Privacy.

Rafport ehf.'s privacy policy. Here we explain what personal data we collect, for what purpose, on what legal basis, how long it is retained and what rights you have under Icelandic data protection law and the General Data Protection Regulation (GDPR).

This English page is a translation provided for convenience and does not constitute legal advice. The Icelandic version is the official, binding text and prevails in the event of any discrepancy. View the Icelandic version

Last updated · 21 July 2026

01 · Data controller

Privacy — Rafport

02 · Data and purpose

What data we collect and why.

We only collect the information needed to provide the service. Each type of data rests on a specific legal basis:

Data	Purpose	Legal basis
National ID number and name	Identification and account access	Contract
Order history	Processing orders and accounting	Contract and legal obligation
Invoices	Accounting and bookkeeping	Legal obligation (accounting law)
Login and security logs	Security and preventing misuse	Legitimate interests
Log of orders placed on behalf of a customer	Traceability and fraud prevention	Legitimate interests
Email (fulfilment correspondence)	Order confirmations and notifications	Contract
Technical error information	Diagnosing and fixing faults	Legitimate interests
Marketing email (optional)	News and offers if you sign up	Consent

04 · Processors

Third parties that process data.

To run the service we use trusted service providers who process personal data on our behalf under data processing agreements. Where possible we choose services within the EEA.

Party	Purpose	Location
Uniconta	Accounting and business system	EEA
Kenni	Identification with electronic ID	Iceland
Rapyd Europe hf.	Card payments	Iceland / EEA
Railway	Backend and database hosting	EEA / United States
Vercel	Website hosting	EEA / United States
Cloudflare	Content delivery and protection	Global edge network
Sentry	Error and performance monitoring	United States (EEA region available)
Microsoft Clarity	Web analytics, only with consent	United States / global

When data is processed outside the EEA we base the transfer on appropriate safeguards, such as the European Commission's standard contractual clauses.

Privacy.

Privacy.

Who is responsible.

What data we collect and why.

Handling of your national ID number.

Third parties that process data.

How long we keep data.

Your rights under the GDPR.

Cookies.

Questions or complaints?

Products

Service

Company

Contact