1. Who we are
Icelandic Sport Shop (“we”, “us”) operates icelandicsportshop.com. We are a brick-and-mortar sports and football shop. This privacy policy explains how we handle your personal data when you visit our website or contact us through the contact form. The data controller is K.C. NTOMATA LIMITED, Stylianou Lena, 24 Christiana Court, Flat/Office 202, Strovolos, Nicosia 2019, Cyprus. For questions about this policy or your data, contact info@icelandicsportshop.com.
2. What data we collect
We only collect data you give us or that is necessary to run the website:
- Contact form. When you send a message through the contact form we receive your name, email address, subject and message content. If you fill in the optional “Product” field we also receive that information. We use this solely to respond to your enquiry (e.g. about stock or pricing).
- Cookies and similar technologies. Our site uses cookies so the site works, to remember your choices (such as cookie consent) and to understand how the site is used in aggregate. Read more in our cookie policy.
- Technical and access data. When you visit our site, hosting and analytics services may automatically collect information such as your IP address, browser type, device type and pages viewed. This is used for security, maintenance and to understand site usage in an aggregated, non-identifying way.
3. Legal basis and purposes
We process your data only where we have a lawful basis:
- Contact form. We process your name, email and message on the basis of your consent (when you submit the form) and our legitimate interest in responding to enquiries. The purpose is to answer your questions about products, stock and pricing.
- Cookies. Where the law requires it we ask for your consent for non-essential cookies. Essential cookies are used on the basis of our legitimate interest in operating a working website.
- Technical and analytics data. We rely on our legitimate interests in operating, securing and improving our website. Analytics is used in aggregate and does not identify you personally.
We do not sell your personal data. We do not use your data for marketing unless you have explicitly agreed (e.g. to a newsletter).
4. How long we keep your data
We keep contact form submissions for as long as needed to handle your enquiry and for a limited period afterwards for records and follow-up (usually up to two years, unless the law requires longer retention). After that we delete the data or anonymise it. Cookie and analytics retention follows the periods described in our cookie policy (e.g. session cookies until you close the browser; analytics often up to about 26 months). Technical logs may be kept for shorter periods for security and maintenance.
5. Who we share data with
We may share your data only with service providers who help us run the website and communicate with you (e.g. hosting, email delivery, analytics). These parties are bound by contracts or terms requiring them to protect your data and use it only as we instruct. We do not share your data with third parties for their own marketing. If we must disclose data under law or a valid legal request we will do so only to the extent necessary.
6. Your rights
Depending on where you live (including if you are in the EEA or UK) you may have the following rights regarding your personal data:
- Access – to obtain a copy of the personal data we hold about you.
- Rectification – to have inaccurate data corrected.
- Erasure – to have your data deleted in certain circumstances.
- Restriction – to limit how we use your data in certain cases.
- Data portability – to receive your data in a structured, machine-readable format where applicable.
- Object – to object to processing based on legitimate interests.
- Withdraw consent – where we rely on consent you may withdraw it at any time.
- Complaint – to lodge a complaint with a supervisory authority (e.g. the data protection authority in your country).
To exercise any of these rights, contact us at info@icelandicsportshop.com. We will respond within the time required by applicable law (usually within one month).
7. International transfers
Our website and some of our service providers may be located outside your country. If we transfer your data to a country not deemed to provide adequate protection we will ensure appropriate safeguards are in place (e.g. standard contractual clauses or other measures approved by relevant authorities).
8. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or misuse. This includes secure hosting, encrypted connections (HTTPS) where possible and limiting access to personal data to those who need it. No system is completely secure; if you have concerns, please contact us.
9. Children
Our website is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have collected data from a child, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this privacy policy from time to time (e.g. to reflect changes in our practices or the law). The “Last updated” date at the top will be revised when we make changes. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy where permitted by law.
11. Contact
For questions about this privacy policy or your personal data:
K.C. NTOMATA LIMITED
Stylianou Lena, 24 Christiana Court, Flat/Office 202, Strovolos, Nicosia 2019, Cyprus
Email: info@icelandicsportshop.com