Privacy
What we collect when you write to us, and what we do with it.
Who is responsible
Nordvik Expeditions ehf., Hafnarbraut 14, 780 Höfn, Iceland, is the controller of your personal data. You can reach us at hello@nordvik.example.
What we collect
When you send an enquiry, we collect your name, email address, the expedition and dates you are interested in, the number of travellers and any message you write. If you book, we also collect passport details, emergency contacts, dietary and medical information needed to run the trip safely, and payment information, which is held by our payment provider and not by us.
Why, and on what basis
We use your data to reply to your enquiry and to run your trip, which is necessary to perform a contract with you, or to take steps at your request before it. We keep health information only with your explicit consent and only for the trip. We use anonymous visit counts to improve the site and do not use advertising trackers.
How long we keep it
Enquiries that do not lead to a booking are deleted after 12 months. Booking records are kept for 7 years, as required by Icelandic accounting law. Medical information is deleted 30 days after the end of the trip, unless there was an incident.
Your rights
You can ask to see, correct, export or delete your data, to restrict or object to its use, and to withdraw consent at any time. Write to us, and we will answer within 30 days. You can also complain to the Icelandic Data Protection Authority (Persónuvernd).
Version 2, valid from 1 November 2026.