1. Data controller
The data controller is FONDO ehf., kt. 521216-1310, Krókháls 7, 110 Reykjavík, Iceland. You can reach us at info@icefleet.is or +3548923392.
2. What we collect
- Booking data: name, email, phone, pickup/drop-off addresses, dates, times, passenger count, flight number, special requests.
- Payment data: processed by our payment provider (Rapyd / Valitor). We receive transaction status and a reference, never your full card number.
- Invoicing data: when issuing VAT invoices we may transfer name, address, kennitala (for businesses), and line items to our accounting provider (Payday).
- Communications: messages you send via the contact form, WhatsApp, or email.
- Technical data: basic logs (IP, browser, timestamps) used to operate and secure the site.
3. Why we use your data
- To deliver and manage the services you book.
- To process payments and issue invoices/receipts (legal obligation under Icelandic accounting law).
- To communicate with you about your booking, schedule changes, or operational updates.
- To respond to inquiries and provide customer support.
- To prevent fraud and keep the service secure.
4. Legal basis
We process personal data under (a) the contract we have with you when you book, (b) our legal obligations (e.g. tax and accounting), and (c) our legitimate interest in operating, improving, and securing our service.
5. Sharing your data
We share data only with providers needed to deliver the service:
- Rapyd / Valitor — payment processing.
- Payday — invoicing and accounting.
- Microsoft (Microsoft Graph) — outbound transactional emails.
- Hosting and infrastructure providers needed to operate the site.
- Authorities when required by law.
We do not sell your personal data.
6. Retention
We keep booking and invoicing data for as long as required by Icelandic accounting and tax law (typically 7 years). Operational logs and inquiry messages are kept only as long as needed for the purposes above.
7. Your rights
Under applicable Icelandic and EEA data protection law you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion, subject to our legal retention obligations.
- Object to or restrict certain processing.
- Lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).
To exercise these rights, contact info@icefleet.is.
8. Cookies
We use a minimal set of cookies and similar technologies that are strictly necessary to operate the site (e.g. session, authentication, security). We do not use third-party advertising trackers.
9. Security
We apply reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted admin access, and trusted third-party processors.
10. Changes
We may update this policy from time to time. Material changes will be reflected here with a new “last updated” date.
Last updated: May 17, 2026