Norwbound
Experiences
My Trips
Account
Log In
← Back
Privacy Policy
Last updated September 2026
What we collect
We collect the information you provide when creating an account (name, email, password hash) and when making a booking (passenger details, travel dates). We also collect usage data such as pages visited and booking history.
How we use it
We use your information to process bookings, send confirmation emails, and improve the service. We do not sell your personal data to third parties.
Data shared with suppliers
To fulfil a booking, we share your name, travel dates, and relevant passenger details with the relevant supplier only — Entur (transport), GetYourGuide / Viator (activities), or Booking.com (stays). Stripe processes payment details directly; we never see your full card number.
Cookies
We use essential cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies without your consent. You can manage cookies in your browser settings.
Data retention
Account data is retained while your account is active. Booking and invoice records are retained for 5 years as required by Norwegian accounting law. You can request deletion of your account at any time from Account > Your data.
Your rights (GDPR)
You have the right to access, correct, or delete your personal data. You may also request a data export, restrict processing, or object to processing. Contact [email protected] to exercise these rights.
Data security
We encrypt data in transit (TLS) and at rest. Passwords are hashed using bcrypt. We conduct regular security reviews and have a responsible disclosure programme.
Contact
For privacy queries, contact our Data Protection Officer at [email protected]. For general enquiries, use [email protected].