Your data

Privacy & cookie policy.

We keep this simple: we only collect what we need to run your trip and the website, we don't sell your data, and you can ask us what we hold at any time.

Who is responsible

The data controller is MTB-Adventure ApS (CVR 39040751), the company behind Gravel Adventure. Contact us about anything on this page at info@gravel-adventure.com.

What we collect

  • Contact and booking details you give us — name, email, phone, country, and the tour and departure you choose
  • Information needed to run your trip safely — dietary requirements, relevant medical notes, cycling level and bike details
  • Newsletter sign-ups (your email address)
  • Limited technical data when you visit the site (see Cookies)

Payments are handled by Stripe. Your card details are entered directly with Stripe — we never receive or store them.

Why we use it, and our legal basis

  • To deliver the tour you book and communicate with you (performance of a contract)
  • To meet legal and accounting obligations (legal obligation)
  • To send you newsletters, where you have asked us to (consent — you can unsubscribe any time)
  • To run and improve the website (legitimate interest)

Who we share it with

Only as needed to run your trip — for example the hotels and guides on your tour — and trusted service providers such as our payment processor (Stripe), email and hosting providers. We do not sell your personal data.

Cookies

We keep cookies to a minimum, and nothing beyond the essentials runs until you say yes. Specifically:

  • Necessary — a small cookie remembers your cookie choice, and Stripe sets cookies during checkout to process your payment securely. These are always on; the site can't run without them.
  • Performance — we use Vercel's privacy-friendly Speed Insights to measure page speed. It is cookieless and needs no consent.
  • Traffic monitoring — we use Ahrefs Web Analytics to see overall visitor numbers and where they come from. It is cookieless, collects no personal data, and needs no consent.
  • Analytics — with your consent, we use Google Analytics to understand how people use the site, so we can improve it.
  • Marketing — with your consent, we use the Meta (Facebook/Instagram) pixel and Google Ads to understand which content brings riders to the site and to measure and improve our advertising.
  • Booking (Calendly) — if you book a call, we load Calendly, which sets its own cookies. Without your consent, “Book a call” opens Calendly in a new tab instead of embedding it here.

Google and Meta are US-based; where they process EU/UK personal data, they rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses to do so lawfully.

You can change your choice at any time:

How long we keep it

We keep booking and accounting records for as long as the law requires (typically five years for accounting in Denmark). Newsletter data is kept until you unsubscribe.

Your rights

Under the GDPR you can ask to access, correct, delete or port your data, and object to or restrict certain processing. Email info@gravel-adventure.com and we'll help. You can also complain to the Danish Data Protection Agency (Datatilsynet).

Last updated: 4 July 2026.