A little clarity
Your privacy.
We keep personal information to what we need to run the website, share our crew’s story and answer your messages.
Updated 9 November 2026
Who is responsible
ConchoPoncho ehf., Reykjavík, Iceland is the data controller for this website. Contact us at info@conchoponcho.com about your information or this statement.
What we use and why
- Website and sign-in information: IP address, browser and request information, and the crew administrator’s email and login activity. We use these to deliver the site, prevent abuse and protect the Crew Desk, based on our legitimate interest in operating a secure website.
- Messages you send: your name, email address and message. We use them to respond to you, based on our legitimate interest in handling enquiries, or to take steps you request before a contract.
- Crew stories and photographs: names, stories, captions and images supplied by crew members or an authorised crew organiser. We publish these on the basis of the featured people’s consent. You can withdraw that consent at any time by emailing us.
Published stories and photographs can be seen by anyone. Hidden profiles stay in the protected Crew Desk. You can browse without creating an account. Ordering is coming soon; this website currently takes no payments and has no newsletter signup, advertising tracking or marketing profiling.
Where information goes
Cloudflare provides our hosting, security, content storage and email forwarding. Messages sent to our contact address arrive in our Google Gmail inbox. We also keep a local working copy of website content in our project workspace. We do not sell personal information.
These providers may process information outside the European Economic Area. Their published safeguards include recognised transfer frameworks and standard contractual clauses where applicable. See Cloudflare’s privacy information and Google’s privacy information, or contact us for more information.
How long we keep it
We keep enquiries while needed to handle the conversation and any related legal obligations. Published and hidden crew content stays while needed for the crew’s story and with the featured people’s permission. Hiding or removing a profile does not automatically erase its stored photograph or recovery copies. We keep a limited content revision history and local working backups; an erasure request includes reviewing and removing those copies where required. Security records follow our providers’ retention settings. We review information when its purpose ends and remove what is no longer needed.
Your choices and rights
You can ask to access, correct or erase your information, restrict or object to its use, or receive a portable copy where applicable. You can withdraw consent without affecting earlier lawful use. Email info@conchoponcho.com; we normally respond within one month and may need to confirm your identity.
You may complain to Persónuvernd, Iceland’s Data Protection Authority, or your local data protection authority in the EEA.
For the small pieces of browser storage used to secure the site, see our Cookies page.