Last updated: 3 June 2026

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They help sites function, remember your preferences, and understand how the site is used. Similar technologies (such as pixels and local storage) work in comparable ways. This policy explains how loki.travel uses them and how you can control them.

2. How we use cookies

We keep our use of cookies to a minimum. We don’t.

We use privacy-friendly, cookieless analytics, so there is no need for any annoying banners either.

3. Categories of cookies we use

Strictly necessary — Required for the website to function (for example, security, basic preferences and, where relevant, the booking process). These do not require consent.

Analytics — Help us understand site usage so we can improve it.

• Pirsch — a privacy-focused analytics tool that is cookieless. It does not store cookies on your device, does not track you across other websites, and does not build a personal profile. Because it sets no cookies, it does not require consent.

4. Cookies in detail

Your internet trail is your own, your privacy is your own. We don’t collect your data, we don’t sell it and we won’t track you.

6. Changes to this policy

We may update this Cookie Policy as our site and the technologies we use change. The “Last updated” date above shows the latest revision.

7. Contact us

Questions about our use of cookies? Contact us at [info AT loki.travel].

Privacy Policy

Last updated: 3 June 2026

1. Who we are

This website (loki.travel) is operated by [Loki Travel — e.g Arctic Experts ehf.,] (“Loki Travel”, “we”, “us”, “our”), registered in Iceland under company ID (4605972349) , with its registered address at Brekkugata 5, Akureyri.

We are the data controller responsible for the personal data described in this policy. If you have any questions about how we handle your data, contact us at [info AT loki.travel].

We take privacy seriously and aim to collect as little personal data as possible. Where we can, we use privacy-friendly tools (such as cookieless analytics), and we never sell or rent your personal data.

2. What information we collect

Information you give us directly

• Newsletter subscription — if you sign up for our newsletter, we collect your email address (and your name, if provided).
• Contact and enquiry forms — if you fill out a form on our site, we collect the information you submit, which may include your name, email address, phone number and the content of your message.
• Tour bookings — when you book a tour, we collect the information needed to fulfil your booking, such as your name, email address, phone number, booking details and any preferences or requirements you share. Bookings are processed through our booking provider, Bokun (see Section 7). Payment is handled by a third-party payment processor; we do not store your full card details.

Information collected automatically

• Analytics data — we use cookieless analytics (Pirsch).

We do not collect special categories of data (such as health, religion or political views) unless (for example, accessibility or dietary needs for a tour), in which case we use it only to deliver the service you requested.

3. How we use your information

We use your personal data to:

• send you our newsletter, where you have subscribed;
• respond to your enquiries and messages;
• process, confirm and manage your tour bookings;
• operate, maintain and improve our website;
• comply with legal and accounting obligations.

4. Legal bases for processing

Under the GDPR (applicable in Iceland through Act No. 90/2018 on Data Protection and the Processing of Personal Data), we rely on the following legal bases:

• Performance of a contract — to process and deliver tour bookings you make with us.
• Legitimate interests — to operate and improve our website and to run privacy-friendly, cookieless analytics. We balance these interests against your rights.
• Legal obligation — to retain booking and accounting records where required by law.

5. Analytics and advertising

• Pirsch is a privacy-focused, cookieless analytics service operated from the EU. It does not use cookies, does not track you across other websites, and does not build a personal profile of you. We use it under our legitimate interest in understanding aggregate site usage.

6. Cookies

We use cookies and similar technologies as described in our [Cookie Policy]. Non-essential cookies (analytics and advertising) are only set after you have given consent.

7. Booking and third-party services

We work with trusted third parties who process personal data on our behalf or as part of providing our services:

• Bokun — our tour booking platform, which processes booking and customer details so you can reserve and pay for tours.
• Teya — handles payment transactions securely; we do not store full payment card details.
• Brevo / Mailerlite — stores and sends our newsletter to subscribers.
• Vultr — hosts our website and stores data on our behalf.

These providers act as our data processors (or independent controllers, where applicable) and are only permitted to use your data as needed to provide their service.

8. Who we share your information with

We do not sell, rent or trade your personal data to anyone.

We only share your data:

• with the service providers listed in Section 7, to operate our website and deliver our services;
• where required by law, court order or a public authority, and only if we are legally forced;
• to protect our legal rights or prevent fraud or harm.

9. International data transfers

Some of our providers (such as Google and Bokun) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses to protect your data.

10. How long we keep your data

• Newsletter — until you unsubscribe, after which your email is removed from our active list.
• Form and enquiry submissions — for as long as needed to handle your request, then deleted within a reasonable period.
• Booking records — for as long as required to provide the service and to meet legal and accounting obligations (in Iceland, accounting records are generally kept for six to seven years).
• Analytics data — retained according to each provider’s settings and our configuration.

11. Your rights

Under the GDPR and Icelandic data protection law, you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data (“right to be forgotten”);
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at [info AT loki.travel]. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) — www.personuvernd.is — if you believe we have handled your data improperly.

12. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorized access. No method of transmission over the internet is completely secure, but we work to keep your information safe.

13. Children’s privacy

Our website and services are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised. Significant changes will be communicated where appropriate.

15. Contact us

If you have any questions about this privacy policy or your personal data, please contact:

info AT loki.travel