Legal
Privacy Policy
Last updated: June 2026
1. Who we are
1stepoutside is a tour operator based in Samarkand, Uzbekistan (License №UZ-2024-00115). When this policy refers to "we", "us", or "our", it refers to 1stepoutside.
2. What we collect
We collect only what we need to design a trip and stay in touch:
- Contact details (name, email, phone) you provide via our forms.
- Booking details (passport name, date of birth, dietary needs) required to confirm departures.
- Payment metadata (transaction ID, last four digits of card) — full card numbers never touch our servers; payments are handled by Stripe and Click.
- Basic analytics (page views, device type) to improve the site.
3. How we use it
- To answer your enquiries and confirm bookings.
- To send trip-related logistics (departure details, packing lists).
- To send field notes via newsletter — only if you subscribe, and you can unsubscribe at any time.
- To meet legal and tax obligations in Uzbekistan.
4. Who we share it with
Only the partners that make your trip happen: guesthouses, drivers, insurers, and payment processors. We never sell your data, and we never share it with advertisers.
5. Your rights
You can ask us to:
- Show you what we hold on you.
- Correct anything that is wrong.
- Delete your data, where we are not legally required to keep it.
- Stop sending you newsletters (one click in any email).
Email 1step@asia.com for any of the above.
6. Cookies
We use minimal first-party cookies for session management and basic analytics. No third-party advertising trackers.
7. Changes
If we update this policy we will post the new version here with a fresh "last updated" date.
