Privacy Policy

Last updated: 1 August 2026

1. Who is responsible for your data

The data controller is Frostbite Expeditions AS, org. no. 937 729 839, Vei 232-9, 9170 Longyearbyen, Svalbard, Norway. For anything related to personal data, write to info@frostbite-expeditions.com.

2. What we process and why

We only process the data we actually need to run a small tour company:

• Bookings – name, e-mail, phone (optional), chosen tour, date, number of people, pickup point and language. We use them to deliver the booked tour and to send the confirmation e-mail. Legal basis: performance of a contract.
• Payments – processed entirely by SumUp on their secure payment page. We never see or store your card details; we only keep the payment status and a payment reference. Legal basis: performance of a contract and our legal (accounting) obligations.
• Contact form – name, e-mail or phone and your message, used solely to reply to you. Legal basis: steps prior to entering a contract and our legitimate interest in answering enquiries.
• Visitor statistics (Google Analytics) – anonymous usage data, only after you agree in the cookie banner. Legal basis: consent, which you can withdraw anytime via “Cookie settings” in the footer. Details are in the Cookie Policy.
• Server logs – IP addresses in technical logs, kept short-term for security and troubleshooting. Legal basis: legitimate interest.

3. Who we share data with

We never sell your data. It is shared only with the service providers needed to run the website:

• SumUp Payments Limited – online payment processing.
• Google (Google LLC) – visitor statistics, only with your consent. Google is certified under the EU–US Data Privacy Framework.
• Our hosting and e-mail providers, who store the website and deliver our messages.

4. How long we keep data

• Bookings: for the duration of the contract and then as long as Norwegian accounting law requires (currently 5 years).
• Contact messages: as long as needed to handle your enquiry.
• Statistics: cookies expire after 2 years at the latest; reports contain only aggregated data.

5. Your rights

You may request access to your data, its correction or deletion, restriction of processing, data portability, and you may object to processing based on legitimate interest. Consent (statistics) can be withdrawn at any time without affecting anything else.

Write to info@frostbite-expeditions.com – we will respond without undue delay. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or the supervisory authority in your country of residence.

6. What we do not do

No profiling, no automated decision-making, no advertising networks and no selling of data. The website uses only the cookies described in the Cookie Policy.

7. Security and changes

The website runs over an encrypted connection (HTTPS), access to booking data is password-protected and every administration action is logged. Changes to this policy will be published on this page.