Privacy Policy

1. Controller

PickNord ehf., Reykjavík, Iceland is the data controller for personal data processed on picknord.is. Contact: privacy@picknord.is.

2. What we process and why

• Account data (name, email, phone, language, currency): to operate your account. Legal basis: contract.
• Booking data (items, dates, driver details, payment status): to perform your bookings and meet Icelandic bookkeeping law. Legal basis: contract, legal obligation.
• Payment data: processed by our payment provider; we never store full card numbers. Legal basis: contract.
• Host verification data (registry numbers, licences, documents): to verify supply as required for a trustworthy marketplace. Legal basis: legitimate interest, legal obligation.
• Messages and support conversations: to run host chat and customer support. Support agents' access to personal data is itself logged. Legal basis: contract, legitimate interest.
• Usage data (searches, page views on listings): to improve the marketplace. Legal basis: legitimate interest.

3. Sharing

Hosts receive the booking data they need to deliver your booking (name, contact, party details). Processors (hosting, email delivery, payments) act under data-processing agreements. We do not sell personal data.

4. Retention

Account data lives while your account does. Booking and invoice records are retained 7 years (Icelandic bookkeeping law), then deleted or anonymized. Support access logs and audit trails are pruned on a rolling schedule.

5. Your rights

Access, rectification, erasure, restriction, portability and objection: write to privacy@picknord.is. Account deletion anonymizes your identity while retaining legally required booking records. You can complain to Persónuvernd (the Icelandic DPA).

6. International transfers

Data is stored in the EEA. Where a processor operates outside the EEA, transfers rely on adequacy decisions or standard contractual clauses.