Privacy policy

Last updated: 13 October 2026

Somtravel Agency ("we") is responsible for the personal data you give us when you search, book or contact us. Company: Somtravel Agency Ismail, org. no. 930 184 349, Olafiagangen 7, 0188 Oslo, Norway. Contact: post@somtravelagency.com, +47 400 49 658.

What we collect

  • Booking details: names, date of birth, gender, contact details and, where the airline requires it, passport details.
  • Payment: card payments are handled by our payment provider (Stripe or SumUp). We never see or store your full card number.
  • Enquiries: the details you write in our contact forms.
  • On your device: your last search and your trips are saved in your own browser (local storage) so "My Trips" works. You can delete them by clearing your browser data.

Why we use it

To make and manage your booking with the airline, take payment, send your confirmation and ticket, answer your enquiries, and to meet our legal obligations (for example bookkeeping). The legal basis is the contract with you, our legal obligations and, for enquiries, our legitimate interest in answering you.

Who we share it with

Only with those needed to deliver your trip and run our service: airlines and the Amadeus booking system, our payment provider (Stripe or SumUp), our email provider, and our hosting providers. Airlines may transfer passenger data to authorities in the countries you travel to, as required by law.

Reminders and offers by email

Only if you tick the box on the passenger page, we keep your first name, your email address, the trip you looked at (route, dates and number of travellers) and the price shown. We then send you one reminder if you don't finish the booking, and occasionally travel offers. The legal basis is your consent. You can unsubscribe at any time with the link in the email, and we then delete the details. Otherwise they are deleted automatically after 12 months.

Cookies and analytics

If you click "Accept" in the cookie banner, we use Meta Pixel (Meta Platforms) and Google Analytics (Google) to measure visits and which ads lead to searches, enquiries and bookings. These services set cookies and receive information about how you use the site. If you click "Decline", they are not loaded. You can change your choice at any time under "Cookie settings" at the bottom of the page.

For security they are never loaded on the payment page, where the card number is typed. If you accepted, our server instead tells Meta and Google when a booking is paid or reserved: amount, currency, a code for the booking (not the booking reference), the identifiers from their cookies, IP address, browser and your email address in encrypted (hashed) form. If you declined, nothing is sent.

How long we keep it

Booking and accounting records are kept as long as Norwegian bookkeeping law requires (normally 5 years). Unfinished card checkouts are deleted after 180 days. Enquiries are deleted when they are no longer needed.

Your rights

You can ask to see, correct or delete your data, or object to how we use it — contact post@somtravelagency.com. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).