Privacy Policy

Home // Privacy Policy

Privacy Policy — Tales & Trails

Last updated: January 31, 2026

This Privacy Policy explains how Tales & Trails collects and uses personal data when you visit this website, sign up for the newsletter, or contact us about a trip.


1) Who is responsible for your data?

Data controller: Tales & Trails
Org. Nr.: 559550-4779
VAT number: SE559550477901
Established in: Sweden
Contact (privacy questions): linda@talesandtrails.se


2) What personal data we collect

Depending on how you interact with the site, we may collect:

A) If you contact us about a trip (contact/inquiry form)

• Name
• Email address
• Phone number
(These are required fields.)
• Any information you choose to include in your message

B) If you sign up for the newsletter

• Name (if provided)
• Email address

C) Trip-related information (only when relevant)

If you are joining a trip, we may also collect information needed to plan safely and well, such as:

• Dietary needs
• Accessibility needs
• Emergency contact details
• Relevant health information you choose to share

D) Website usage data (cookies and analytics)

When you browse the site, we may collect technical and usage information such as:

• IP address (typically in shortened/anonymized form where possible)
• Device type, browser, and operating system
• Pages visited and time spent on the site
• Referring website/source

This data is collected through cookies and similar technologies, including Google Analytics.


3) Why we collect your data and the legal basis (GDPR)

We only use personal data when we have a valid legal basis under GDPR:

• To respond to inquiries and communicate with you about trips
Legal basis: Legitimate interest (answering messages and providing customer service), and in some cases taking steps at your request prior to entering a contract.

• To manage trip participation and safety (e.g., dietary needs, emergency contacts)
Legal basis: Performance of a contract (organizing your trip) and, where health-related information is involved, your explicit consent and/or necessity for your vital interests in an emergency.

• To send newsletters
Legal basis: Consent (you can unsubscribe at any time).

• To understand how the website is used and improve it
Legal basis: Consent (where required for non-essential cookies) and/or legitimate interest (basic measurement and site improvement), depending on your cookie choices and applicable law.

• Marketing/retargeting (if enabled in the future)
Legal basis: Consent. Marketing cookies will only be used if you opt in via the cookie banner/settings.


4) Cookies and your choices

We use a cookie banner to give you choices about cookies.

• Necessary cookies help the site function and can’t be switched off.
• Analytics cookies help us understand traffic and improve the site (e.g., Google Analytics).
• Marketing cookies (optional) may be used for advertising/retargeting if enabled and if you consent.

You can also control cookies through your browser settings.


5) Who we share your data with

We do not sell your personal data.

We may share data with trusted service providers when needed to run the website and business, for example:

• Google Analytics (website analytics)
• Loopia (email and/or hosting services, depending on your setup)
• Substack (newsletter provider)

Trip-related sharing

If you book a trip, we may share relevant participant information with co-guides or service providers (such as accommodations or transport) when necessary to deliver the trip safely and smoothly – for example dietary needs, rooming logistics, or emergency contact information. We only share what’s needed for that purpose.

Payments (via email links)

If you choose to pay for a trip by PayPal or Stripe, we will send you a payment link by email. The payment is processed by PayPal or Stripe (as independent controllers/processors under their own privacy policies). Tales & Trails does not store your full payment card details, but we may receive information such as your name, email address, payment status, transaction reference, and amount for accounting and administration.

If you choose to pay by bank transfer, your payment is processed through your bank and ours. We will handle the information included in the transfer (such as your name, bank account details, payment reference, amount, and date) for administration and accounting purposes. Some information (such as invoices and payment records) may be kept longer when required by accounting/tax laws.


6) International transfers

Some of our service providers may process data outside the EU/EEA (for example in the United States). When this happens, we use appropriate safeguards under GDPR, such as Standard Contractual Clauses or other lawful transfer mechanisms.


7) How long we keep your data

We keep personal data only as long as needed for the purposes described above.

• Trip inquiry messages: kept as long as necessary to respond and follow up, then deleted or archived in a reasonable time.
• Trip participant information: kept for one (1) year after the trip, unless a longer period is required for accounting/legal reasons.
• Newsletter subscribers: email addresses are kept until you unsubscribe or ask to be removed.
• Analytics data: retained according to our analytics settings and standard practice.


8) How we protect your data

We take reasonable technical and organizational measures to protect personal data from loss, misuse, unauthorized access, and disclosure. Trip-related details (including emergency/medical information) may be stored on a password-protected computer and are only accessed when needed for trip planning and safety.


9) Your rights under GDPR

If GDPR applies to you, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time (for example, newsletters or optional cookies)

To make a request, email linda@talesandtrails.se. We’ll respond as soon as we can and within the time limits required by law.

You also have the right to lodge a complaint with the Swedish supervisory authority: Integritetsskyddsmyndigheten (IMY).


10) Children

This website is not directed to children, and we do not knowingly collect personal data from children.


11) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be posted on this page, with the “Last updated” date at the top.

The mountains are calling...

...and you should probably go.

Sign up for my newsletter The Open-Air Life to be the first to know about new guided journeys and get some Nordic friluftsliv inspiration while you’re dreaming of your next trip.

No noise. No spam. Just fresh air – delivered straight to your inbox.