At Magical Iceland, we are dedicated to protecting your privacy and handling your personal data with care and openness. This policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

1. Who We Are
Magical Iceland is operated by Y B Arthursson ehf., based in Reykjavík, Iceland. For any privacy-related questions, please contact us at privacy@magicaliceland.is.

2. What We Collect
We gather the following types of personal data:

Information you provide directly, such as your name, email address, phone number, and booking details

Technical and usage data, including your IP address, browser type, device information, and how you interact with our site (via cookies and analytics tools)

3. How We Use Your Data
We use your information for these purposes:

To respond to your questions and process bookings (legal basis: contractual necessity)

To send you updates and offers if you’ve opted in (legal basis: consent)

To improve our website and services (legal basis: legitimate interest)

To comply with legal requirements

4. Data Sharing and Transfers
We only share your data with trusted service providers (like payment processors and email platforms), and only when necessary. If data is transferred outside the EEA, we ensure proper safeguards such as Standard Contractual Clauses.

5. Cookies
We use cookies to improve site functionality and analyze user behavior. You can manage or disable cookies in your browser settings. For more details, please see our [Cookie Policy] (link if applicable).

6. Data Retention
We keep your personal data only as long as necessary for the purposes listed above or to comply with applicable laws.

7. Your Rights
Under GDPR, you have the right to:

• Access, correct, or delete your data
• Withdraw your consent at any time
• Restrict or object to data processing
• Get a copy of your data (data portability)
• File a complaint with Iceland’s data protection authority (Persónuvernd)

To exercise these rights, please email privacy@magicaliceland.is.

8. Changes to This Policy
We may update this policy occasionally. The latest version will always be available on our website.