Privacy Policy

1. Who we are

Cold Experience Sweden AB ("Cold Experience", "we", "our") is headquartered in Råstrand, Swedish Lapland and acts as the controller for the experiences promoted on this website.

We operate seasonal expeditions across Lapland and comply with the EU General Data Protection Regulation (GDPR).

2. Data we collect

We limit collection to what we need to handle enquiries, bookings, and safety briefings.

• Identity and contact details such as name, email, phone number, nationality, dietary or accessibility notes.
• Booking details including travel dates, selected packages, group size, accommodation needs, and payment references supplied by our PCI-compliant partners.
• Communication history from email, phone, contact forms, or our AI assistant so we can answer follow-up questions.
• Website analytics (page views, preferred language, device type) captured in an aggregated, privacy-friendly way.

3. How we use the data

Personal data enables us to confirm availability, tailor itineraries, send legally required waivers, and keep you updated before and during your stay.

• Processing enquiries, quotes, and bookings.
• Providing customer support and safety information.
• Improving our website experience and preventing abuse.
• Meeting legal obligations related to tourism, tax, and accounting.

4. Legal bases we rely on

Depending on the interaction, we process personal data on the following grounds:

• Performance of a contract when you book an experience or request a tailored quote.
• Legitimate interest for analytics, service improvements, and safeguarding our guides and guests.
• Legal obligation to store invoices and safety documentation under Swedish law.
• Consent when you opt in to marketing updates or allow optional cookies.

5. Sharing with trusted partners

We never sell personal data. We only share it with vetted processors that help deliver your trip and who must follow our instructions.

• Payment and booking platforms that secure deposits.
• Communication tools (email, SMS, chat) that help us keep you informed.
• Analytics, hosting, and safety tools that keep our digital services stable.

6. Retention, security, and your rights

We keep booking records for up to seven years to meet accounting rules and delete marketing enquiries after 18 months of inactivity.

All systems use encryption in transit and access is restricted to staff who need the data.

You can request access, correction, deletion, restriction, data portability, or lodge a complaint with Integritetsskyddsmyndigheten (IMY). We aim to respond within 30 days.