Privacy Policy
How we handle your personal data.
Introduction
Hugbúnaðarhús Framtíðarinnar ehf. ("HBHF", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you visit hbhf.is, contact us or book a call with us, how we use it, and the rights you have over it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data.
1. Who we are
The data controller responsible for your personal data is:
- Hugbúnaðarhús Framtíðarinnar ehf.
- Company registration (kennitala): 661125-0980
- Email: hello@hbhf.is
2. What data we collect
We only collect data that we need in order to run our website and respond to enquiries:
- Contact form and chat data. When you use our contact form or chat we collect your name, company, email address and the message you choose to send, so that we can reply to you.
- Booking data. When you book a call through our scheduling page we collect your name, email address and the time you choose, and create a calendar event and video call link for the meeting.
- Usage and analytics data. With your consent we collect pseudonymised information about how visitors use the site, such as pages viewed, approximate region, referring source, browser type and device category. We also collect aggregated, cookieless visit statistics that do not identify you.
- Technical data. Like most websites, our hosting and security provider automatically processes technical information such as IP addresses and request metadata to deliver content and protect the site against abuse.
We do not knowingly collect special categories of personal data, and we do not collect data from children. Our services are intended for businesses and adults.
3. How we use your data and our legal bases
We process your personal data for the following purposes and on the following legal bases:
- To respond to your enquiries, hold the calls you book and provide the services or information you request (legal basis: your consent and/or our legitimate interest in responding to you, and steps taken at your request prior to entering a contract).
- To operate, secure and improve the website (legal basis: our legitimate interest in running an effective and secure website).
- To measure site performance and audience, and to measure the results of our advertising (legal basis: your consent for non-essential cookies).
- To comply with legal obligations, such as bookkeeping (legal basis: compliance with a legal obligation).
5. Service providers and recipients
We share personal data only with trusted service providers who process it on our behalf under appropriate data processing agreements. These currently include:
- Cloudflare: website hosting, content delivery, security and cookieless web analytics.
- Resend: delivery of emails sent through our contact form and chat.
- HubSpot: customer relationship management, website analytics and our call booking page.
- Google: Google Analytics for website usage, and Google Calendar and Google Meet for calls you book with us.
- Meta Platforms: the Meta Pixel, for measuring our advertising on Facebook and Instagram.
- Payday: invoicing and card payments for clients with a subscription.
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
6. International data transfers
Some of our service providers, including Cloudflare, Resend, HubSpot, Google and Meta, are based in the United States. Where personal data is transferred outside the European Economic Area, we ensure an appropriate safeguard is in place. These providers may be certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection, and where applicable we also rely on the European Commission's Standard Contractual Clauses, so that your data continues to receive an adequate level of protection.
7. How long we keep your data
We retain personal data only for as long as necessary for the purposes set out above. Enquiry, chat and booking data is kept for as long as needed to handle your request and our ongoing relationship, after which it is deleted or anonymised. Accounting records are kept for as long as Icelandic law requires. Analytics data is retained for a limited period in line with each analytics provider's settings.
8. Your rights
Under the GDPR and Icelandic data protection law you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data;
- restrict or object to our processing of your data;
- request portability of data you have provided to us;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at hello@hbhf.is. We will respond within the time limits set by law. You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd), personuvernd.is.
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure, including encryption in transit and access controls. No method of transmission over the internet is completely secure, but we work to keep your data safe.
10. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date revised accordingly. Significant changes will be highlighted where appropriate.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@hbhf.is.