers;
  • campaign parameters;
  • click identifiers;
  • destination, route or offer identifiers;
  • conversion or booking confirmations supplied by the partner.

NomadRoute may receive aggregated or transaction-related affiliate reports. These reports may include referral and commission information but do not normally provide NomadRoute with the traveler’s full payment details.

Affiliate partners process information according to their respective privacy policies.

Using an affiliate link generally does not increase the price paid by the user.

Communications and Newsletter

If you voluntarily provide your email address to subscribe to NomadRoute updates, travel information, price-related alerts or other communications, OÜ LTO may process your email address and subscription preferences for that purpose.

Newsletter subscriptions are managed through NomadRoute’s own website system. NomadRoute does not currently use a separate newsletter marketing platform. Email addresses and subscription preferences are stored in NomadRoute’s WordPress database and messages may be delivered through the website’s hosting or email infrastructure.

Marketing communications are sent on the basis of your consent where required.

You may unsubscribe at any time by:

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

We may retain limited suppression information after an unsubscribe request to ensure that further marketing messages are not sent to that address.

Newsletter subscription is not required to browse or use NomadRoute.

Information You Provide to Us

If you contact NomadRoute directly, we may receive:

  • your name or email address;
  • the contents of your message;
  • attachments or other information you choose to provide;
  • information necessary to respond to or manage your request.

We use this information to respond to enquiries, provide requested assistance, manage correspondence and protect our legal rights where necessary.

Please do not send passport information, payment card details, health information or other sensitive personal data unless it is specifically required and an appropriate secure channel has been agreed.

Legal Bases for Processing

Where the GDPR applies, we process personal data under one or more of the following legal bases.

Consent

We may rely on consent for:

  • non-essential analytics cookies;
  • advertising and marketing technologies;
  • newsletter and marketing communications;
  • other optional features that require consent.

You may withdraw consent at any time.

Legitimate Interests

We may rely on our legitimate interests to:

  • operate, maintain and improve NomadRoute;
  • understand the general performance and security of the platform;
  • prevent fraud, misuse and technical problems;
  • respond to enquiries;
  • protect our rights and the integrity of our services;
  • measure essential operational information where this does not override the rights and freedoms of users.

Steps Requested by the User

We may process information where necessary to provide a search, communication or other action specifically requested by you.

Legal Obligations

We may process or retain information where required to comply with accounting, tax, regulatory, law-enforcement or other applicable legal obligations.

Service Providers and Data Recipients

We do not sell personal data.

Information may be processed by service providers that help us operate NomadRoute, including providers of:

  • website hosting and infrastructure;
  • content delivery and security;
  • analytics and tag management;
  • consent and cookie management;
  • email and communications infrastructure;
  • advertising measurement;
  • flight search and travel content;
  • affiliate tracking and referral attribution;
  • technical support and diagnostics.

Depending on the feature used, relevant providers may include Google, Meta and independent travel or affiliate platforms.

Information may also be disclosed where reasonably necessary to:

  • comply with applicable law or a valid legal request;
  • investigate fraud or misuse;
  • protect the security of NomadRoute;
  • establish, exercise or defend legal claims;
  • protect the rights or safety of users or third parties;
  • complete a corporate restructuring, merger or transfer, subject to applicable safeguards.

International Data Transfers

Some service providers used by NomadRoute may process information outside Estonia or the European Economic Area.

Where required, international transfers are based on an applicable legal mechanism, such as:

  • an adequacy decision adopted by the European Commission;
  • Standard Contractual Clauses;
  • another safeguard permitted under applicable data-protection law.

Independent third-party providers remain responsible for the transfer mechanisms applicable to processing carried out under their own privacy policies.

Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

Retention is determined according to the nature of the information, the purpose of processing, consent choices, legal obligations, security requirements and the need to establish or defend legal claims.

In general:

  • Google Analytics 4 event-level data associated with cookies, user identifiers or advertising identifiers is currently retained for up to 2 months;
  • Google Analytics 4 user-level data is currently retained for up to 14 months;
  • the retention period for user-level GA4 data may restart when new activity associated with the relevant identifier is recorded;
  • these GA4 retention controls do not affect most standard aggregated reports, which are based on aggregated data;
  • newsletter subscription information is retained until you unsubscribe, withdraw consent or the newsletter service is discontinued;
  • limited suppression information may be retained after unsubscribing to prevent further marketing messages;
  • correspondence is retained for as long as necessary to respond to and manage the relevant request and any related legal or operational matters;
  • consent records may be retained for as long as reasonably necessary to demonstrate compliance;
  • technical and security logs are retained only for the period reasonably required for security, diagnostics and abuse prevention;
  • affiliate and travel providers retain information according to their own privacy policies and legal obligations.

Where information is no longer required, it is deleted, anonymized or otherwise removed from active use, subject to technical backup cycles and applicable legal requirements.

Data Security

We use reasonable technical and organizational measures intended to protect information against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include access controls, encrypted connections, software updates, backups, logging and security monitoring.

However, no website, Internet transmission or electronic storage system can be guaranteed to be completely secure.

Your Data-Protection Rights

Where the GDPR applies, you may have the right to:

  • request access to personal data concerning you;
  • request correction of inaccurate or incomplete information;
  • request deletion of personal data in certain circumstances;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent where processing is based on consent;
  • request data portability where applicable;
  • obtain information about relevant safeguards for international transfers;
  • lodge a complaint with a competent data-protection authority.

Requests may be sent to info@nomadroute.eu.

We may need to verify your identity before responding to a request. We will respond within the period required by applicable law, normally within one month, subject to permitted extensions for complex or numerous requests.

Some rights are subject to legal conditions and exceptions.

Complaints

If you believe that your personal data has been processed unlawfully, please contact us first so that we can review and address the matter.

You also have the right to lodge a complaint with the Estonian supervisory authority:

Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Tatari 39
10134 Tallinn
Estonia
Email: info@aki.ee
Website: https://www.aki.ee/

You may alternatively contact the data-protection authority in the EU or EEA country where you live, work or believe an infringement occurred.

External Links

NomadRoute contains links to websites and services operated by independent third parties.

We are not responsible for the privacy practices, security or content of external websites. We recommend reviewing the privacy policy and terms of any third-party service you choose to use.

Children’s Privacy

NomadRoute is a general travel-information and flight-search service and is not specifically directed at children.

We do not knowingly seek to collect personal data from children through ordinary use of the website.

Newsletter subscriptions and other consent-based marketing features should only be used by individuals who are legally able to provide the required consent under applicable law.

If you believe that a child has provided personal data to NomadRoute without appropriate authorization, please contact us.

Automated Systems

NomadRoute may use automated systems to collect, organize, summarize, translate, update or present travel-related information.

These systems are used to support content and platform operation. NomadRoute does not use solely automated processing through the website to make decisions that produce legal effects or similarly significant effects concerning individual users.

Advertising and analytics providers may use automated systems under their own terms to measure, personalize or optimize their services.

Changes to This Privacy Policy

We may update this Privacy Policy when NomadRoute, its service providers, technologies or applicable legal requirements change.

The current version will be published on this page together with the latest update date.

Material changes may also be communicated through the website or other appropriate channels where required.

Contact

For questions about this Privacy Policy or requests concerning your personal data, please contact:

OÜ LTO / NomadRoute
Registry code: 17371686
Registered address: Sellä-Torimo, Sammaste küla, Mulgi vald, Viljandi maakond, 69521, Estonia
Email: info@nomadroute.eu
Website: https://www.nomadroute.eu/

Scroll to Top