Privacy Policy

This website is operated by Polaris Journeys ehf, Sámsstaðir 3, Hvolsvöllur, Iceland ("Polaris Journeys", "we"). We are the data controller for personal information submitted through this website. You can contact us about privacy at info@polarisjourneys.com.

Enquiry form: when you send an enquiry we collect your name, email address, and the details you choose to share about your travel plans (such as destination interests, dates, party size and a preferred time for a call). We use this information for one purpose: to respond to your enquiry and, if you proceed, to plan your journey. The legal basis is taking steps at your request prior to entering into a contract, and our legitimate interest in responding to messages sent to us.

Email and phone: if you contact us directly, we process the information you provide in order to reply and to assist you.

We do not use this website to run analytics trackers, advertising pixels or marketing cookies, and we do not buy, sell, trade or rent personal information.

This website does not set cookies for tracking or analytics. Our enquiry form uses Cloudflare Turnstile to protect against automated abuse; Turnstile may use strictly necessary technical mechanisms to distinguish people from bots. See Cloudflare's privacy documentation for details of its processing.

Enquiry emails are delivered to us by Resend, an email delivery provider, acting as our processor. Form abuse protection is provided by Cloudflare Turnstile. The website is hosted on infrastructure that may process technical request data (such as IP addresses) to serve pages securely. We share enquiry details with travel suppliers only as needed to plan and operate a journey you have asked us to arrange.

We keep enquiry correspondence for as long as needed to handle your enquiry and any journey that follows, and thereafter only as required for legal, accounting or legitimate business purposes. You may ask us to delete your enquiry data at any time.

Under the European data protection rules that apply in Iceland (GDPR as implemented in Icelandic law), you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority (in Iceland, Persónuvernd, the Icelandic Data Protection Authority).

Enquiries are transmitted over encrypted connections and processed on the server side only. We minimise the personal data we ask for, restrict access to it, and never publish it.

If we change this policy, we will publish the updated version on this page with a new date. The date of the current version is shown below.