What we hold, and why.

What we collect

Account and contact details you give us directly: name, email, and anything you write into an application or the newsletter form.

Application content: experience history, fitness and expedition background, and — only where a route requires it — medical screening information you choose to disclose.

Technical data collected automatically: IP address, browser and device information, and basic usage data, used for security, rate-limiting abuse, and understanding which routes people read.

We do not buy data about you from third parties, and we do not sell, rent, or trade your personal data to anyone.

Medical and sensitive data

Some routes require medical screening before approval. That information is treated as sensitive: it is used only for the medical review stage of your specific application, seen only by the people who conduct that review, and is never stored in your browser or in any marketing or analytics system.

Medical information is retained only as long as needed to support the decision made on your application and any safety obligations tied to a booked departure, then deleted on the schedule described under Retention below.

How we use it

To review and decide on applications, including medical and fitness screening and scheduling an interview.

To operate an approved booking: coordinating logistics, permits, and the safety plan for your departure.

To send you the newsletter, only if you signed up for it, and to send operational messages about an application or booking you have with us.

To keep the site secure — rate-limiting abuse, detecting fraud, and diagnosing errors.

Payment data

We do not store full card numbers or bank details on our own servers. Deposits and payments, once an application is approved, are handled by a third-party payment processor, and your payment details go directly to that processor under its own privacy and security terms.

We keep a record that a payment occurred and its amount, for accounting and dispute purposes — never the underlying card or account number.

Who we share it with

Infrastructure providers that host our application, database, and caching layer, under contracts that limit them to processing data on our instructions.

The payment processor used to collect deposits, for approved applications only.

Field partners directly involved in delivering a booked departure — permitting bodies, local operators, medical/evacuation providers — limited to what a specific departure requires, and only after you are approved and booked.

Authorities, if required by law, or to protect the safety of a person in the field during an active expedition.

Cookies and similar technology

We use a small number of strictly necessary cookies to keep the site working — for example, remembering a referral code during an application. We do not run third-party advertising trackers.

If that changes as the site grows, this section will be updated, and where required by law, we will ask for consent before setting anything beyond what is strictly necessary.

Retention

Declined applications, including any medical information disclosed, are deleted on a routine schedule once the decision and any required record-keeping window has passed.

Records tied to an approved, booked departure are kept for as long as needed to meet our safety, accounting, and legal obligations for that departure, then deleted or anonymised.

Newsletter contact details are kept until you unsubscribe.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain uses of it.

To exercise any of these rights, contact us using the details below. We will respond as promptly as we can, and in any case within the timeframe required by applicable law.

Changes to this policy

This policy was last updated in September 2026. If we make a material change to how we handle your data, we will update this page and, where appropriate, notify people directly.