black line art of a jeep and mountain, simple lines logo and text Iceland Backcountry Travel
Book tours

Privacy Policy — Iceland Backcountry Travel (IBC Travel)

Effective date: 12.12.2025
Website: www.ibctravel.is

Iceland Backcountry Travel (“IBC Travel”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website www.ibctravel.is (“the Website”) or interact with our services.

We process personal data in accordance with the Icelandic Data Protection Act and the EU General Data Protection Regulation (GDPR).

1. What Personal Data We Collect

We may collect the following categories of personal data:

1.1 Data You Provide Directly

  • Name

  • Email address

  • Phone number

  • Billing details (when applicable)

  • Booking information

  • Travel preferences or notes you choose to share

  • Messages sent via contact forms or email

1.2 Automatically Collected Data

When you visit the Website, we may collect:

  • IP address

  • Device information (browser type, operating system)

  • Pages visited and duration

  • Cookies and tracking technologies

1.3 Payment Information

If you book and pay through the Website, payment processing is handled by a secure third-party provider.
IBC Travel does not store full credit card details.

2. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To manage bookings and deliver travel services

  • To communicate with you regarding tours, updates, or inquiries

  • To improve our Website and customer experience

  • To process payments and issue invoices

  • To comply with legal obligations

  • To send marketing communications (only with explicit consent)

3. Legal Basis for Processing

Under GDPR, we process personal data based on one or more of the following legal grounds:

  • Contract performance – to process bookings and provide tours

  • Legitimate interests – to improve services or respond to inquiries

  • Consent – for marketing emails or certain cookies

  • Legal obligation – tax, accounting, and regulatory requirements

4. Cookies & Tracking

IBC Travel may use cookies to:

  • Enable website functionality

  • Analyze visitor behavior (e.g., Google Analytics)

  • Improve marketing performance

When you visit the Website, you will be asked to accept or manage cookies according to GDPR requirements.

You can disable cookies in your browser settings at any time.

5. Data Sharing

We only share data when necessary and always with appropriate safeguards. Data may be shared with:

  • Payment processors

  • Booking management systems

  • Email service providers

  • Guides and contractors involved in fulfilling your booking

  • Analytics and hosting providers

We never sell personal data to third parties.

If data is transferred outside the EU/EEA, we ensure appropriate GDPR-compliant safeguards are in place.

6. Data Retention

We store personal data only as long as necessary for the purposes collected or to meet legal obligations.

Typical retention periods:

  • Booking records: 7 years (accounting laws)

  • Email communications: 1–3 years

  • Marketing consent data: until you withdraw consent

  • Analytics data: according to provider settings

You may request deletion of your data at any time (see section 9).

7. Security Measures

We take appropriate technical and organizational measures to protect your personal data, including:

  • Encrypted connections (HTTPS)

  • Secure password storage

  • Limited access to personal data

  • Regular system updates and monitoring

However, no system is 100% secure, and we cannot guarantee absolute protection.

8. Third-Party Links

The Website may include links to external websites.
We are not responsible for their content or privacy practices.

9. Your GDPR Rights

You have the right to:

  • Access your personal data

  • Rectify incorrect or incomplete data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to data processing

  • Withdraw consent at any time

  • Request data portability

To exercise any of these rights, contact us using the information below.

If you believe your data has been handled unlawfully, you may file a complaint with the Icelandic Data Protection Authority (Persónuvernd).

10. Children’s Privacy

IBC Travel does not knowingly collect personal data from children under 16 without verified parental consent.

11. Changes to This Privacy Policy

We may update this Policy from time to time.
Any changes will be posted on this page with an updated effective date.

12. Contact Information

For questions about this Privacy Policy or your personal data rights, contact:

Iceland Backcountry Travel (IBC Travel)
Website: www.ibctravel.is

Email: info@obctravel.is

Phone: +354 8612845