Privacy Policy
Last updated 23 August 2026.
1. Who controls your data
NorthStar Travel ehf., Reykjavík, Iceland (Kt. 580324-0530, VAT 152377), is the data controller for personal data collected through northstartravel.is. For any privacy question or request, contact privacy@northstartravel.is.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, email, message | You use the Contact page or a contact form | To respond to your enquiry |
| Booking & traveler details (name, email, dates, party size, payment confirmation) | You book a tour via a Bókun widget | Bókun collects and processes this on our behalf to run your booking; we may receive booking confirmations from Bókun to fulfil the tour |
| Currency/language preference | You use the currency or language selector | To remember your display preference on future visits |
| Basic usage data (pages viewed, device type, approximate location) | You browse the Site | Analytics — to understand how the Site is used and improve it |
We do not collect or store payment card details ourselves — these are entered directly on Bókun's secure checkout.
3. Why we're allowed to use it (legal basis)
- Performance of a contract— to process and fulfil a tour booking you've made.
- Legitimate interest — to respond to enquiries, keep the Site secure, and understand aggregate usage.
- Consent — for non-essential cookies and any marketing communications, which you can withdraw at any time (see our Cookie Policy).
4. Who we share it with
We share data only where necessary to run the Site and fulfil your booking:
- Bókun — processes your booking and payment when you book a tour through a Bókun widget.
- Tour operating partners — where a tour is operated by a third party, they receive the booking details needed to run that tour (name, party size, date).
- Hosting & infrastructure providers — host the Site and its underlying infrastructure.
- Analytics provider — if enabled, processes anonymised/aggregated usage data.
We do not sell personal data to third parties.
5. International transfers
Where any of the services above (hosting, analytics, Bókun) store or process data outside the EEA, an appropriate safeguard is used — such as the EU Standard Contractual Clauses.
6. How long we keep it
Booking-related data is kept for as long as needed to fulfil the booking and to meet accounting/tax record-keeping obligations under Icelandic law (generally 7 years for financial records). Contact-form enquiries are kept only as long as needed to resolve them, typically no more than 24 months. Analytics data is retained in aggregated/anonymised form where possible.
7. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion ("right to be forgotten"), subject to any legal retention requirements (e.g. tax records)
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) or your own country's data protection authority
To exercise any of these rights, contact privacy@northstartravel.is.
8. Cookies
The Site uses cookies for essential site function, remembering your currency/language preference, and (where enabled) analytics. Full details are in our Cookie Policy.
9. Children's data
The Site is not directed at children. We don't knowingly collect personal data from anyone under 18 browsing independently; children may of course appear as travelers on a family booking made by an adult.
10. Changes to this policy
We may update this policy as the Site or our tools change. Material changes will be reflected by an updated date at the top of this page.
11. Contact
Questions about this policy or your data: privacy@northstartravel.is
This page is a working draft prepared for NorthStar Travel and has not been reviewed by a lawyer. The hosting-provider and analytics details should be confirmed to match the tools actually running on the finished site before relying on this page.