EXP. (“we,” “our,” “us”) operates the website EXP.Portal at portal.exp.is (the “Portal”).
We are committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Portal.

1. Information We Collect

We collect the following categories of information:

• Account Information – name, email address, phone number, organization, login credentials.
• Profile & Preferences – settings, saved preferences, language choices, memberships.
• Payment Information – billing details, payment method (processed securely by third-party payment processors; we do not store full credit card numbers).
• Usage Data – IP address, browser type, device information, pages visited, and cookies.
• Communications – messages, inquiries, support requests.
• Optional Content – photos, documents, or other files you choose to upload.

2. How We Use Your Information

We use your information to:

1. Provide, maintain, and improve the Portal’s features and services.
2. Process payments, bookings, and membership services.
3. Communicate with you about your account, updates, and relevant information.
4. Customize your user experience.
5. Ensure platform security, detect and prevent fraud or abuse.
6. Comply with legal obligations and enforce our terms.

3. Legal Bases for Processing (for EEA/UK Users)

If you are in the European Economic Area or the UK, we process your information under these legal bases:

• Performance of a contract (e.g., to provide the Portal’s services).
• Legitimate interests (e.g., to improve and secure our services).
• Compliance with legal obligations.
• Your consent, where required (e.g., for certain cookies or marketing communications).

4. How We Share Information

We do not sell your personal data.
We may share information only with:

• Service Providers – such as cloud hosting, payment processors, analytics, and customer-support tools, strictly for service delivery.
• Business Partners – only where necessary for bookings or third-party amenities you select.
• Legal & Safety Requirements – if required by law, regulation, or to protect our rights and the safety of others.
• Corporate Transfers – in connection with a merger, acquisition, or sale of assets (with prior notice where required).

All third-party recipients are contractually obligated to protect your data.

5. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you signed in,
• Remember your preferences,
• Measure site performance and analytics.

You can manage or disable cookies through your browser settings, though some features may not function properly without them.

6. Data Retention

We retain personal information only as long as necessary to provide our services, fulfill the purposes described in this Policy, or as required by law.
We securely delete or anonymize data when it is no longer needed.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data,
• Restrict or object to certain processing,
• Withdraw consent for marketing at any time,
• Request data portability.

To exercise these rights, contact us at privacy@exp.is.

8. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, disclosure, or loss.
No system is 100% secure, but we strive to maintain industry-standard protections.

9. International Transfers

As EXP. operates globally, your information may be processed in countries outside your own.
We ensure adequate safeguards (such as Standard Contractual Clauses) for such transfers where required by law.

10. Children’s Privacy

The Portal is not directed to children under 16.
We do not knowingly collect personal information from children; if we become aware that we have done so, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time.
When we do, we will post the revised version with an updated “Effective Date.”
We encourage you to review this Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data-handling practices, please contact:

EXP. – Privacy Office
Email: privacy@exp.is