Privacy Policy
This Privacy Policy explains how TripCreator ehf. collects, uses, and protects personal data on this website, www.tripcreator.travel (the "Website"). It covers the marketing website only; use of the TripCreator product is governed by the in-product privacy policy and your subscription agreement.
TripCreator ehf. (reg. 610113-0950), Ármúli 32, 108 Reykjavík, Iceland is the data controller for personal data processed through the Website. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679), the UK GDPR where applicable, and the Icelandic Act on Data Protection and the Processing of Personal Data No. 90/2018.
Effective date: 2 September 2026. Data-protection contact: Ásgeir Fannar Ásgeirsson — asgeir@tripcreator.com.
What we collect on this site
Enquiry & lead data: when you book a demo, contact sales, or request pricing, we collect the details you submit (name, work email, company, message) and basic attribution (the page and campaign you arrived from).
Usage data: with your consent, we collect analytics about how the site is used (pages visited, approximate location from IP, device/browser) via cookies and similar technologies to understand interest and improve the site.
Necessary data: a small amount of first-party data (e.g. a visitor identifier and your consent choices) is used to operate the site and remember your preferences.
How we use it
To respond to your enquiries and provide demos, pricing, and onboarding.
To measure and improve the website and our marketing — only where you have consented to analytics or marketing technologies.
Enquiries you submit are processed in our customer systems and CRM (HubSpot) to follow up with you. We do not sell your personal data.
Our lawful basis
Enquiries and demo/pricing requests: our legitimate interest in responding to you and in business development, and, where you are asking us to take steps toward a possible agreement, the performance of pre-contractual steps at your request.
Analytics and marketing technologies (including cookies and pixels): your consent, which you give through the cookie banner and can withdraw at any time.
Operating and securing the Website: our legitimate interest in providing a functioning, secure site and in keeping records of the consent choices you make.
How long we keep it
We keep personal data only for as long as needed for the purpose it was collected. Enquiry and lead data is retained while we are in contact and for a reasonable period afterwards in our CRM so we can follow up and keep a record of our dealings, after which it is deleted or anonymised.
Analytics data is retained for the period configured in the relevant analytics tools, and records of your consent choices are kept as evidence of consent for as long as required. Specific retention periods are available on request.
Third parties & processors
Consent-gated technologies may include Google Tag Manager and Google Analytics (statistics) and the Meta Pixel and Google Ads (marketing). Embedded TripCreator widgets (functional) load content from tripcreator.travel.
Service providers — such as our CRM (HubSpot), analytics and advertising providers, and our hosting and email providers — process personal data on our behalf as processors, under agreements that require appropriate safeguards. We may also disclose data to authorities where legally required.
International transfers
Some of our service providers (for example Google, Meta and HubSpot) are located in, or transfer personal data to, countries outside the European Economic Area, including the United States.
Where personal data is transferred outside the EEA, we rely on an appropriate safeguard under the GDPR — such as the European Commission's Standard Contractual Clauses, or the provider's certification under the EU–U.S. Data Privacy Framework where applicable. You can request details of the safeguards that apply.
Your rights
You have the right to access, correct, port, restrict, or erase your personal data, to object to processing, and — where processing is based on consent — to withdraw that consent at any time without affecting processing already carried out. You can opt out of marketing at any time.
To exercise your rights, contact asgeir@tripcreator.com. We respond within one month and may need to verify your identity.
If you have a concern, you can lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd), Rauðarárstígur 10, 105 Reykjavík, Iceland — personuvernd.is. If you are in another EEA country, you may also complain to your local supervisory authority.