Privacy and cookies

Last updated 16 October 2026

This page explains what personal data Icedive collects on icedive.is and through the booking form, why, who sees it and how long we keep it. In short: we collect only what we need to arrange your dive, we use no advertising or tracking cookies, and so we show no cookie banner.

Who is responsible

Icedive is run by Sport- og Tækniköfunarskóli Íslands ehf., kennitala 540404-2750, Einiberg 15, 221 Hafnarfjörður, Iceland. Phone +354 663 2610, email icedive@icedive.is. We have not appointed a data protection officer; questions about your data go to the same email address.

When you book or send a request

The booking form asks for:

• A tour or course: which tour or course, the date, the number of divers or students, your name, email and phone number, and any notes you add.
• A research or commercial request: your organisation (optional), a description of the project, your name, email and phone number.

We use these details only to arrange what you asked for: to confirm the date, plan guides and equipment, and stay in touch with you about it. The legal basis is the contract you ask us to make. Before the day we will ask you by email for a few details about each diver or student, such as certification, diving experience and dry suit size, for the same purpose.

Who sees them: Icedive staff who handle bookings, in our booking system and in our team mailbox, which gets a copy of every booking. We do not sell your details or share them for advertising.

How long we keep them: personal details are erased from the booking system 24 months after the tour, course or request. The booking itself stays, without your name or contact details, so our records add up. The form says the same above the send button.

Spam protection: we do not store your IP address with a booking. To stop automated spam, the form keeps a scrambled (hashed) form of it for one hour, then deletes it.

Medical statement and liability release

Every diver fills in the diver medical statement and signs the liability release on paper before diving. They contain health information, are used only to make sure diving is safe for you, and are never stored on the website or in any other digital system. We keep the paper forms where only Icedive staff can see them and destroy them 10 years after the dive, the time limit for injury claims under Icelandic law.

Emails

When you book, the website sends you a confirmation email and our team a copy. Email goes through our mailbox at Hostinger, which also hosts the website. Emails between you and us are deleted from that mailbox 24 months after the tour, course or request, like bookings. Invoices and payment records are kept for seven years, as the Bookkeeping Act requires.

Partner codes

Some people and companies sell our trips for us. If you came through a partner’s link, we store the partner code from that link with your booking so we know which partner sent you. We do not give the partner your name or contact details. The legal basis is our legitimate interest in knowing which partner to settle with. The code stays with the booking after your personal details are erased, because on its own it says nothing about you.

Visitor statistics

We count visits with Umami Cloud, an analytics service built for privacy. It sets no cookies and stores nothing on your device. It records the pages viewed, the site you came from, your browser and device type and your country. It also counts clicks on Book buttons, booking forms started and bookings sent, with the tour or course, the number of people and any partner code, but never your name, contact details or booking reference. Your IP address is used only to work out the country and tell visits apart, and is not stored; Umami keeps no personal data. We use the numbers to see which pages help visitors (our legitimate interest), and Umami keeps them for 6 months.

Cookies and storage on your device

We use no advertising or tracking cookies. That is why there is no cookie banner: consent is needed only for storage the site does not need to work, and we use none. This is what the site stores:

• pll_language (cookie): remembers the language you chose, English, Icelandic or Chinese, for one year. Set by icedive.is itself.
• Partner links: the partner code travels in the web address only. Nothing is stored on your device.
• Booking form: a hidden field stops spam. Nothing is stored on your device.

If we open an online shop, a cookie that keeps your basket while you shop will be added to this list. You can delete cookies and site data in your browser settings at any time. The site keeps working and then picks the language from your browser.

Other services

• Hosting: the website, the booking system and our mailbox are hosted by Hostinger. The website’s server is in the United Kingdom.
• Instagram feed: the photos in the Instagram feed on our home page are served from icedive.is. If you click a post, the full-size photo loads from Instagram’s servers, so Meta sees your IP address at that moment.
• Links: links to Instagram, TikTok, Facebook and Google Maps are plain links. Nothing loads from those services until you click, and then their own privacy policies apply.

Your rights

You can ask to see the personal data we hold about you, to have it corrected or deleted, or object to how we use it. Email icedive@icedive.is from the address you booked with, and we will answer within one month. Our booking system can export or erase everything stored under your email address.

If you think we handle your data wrongly, you can complain to Persónuvernd, the Icelandic Data Protection Authority, at island.is/s/personuvernd.

If we change what the site does, we update this page and the date at the top. Our booking and cancellation terms are on the terms page.