Privacy Policy

We collect information from you at various points through our Services. We will not sell or rent your information to third parties. We will only share this information with our affiliates, co-branded partners, and service providers and vendors contracted to do business on our behalf.  When you request and/or authorize certain services, we will use and share your personal information as necessary to provide these services to you. We will share your information in accordance with the Privacy Policy in effect at the time your information is collected.

We collect and use two types of information: personal information you directly provide to us, and information you indirectly provide to us when you access and interact with our Services.

Information You Provide to Us

We collect information you provide directly to us. The types of information we may collect include:

• "Contact Data": your first name, last name, email address, postal address, phone number.
• "Financial Data": credit card and other payment information.
• "Government Issued Data": passport number.
• "Health Data": information regarding medical conditions (e.g. relating to allergies, accessibility requirements and dietary restrictions/preferences).
• "Marketing and Communications Data": preferences in receiving marketing from us and third parties, and your communication preferences.
• "Voluntarily Provided Data": any other personal information you choose to provide to us.

Some examples of when we collect your information are when you:

• Request a reservation, a quote, or a brochure;
• Create an account;
• Sign-up for our newsletter
• Attend one of our expeditions;
• Participate in any of our interactive features of Services, a contest, or promotion;
• Directly communicate or interact with us or our customer support;
• Make a purchase;
• Communicate with us via third-party social media; and
• Interact with us over the phone or in-person during an event or expedition.

Information Collected Through Our Services

When you access or use our Services or transact business with us, we automatically collect information about you, including:

• "Usage Data": information about your use of the Services, such as the date and time the app on your device accesses our servers.
• "Transactional Data": information about the transaction, such as reservation details, purchase price, and date and location of the transaction.
• "Log and Technical Data": information related to your access to and use of the Services, including the type of browser you use, app version, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.
• "Device Data". Information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, Media Access Control (MAC) address, screen resolution, language, and mobile network information. We use this information to ensure that our Services function properly.
• "Location Data": the approximate location of your device from your IP address.

Cookies & Similar Tracking Technologies

We (and our service providers) may use different technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that we may use for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience. We also gather statistical information about use of our Services in order to continually improve their design and functionality, understand how they are used, and assist us with resolving questions about them. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that may be used in our Services or emails to help deliver cookies, count visits, track your actions on our Services and communications, compile statistics about the use and response rates of our Services and communications, and understand usage and campaign effectiveness. For more information about cookies and how to disable them, see Your Choices below.

Information We Collect From Other Sources

We may also obtain information about you from other sources. For example, we collect information about you from third parties, including from address and email address services as well as through participation in co-op marketing platforms (such as Epsilon). When you make a reservation for an expedition with one of our co-branded partners (such as National Geographic Partners, LLC/The Walt Disney Company or Hyatt Hotels Corporation), we collect information about you that you provide to these partners.

We may, subject to applicable law, use any of the information we collect from you:

• To fulfill or meet the reason you provided the information and perform our services—e.g., respond to your inquiries; process and fulfill your requests and transactions (such as to process your payment, personalize your experience, provide you with documents needed for your expedition, and communication with you about your expedition); provide you with customer service; send you administrative information (such as changes to our terms, conditions, and policies) and technical notices, updates, security alerts, and support and administrative messages; and allow you to share content from the Services via our share feature;
• To provide you with marketing materials—e.g., send you marketing communications about products, services, and events offered by us and our affiliates, and provide news and information we think will be of interest to you (refer to Your Choices below for information about how to opt out of these communications at any time);
• To provide you with personalized services—e.g., personalize your use of our Services, such as providing you with content and offers we believe may be of interest to you;
• To accomplish our business purposes—
  • for research and data analysis, e.g., to develop and improve the efficiency of our Services;
  • to perform auditing functions, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements;
  • for fraud and security monitoring and prevention, e.g., to detect and prevent cyberattacks or attempts to commit identity theft;
  • for debugging to identify and repair errors that impair existing intended functionality;
  • for providing customer support, e.g., to investigate and address customer concerns and monitor and improve our responses and customer service;
  • for developing new products and services;
  • for identifying usage trends, e.g., understanding which parts of the Services are of most interest to users;
  • for determining the effectiveness of our promotional campaigns and auditing your interactions with our online ads, including by counting ad impressions and verifying positioning and quality of ad impressions, so that we can adapt our campaigns to the needs and interests of our users;
  • for protection of the rights, property and safety of us, our customers or others, as necessary or appropriate;
  • for responding to governmental authorities, including law enforcement requests, and as required by applicable law, court order, or regulations;
  • for certain limited internal uses, provided the personal information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction; and
  • for operating and expanding our business activities;

We may, subject to applicable law or your consent when required, share information, such as names, email addresses, telephone numbers, passport information (to airlines) and other personal information, directly collected from you, with:

• Our parent, affiliates and subsidiaries (including Natural Habitat Adventures, DuVine Cycling + Adventure Co., Classic Journeys LLC, Off the Beaten Path LLC, and Wineland-Thomson Adventures, Inc.) in an effort to bring improved products and services across our family of products and services, when permissible under relevant laws and regulations;
• Vendors, service providers, and consultants that perform services for us such as market research, promotions management, data analysis, payment processing, customer service, mail/email delivery, auditing, and other services. These third-parties are prohibited from using personal information for any other purpose and are contractually required to comply with all applicable laws and requirements, including Payment Card Industry Data Security Standards if they are processing payments;
• Our co-branded partners (e.g., Hyatt Hotels and National Geographic/The Walt Disney Company), booking partners, travel agents, tour and meal service providers, airlines and others involved in your booking and accommodations;
• Governmental authorities or other entities as required by law or regulation;
• Other users of the Services, if you post content in a publicly-accessible area of the Services, such as when you submit information, photos/videos, or other content that may be viewed by other users of the Services or the general public, or when you send a message through the Services; and
• Others authorized by you to receive the information.

Please note that your personal information may also be shared outside of Lindblad (and its affiliates) in connection with a sale, divestiture, or transfer of our company or any combination of its products, services, assets and/or affiliates.  Your personal information may be among the items sold or otherwise acquired in these types of transactions.  We may also sell, assign or otherwise transfer such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganizations, liquidations, or similar transactions or proceedings involving all or a portion of the company.

We may use your information for any purpose or share it with any third party if we anonymize the information so that it no longer reasonably identifies you. Anonymization requires altering your information, so re-identification requires use of only non-public sources. Wherever possible, we require third party service provider use of the information to be anonymized or protected in accordance with our information security policies. We limit who we share your information with and the legitimate business purposes for which it can be used.

We may keep the information we collect until we no longer need the information to provide services to you or complete our transaction with you, to enable us to communicate with you about our service, for our research, evaluation of use, or troubleshooting purposes, for our analysis to improve quality of our services, or to satisfy our legal or contractual obligations.

We may allow third parties to provide analytics services and serve advertisements on our behalf across the web and in mobile applications. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of the Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked, and conversion information. They may also use these technologies, along with information they collect about your online activity, to recognize you across the devices you use, such as a mobile phone and a laptop. This information may be used by us and others, including Google, to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity.

We may use certain Google Advertising features, including Google signals, allowing Google Analytics to associate the session data it collects from our site with Google's information from accounts of signed-in, consented users. This provides us with deeper insights about website users, such as aggregated demographics and interests data, and enables features such as audience sharing with linked advertising accounts.  

You can opt out of Google's use of cookies or device identifiers by visiting Google's Ads Settings at https://myadcenter.google.com/home, or you can install Google Analytics' currently available opt-outs for the web at https://tools.google.com/dlpage/gaoptout. You can also view and delete data collected by Google signals, via https://myactivity.google.com/myactivity.  

For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices and, if you are located in the European Union, United Kingdom or Switzerland, http://www.youronlinechoices.eu/. Your device may also include a feature (“Limit Ad Tracking” on iOS or “Opt Out of Interest-Based Ads” or “Opt Out of Ads Personalization” on Android) that allows you to opt out of having certain information collected through apps used for behavioral advertising purposes. We do not currently respond to browser do-not-track signals.

This Services may contain links to other websites that are not controlled in any way by us. Please be aware of this when you click on any such links; we are not responsible for the privacy practices and/or policies of any website other than our own. Consequently, we strongly suggest that you review the privacy policy of every website you visit, whether or not they are linked to by our own Services.

The Services may offer social sharing features (such as a button allowing you to “tweet” a link to one of our videos through your X account (f.k.a., Twitter) and other integrated tools, which let you share actions you take on our Services with other media, and vice versa. Your use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.

We process personal information about minors to provide products and services when they are guests on one of our expeditions, but do not seek to collect personal information about minors for any other purpose. 

Under Age 13

Our Services are not specifically directed toward children, and we do not knowingly collect personal information from persons under the age of 13 on the Services without verifiable parental consent. If we learn that a child under the age of 13 has submitted personally identifiable information online without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law).  If you become aware of any personally identifiable information we have collected from children under 13, please contact us at privacy@expeditions.com or by calling 888-773-9362.

Under Age 18

Minors under 18 years of age may have the Personal Information that they provide to us through the Services deleted by sending an email to privacy@expeditions.com requesting deletion.  Please note that, while we make reasonable efforts to comply with such requests, deletion of your personal information does not ensure complete and comprehensive removal of that data from all systems.

We also provide visitors to our Services the opportunity to opt-in to receive communications from us.  In this case, we ask the visitor for his or her email address and name. These communications will include our promotions and any other information that we feel may be pertinent to the visitor.  You may opt out of receiving any, or all, of these communications by emailing us at privacy@expeditions.com, by clicking on the “unsubscribe” link in any email we send to you, by replying to any email we send you and entering the word UNSUBSCRIBE in the subject line.

This Privacy Policy describes how we may share your information for marketing purposes, as described above. If you are a California resident, the Shine the Light law permits you to request and obtain from us once per calendar year information about any of your Personal Information shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us through the contact form on our website.

Lindblad is based in the United States, and we process and store information in the United States and other countries. Therefore, we and our service providers may transfer your information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. If you are in the European Economic Area, United Kingdom or Switzerland, we provide adequate protection for the transfer of personal data to countries outside of the EEA through a series of intercompany agreements based on the Standard Contractual Clauses or as otherwise authorized or permitted under EU law.

You have certain choices about the information we collect, use or share. To exercise any of your rights described below, please email us or send us a letter at any time at the address provided at the end of this notice (see “Contact Us”).

• You may see what data we have about you, if any.
• You may change or correct any data we have about you.
• You may instruct us to delete any data we have about you that is not required for the purposes described in this notice.
• You may express any concern you have about our use of your data.
• You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Services may then be inaccessible or not function properly.
• You may opt out of receiving promotional emails from Lindblad by following the instructions in those emails. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations. If you prefer that we discontinue sharing your personal information on a going-forward basis with our affiliated companies for their direct marketing purposes, you may contact us at privacy@expeditions.com.

Applicable laws may also give you additional rights that are not described in this Privacy Policy.

• Residents of California, Colorado, Connecticut, Florida, Montana, Oregon, Texas, Virginia, and Utah may have additional personal information rights and choices. If you are a resident of one of these states, please refer to the State-Specific Privacy Information section below for additional privacy disclosures. Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated address: privacy@expeditions.com. However, please know we do not currently sell data triggering that statute's opt-out requirements.
• Residents of the European Economic Area, the United Kingdom or Switzerland may have additional personal information rights and choices. If you reside in Europe, please also refer to the Additional Disclosures for Individuals in Europe. 

We are committed to keeping your personal information secure. We have implemented commercially appropriate technical, administrative and physical procedures and information security policies to safeguard your information from loss, misuse, or alteration. We limit access to personal information to individuals who have a business need consistent with the reason the information was provided.

Unfortunately, the transmission of information via the internet is not completely secure.  Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted online. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures implemented in the Services. If you make a purchase through our website or mobile application, we may collect contact information (such as name, physical address, email address, phone number) in connection with your purchase.  However, we do not process any underlying payment facilitated by our website or mobile application; rather, payment is processed by our payment partners. Credit card information that you input to consummate a transaction is encrypted using SSL technology. Only our payment partners may be given access to the full credit card number that you provide. We do not have access to your full credit card number, although we may access or store the last four digits of the credit card number for record keeping purposes. Data handled by our payment partners is subject to that payment partner's terms and privacy policy.

The following section sets forth privacy information relevant to residents of California, Colorado, Connecticut, Florida, Montana, Oregon, Texas and Virginia, including (1) Personal Information we have collected, used and shared about you, and (2) your Privacy Rights under the laws of these states. Capitalized terms used but not otherwise defined in this section have the meanings associated with them under the applicable state privacy law.

Collection of Information

In the preceding twelve (12) months, we have collected the following categories of personal information:

• Identifiers, such as name, postal or electronic address, phone number, government-issued identifiers (e.g., passport details), account name (for our booking/guest portal) and social media account;
• Personal information as defined under the California Consumer Records statute (Cal. Civ. Code § 1788.80(e)) such as contact information, medical information, financial information and insurance information;
• Characteristics of protected classifications under California or federal law, such as age, gender, national origin and religion (as it pertains to guests’ dietary restrictions);
• Sensory and biometric information, such as photos and videos of you, audio recordings of phone calls (when permitted under law), and copies of passports and IDs;
• Commercial information, such as transaction history, account data and information about bookings or other products and services purchased or considered;
• Internet or network activity information, such as browsing history and interactions with our website, mobile application and/or services;
• Geolocation data, such as precise geolocation data from your device or Internet Protocol address;
• Sensitive personal information, including—
  • government identifiers (e.g., passport details);
  • contents of mail, emails and text messages, blogs or other social media postings;
  • health data and medical conditions (e.g., allergies, accessibility accommodations);
  • religious beliefs (as it pertains to guests’ dietary restrictions) and
• Inferences drawn from any of the foregoing information.

Please be advised that “personal information” does not include information which is publicly available, anonymized or aggregated, nor other information which is excluded from the scope of applicable state privacy law (e.g., information covered by other privacy laws such as the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act or California Financial Information Privacy Act, and the Driver’s Privacy Protection Act).

Sources of Information

We collect personal information directly from you when you provide the information to us and indirectly through interactions and activities on our website, mobile application and other services, and third-party partners and parties that interact with us in connection with our services and products.  We and our third-party partners may use cookies, web beacons or other technologies to collect and store information about your visit to, or use of, our website, mobile application or services. In addition, we collect information from other sources:

• From third parties that interact with us in connection with the services we perform;
• From marketing partners and commercially available third-party sources; and
• From publicly available databases.

Use of Information

We may use or share personal information to operate, manage and maintain our business, to provide our products and services and to accomplish our business and commercial purposes and objectives.  Please refer to the USE & SHARING OF INFORMATION disclosure in our Privacy Policy for information on the purposes for which we use your personal information.

We may keep the personal information we collect until we no longer need the information to provide services to you, complete our transaction with you, to enable us to communicate with you about our service, for troubleshooting purposes, for our analysis to improve quality of our services, or to satisfy our legal, regulatory, insurance or contractual obligations.

Sharing of Information

To perform the functions and provide the services described above, we may share your personal information with our affiliates and certain trusted third parties, such as:

• Our parent, affiliates or subsidiaries (including Natural Habitat Adventures, DuVine Cycling + Adventure Co., Classic Journeys LLC, Off the Beaten Path LLC, and Wineland-Thomson Adventures, Inc.) in an effort to bring improved products and services across our family of products and services, when permissible under relevant laws and regulations;
• Co-branded partners (e.g., Hyatt Hotels and National Geographic/The Walt Disney Company), service providers and vendors to perform functions and provide services, including (without limitation) booking reservations and arranging travel and accommodations, payment processing, and other activities relating to customer service, website/application and database hosting and maintenance, data analytics, call monitoring, email delivery and related communication infrastructure, marketing and marketing research, error monitoring, debugging, and information technology and related infrastructure. These third parties are prohibited from using personal information for any other purpose and are contractually required to comply with all applicable laws and requirements, including Payment Card Industry Data Security Standards if they are processing payments;
• Other third parties to whom you authorize us to share personal information in connection with services provided by us; and
• Governmental authorities or other entities as required by law or regulation.

We require these third parties to maintain the privacy and security of the personal information they access and process on our behalf.  We do not sell or rent your personal information to unaffiliated third parties, such as sellers of goods or services, for their own business or commercial purposes.  We may share anonymous or aggregated information with third parties to help deliver products, services and content and for other purposes.

Your California Rights (California Consumer Privacy Act)

Access. As a California resident, you have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and verify your request, we will disclose to you:

• the categories of personal information that we have collected about you;
• the categories of sources from which the personal information was collected;
• the purpose for collecting your personal information;
• the categories of third parties to whom we disclosed your personal information, the categories of personal information that we disclosed (if applicable) and the purpose for disclosing your personal information; and
• the specific pieces of personal information we collected about you (also referred to as a “data portability” request).

Deletion. You have the right to request that we delete the personal information that we collected from you and retained, unless the CCPA recognizes an exception.  We may maintain a confidential record of deletion requests solely for the purpose of preventing your personal information from being sold, for compliance with applicable law, or for other purposes permitted under the CCPA.

Correction.  You may at any time direct us to correct any inaccuracies in the personal information that we maintain about you.  Upon receiving and verifying your request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the inaccuracy.

Restrict Use or Disclosure of Personal Information for Advertising & Marketing. We may use, or share to our affiliates and service providers, personal information about you for advertising and marketing purposes. You have the right, at any time, to request that we not use your sensitive personal information or disclose it for advertising and marketing purposes by. Once we receive and verify your request, we will no longer use or share your personal information for advertising or marketing purposes.

In addition to the above, and as set forth below, California law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information we have “sold” or “shared” about you. Please be assured that we do not sell or rent your personal information to third parties. Instead, there are instances where we have shared personal information with advertising partners in order to provide you with personalized services or customized offers, including for cross-context behavioral advertising. You have the right to opt-out of such sharing by clicking Do Not Sell or Share My Personal Information. This sharing may include information such as your name, gender, email address, phone number, and device ID.

We do not use or disclose sensitive personal information, as defined in applicable laws, for any purposes other than those permitted by applicable law.

How to Exercise Your Rights

If you are a California resident, you may submit a request by:

1. Calling toll-free at 888-773-9362;
2. Submitting an online request via email to privacy@expeditions.com;

Only you, or a person legally authorized to act on your behalf, may make a request related to your personal information.  You may also make a request on behalf of your minor child.  You may only make a request for access or data portability twice within a 12-month period.

Your request must (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and (2) describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.  We cannot respond to your request or provide you with personal information if we cannot verify your identify or authority to make the request and confirm the requested personal information relates to you.  Making a request does not require you to create an account with us.  We will only use personal information provided in a request to verify the requester’s identity or authority to make the request.

Any disclosures we provide will only cover the 12-month period preceding our receipt of the request.  The response we provide will also explain the reasons we cannot comply with a request, if applicable.  For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your rights under California law. Unless permitted by applicable law, we will not deny you services, charge you different rates for services, provide you with a different level or quality of services, or suggest that you may receive a different rate for services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted under California law that can result in different prices, rates, or quality levels. Any legally permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describes the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Your Colorado, Connecticut, Florida, Montana (starting October 1, 2024), Oregon, Texas, Virginia, and Utah Privacy Rights

If you are a resident of Colorado, Connecticut, Florida, Montana (starting October 1, 2024), Oregon, Texas, Virginia, or Utah, the consumer privacy laws in those states provide you with the following rights with respect to your Personal Information:

Right to Access. You have the right to request to know the categories or specific pieces of Personal Information we have collected, used, disclosed and sold about you. The easiest way to submit a request to know is to email to privacy@expeditions.com. You may also call us at 888-773-9362. You also may designate an authorized agent to make a request to know on your behalf and that agent may make the request in the same way. To complete your request, we may need additional information from you to verify your identity.

Right to Delete. You have the right to request that we delete any Personal Information we have collected about you, subject to certain exceptions. The easiest way to submit a request to delete is to email to privacy@expeditions.com. You may also call us at 888-773-9362. You also may designate an authorized agent to make a request to delete on your behalf and that agent may make the request in the same way. To complete your request, we may need additional information from you to verify your identity.

Right to Correct. You have the right to request that we correct any Personal Information we have collected about you, subject to certain exceptions. The easiest way to submit a request to correct is to email to privacy@expeditions.com. You may also call us at 888-773-9362. You also may designate an authorized agent to make a request to correct on your behalf and that agent may make the request in the same way. To complete your request, we may need additional information from you to verify your identity.

Right to Opt Out of Sale or Sharing. You have the right to request to opt-out of the processing of your personal information for purposes of targeted advertising, the sale of personal information, and/or profiling in furtherance of decisions that produce legal or similarly significant effects. The easiest way to submit a request to opt-out of sale or sharing is to email to privacy@expeditions.com. You may also call us at 888-773-9362. Residents of Colorado and Connecticut also may designate an authorized agent to make a request to opt-out on their behalf and that agent may make the request in the same way.

Right to Appeal. If we deny your request, the right to appeal our decision. The easiest way to submit a request to appeal is to follow the instructions in our response denying your request. You may also call us at 888-773-9362. We will respond to appeals from Connecticut, Florida, Montana, Texas, and Virginia residents within 60 days. We will respond to appeals from Colorado residents within 45 days.

When you exercise these rights and submit a request to us, we will verify your identity by asking you for your email address, order numbers of previous orders, or other information we think would allow us to verify your request. We will endeavor to honor such requests unless such a request conflicts with certain lawful exemptions under your state’s consumer privacy law.

The fact that you have elected to exercise these rights will have no adverse effect on the price and quality of our goods or services.

Contact Us 

If you have any questions or concerns about this California Privacy Notice, the ways in which Lindblad collects and uses your information described above, or your choices and rights regarding such use, please do not hesitate to contact us at:

Lindblad Expeditions
96 Morton Street
New York, NY 10014
privacy@expeditions.com

Effective Date: February 4, 2025.

These Additional Disclosures apply to you if you are a resident of a member state of the EEA, the United Kingdom or Switzerland. 

The EU General Data Protection Law, UK General Data Protection Regulation, and any other EU member state and UK data protection laws (collectively, the “GDPR”); and (ii) the data protection laws of any country, in each case (i) and (ii), to the extent such laws are applicable to our processing of your personal data (collectively, the “European Data Protection Laws”), require us to disclose certain information regarding the personal information we collect about you and your rights over the personal information that we maintain. 

These Additional Disclosures should be read together with our Privacy Policy, which also contains information that we are required to provide you with under the European Data Protection Laws and that is important for you to read regarding the types of personal data we process about you, how it is collected, the purposes for this processing and the potential recipients of your personal data.

The controller of your personal data is Lindblad Expeditions LLC and Lindblad Maritime Enterprises, Inc. (together, “Lindblad Expeditions”). As a controller, Lindblad Expeditions is responsible for deciding why and how your personal data is processed. Lindblad Expeditions’ contact details are provided at the end of these Additional Disclosures. 

Information you provide to us

In addition to the examples in the Privacy Policy, we may also collect your information if you are employed by us or if you apply for a job with Lindblad or one of our service providers, where such service providers may consult Lindblad during any recruitment process. 

Collection of Information

In addition to the types of information we may collect about you as described in the Privacy Policy, we may also collect your professional or employment-related information (to the extent you submit a job application and/or commence employment with us) ("Employment Data"). This shall include: salary, annual leave, pension and benefits information, start date and, if different, the date of your continuous employment, leaving date and your reason for leaving, location of employment or workplace, copy of driving licence, recruitment information (including copies of right to work documentation, references and other information included in a CV or cover letter or as part of the application process), employment records (including job titles, work history, working hours, holidays, training records and professional memberships), compensation history, performance information, and disciplinary and grievance information.

Legal Basis for Processing Personal Information

When we process your personal data, we will only do so in accordance with European Data Protection Laws and only for the following purposes based on the following lawful bases:

When consent is the legal basis for our processing, you may withdraw such consent at any time by contacting us at privacy@expeditions.com. If you have provided consent to processing and subsequently withdraw that consent, we may still process your personal data where we have another lawful basis for doing so and we will inform you of this other lawful basis.

Where we need to collect personal data by law or under the terms of a contract that we have with you and you fail to provide that personal data when requested, we may not be able to perform the contract we have with you.

Data Retention

We store the information we collect on you only for as long as is necessary for the purpose(s) for which we originally collected it, or for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.  The criteria used to determine the appropriate retention period for personal information include:  (1) the amount, nature and sensitivity of the personal information; (2) the length of time we have an ongoing relationship with you and provide services to you; (3) the purposes for which we process the personal information; (4) the potential risk of harm from unauthorized use and disclosure of your personal information; (5) whether there are legal obligations or requirements to which we are subject; and (6) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitation, litigation or regulatory investigations).  After the expiry of the aforementioned retention periods, we will delete or anonymize your personal information.

Transfer of Personal Information

Transfers to third parties

Our Privacy Policy provides information regarding the potential recipients of your personal data.

The personal data that you provide to us as explained in the “Information You Provide to Us” section of the Privacy Policy may be shared with a limited number of third parties for their own direct marketing purposes, namely to some of our co-branded partners, specifically:

• National Geographic; and
• The Walt Disney Company.

However, we will get your express consent before this occurs. You may withdraw consent you have previously provided in this respect at any time by contacting us using the details provided at the end of this notice or as otherwise explained at the time that your consent is requested.

International transfers

Lindblad Expeditions is based in the United States, and we process and may store information in the United States and other countries.  If your personal information is transferred to the United States or other jurisdictions located outside of the European Economic Area, the United Kingdom or Switzerland, we will ensure that appropriate safeguards exist and are taken, including:

• the recipient of the information being located within a country that benefits from an “adequacy” decision of the European Commission and/or the UK’s Information Commissioner’s Office;
• the recipient having signed a contract based on the standard contractual clauses approved by the European Commission and/or the UK’s Information Commissioner’s Office, obliging them to protect your personal information; or
• in the absence of the above appropriate safeguards, we may ask for your consent in compliance with European Data Protection Laws for the cross-border transfer of your personal information or take any other measures that provide sufficient level of protection for your personal information or otherwise ensure that the transfer is in compliance with the European Data Protection Laws.

You can obtain more information about the countries to which your personal data is transferred, and copies of the additional measures put in place, by contacting us using the contact details below.

Data Subject Rights

You have the right to access personal data that we maintain about you and to ask that your personal data be corrected, erased, or transferred.  You may also have the right to object to, or request that we restrict, certain processing of your information.  If you would like to exercise any of these rights, you may contact us by sending an email to privacy@expeditions.com.  Please be advised that our ability to honor these rights may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested.  If we are not able to honor your request(s), we will inform you of the specific reasons in our response to your request. Please be aware that there are exceptions and exemptions that apply to some of the rights, which we will apply in accordance with European Data Protection Laws.

We do not make any decisions regarding you solely using automated decision making (including profiling) based on your personal data.

Questions or Complaints

You may contact us at privacy@expeditions.com if you have any questions about these Additional Disclosures.  If you have a concern about our processing of personal data that we are not able to resolve, you have the right to lodge a complaint with the competent data protection supervisory authority. 

For further information, or to exercise any rights described herein, please contact us at:

Lindblad Expeditions
96 Morton Street
New York, NY 10014
646-918-1482
privacy@expeditions.com