Privacy Policy

Last updated: 16th February 2026

1. Introduction

This Privacy Policy explains how Icelandic AI (Íslenskukennsla AI ehf) (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit https://icelandic.ai (“Website”), purchase our products, or use our online courses and related services (“Services”).

We are committed to protecting your privacy and complying with all applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Icelandic Data Protection Act No. 90/2018.

By using our Website or Services, you agree to the terms of this Privacy Policy.

2. Data Controller

The data controller responsible for your personal information is:

Icelandic AI (Íslenskukennsla AI ehf)

Kennitala: 5311241460

Registered Address: Kleppsvegi 28 105 Reykjavík

Email: hello@icelandic.ai

Website: https://icelandic.ai

If you have any questions or requests regarding this Privacy Policy, please contact us at the email address above.

3. Information We Collect

We collect and process personal data to provide our Services effectively and to improve your learning experience. The information we collect may include:

3.1. Information You Provide to Us

• Account details – name, email address, password, and contact information.
• Billing information – payment details, billing address, and transaction history (processed securely through third-party payment processors).
• Course activity – progress, quiz results, and usage data on our learning platform.
• Communication – messages or inquiries you send us by email or through the Website.

3.2. Information We Collect Automatically

• Usage data – IP address, browser type, device information, referring URLs, and Website activity.
• Cookies and analytics – we use cookies and tracking tools (such as Google Analytics) to understand user behaviour and improve our Services.
  
  You can control or disable cookies through your browser settings (see section 9 below).

4. How We Use Your Information

We process your personal data for the following purposes:

1. To create and manage your user account.
2. To provide access to digital courses, subscriptions, and other content.
3. To process payments and send purchase confirmations.
4. To communicate with you about your account, updates, or support requests.
5. To improve our Website, content, and customer experience.
6. To send you marketing communications (only if you have provided consent).
7. To comply with our legal obligations, including tax and accounting requirements.

We will not use your data for automated decision-making or profiling that produces legal or significant effects.

5. Legal Basis for Processing

We process your personal data under the following lawful bases (Article 6 GDPR):

• Contract performance – to deliver our Services to you.
• Legal obligation – to comply with Icelandic or EU laws (e.g., financial record-keeping).
• Consent – for marketing communications and optional analytics.
• Legitimate interests – to maintain and improve our business operations and customer experience, provided your rights are not overridden.

6. How We Share Your Information

We only share personal data when necessary and with trusted partners, including:

• Payment processors.
• Learning management systems.
• Email and marketing tools.
• Analytics and hosting providers.

All third-party processors are bound by confidentiality and data protection agreements in compliance with GDPR.

We do not sell or rent your personal data to third parties.

6.1. Payment and Checkout Processing

We use Shopify to host our secure checkout process at shop.icelandic.ai. Payment transactions are processed by Teya through Shopify’s platform.

When you complete a purchase through our checkout:

– Shopify collects your payment information, billing address, and transaction details
– Teya processes your payment card information in compliance with PCI-DSS standards
– We do not directly store or have access to your complete payment card details Shopify and Teya act as payment processors on our behalf.

For detailed information about how Shopify handles data, please see: – Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy – During checkout, you can also view our Checkout Privacy Policy via the link in the checkout footer For information about Teya’s data processing, please see: https://www.teya.com/is/legal/privacy-policy

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable laws.

For example:

• Account and course data are retained while your account remains active.
• Financial and transaction data are retained for 7 years for accounting and legal compliance.
• Marketing consent data are retained until you withdraw consent.

When no longer needed, your data will be securely deleted or anonymised.

8. International Transfers

Your data may be transferred and processed outside the European Economic Area (EEA), for example, when using international service providers (e.g., cloud hosting or email tools).

In such cases, we ensure appropriate safeguards are in place, such as:

• The recipient country having an adequacy decision from the European Commission, or
• The use of Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Cookies and Tracking Technologies

Our Website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device to help us remember your preferences and improve functionality.

You can control or disable cookies in your browser settings. However, disabling cookies may affect certain Website features.

For more information, please see our Cookie Policy (coming soon).

10. Your Data Protection Rights

Under GDPR and Icelandic law, you have the following rights:

• Right to access – request a copy of your personal data.
• Right to rectification – correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) – request deletion of your personal data where applicable.
• Right to restriction – limit how your data is processed.
• Right to data portability – receive your data in a structured, machine-readable format.
• Right to object – object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent – withdraw consent at any time for processing based on consent.

To exercise your rights, contact us at hell@icelandic.ai.

You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd): https://www.personuvernd.is.

11. Security of Your Information

We take appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include encryption, secure servers, firewalls, and limited access to authorised personnel only.

However, please note that no internet transmission or electronic storage is 100% secure. You share information with us at your own risk.

12. Children’s Privacy

Our Website and Services are not intended for children under 16 years of age. We do not knowingly collect personal data from minors. If you believe that a child has provided us with personal data, please contact us, and we will promptly delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

The updated version will be posted on this page with a revised “Last updated” date.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Icelandic AI (Íslenskukennsla AI ehf)

Email: hello@icelandic.ai

Website: https://icelandic.ai

Kennitala: 5311241460