Last updated: 20/11/2025

This Privacy Policy explains how Krans.is (“we”, “our”, “the Company”) collects, uses, stores, and protects your personal information when you interact with our website, make a purchase, contact us, or otherwise use our services.
We are committed to complying with the General Data Protection Regulation (GDPR) and Icelandic privacy law (Persónuverndarstofa requirements).

By using Krans.is, you agree to the terms of this Privacy Policy.

1. Data Controller

Krans.is is the data controller responsible for handling your personal data.

Controller: Krans.is
Email: krans@krans.is
Address: Reykjavík,ICELAND

2. What Personal Data We Collect

We only collect data necessary to provide our services. This includes:

A. Information you provide directly

• Name

• Email address

• Phone number

• Billing address

• Shipping address

• Order details

• Messages sent to us (email, contact forms, social media)

B. Payment Information

Payments are processed securely through Stripe or equivalent payment providers.
We do not store or access your full credit card details.

Stripe collects:

• Card holder name

• Last 4 digits of card

• Payment confirmation

• Fraud prevention data

Stripe acts as its own Data Controller for financial data.

C. Technical & Usage Data

Depending on your settings, we may collect:

• IP address

• Device type

• Browser type

• Pages visited

• Time spent on site

• Click interactions

This happens through essential cookies and (if installed) analytics tools.

D. Cookies & Tracking Technologies

We use:

• Essential cookies (site functionality, checkout, security)

• Optional cookies (analytics or marketing – only if enabled)

You will be informed and can choose through our cookie banner, if applicable.

3. How We Use Your Data

We use your personal information only for legitimate purposes:

A. To process and deliver orders

• Confirm your order

• Prepare your package

• Deliver your items

• Handle returns and support

B. To communicate with you

• Respond to your inquiries

• Send order confirmations

• Update you about shipping

C. To operate and improve our website

• Analyze site performance

• Fix bugs and prevent fraud

• Optimize user experience

D. To comply with legal requirements

• Keeping transaction records

• Tax obligations

• Fraud prevention

E. Marketing (optional)

Only if you explicitly opt-in:

• Newsletters

• Product updates

• Offers

You can unsubscribe at any time.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• Contractual necessity: To fulfill orders you place with us.

• Legitimate interest: To operate our website securely and effectively.

• Consent: For newsletters, analytics cookies, and marketing tools.

• Legal obligation: To comply with accounting and tax law.

5. How Long We Store Your Data

We only keep your data as long as necessary:

• Order data: 6–10 years (required by Icelandic accounting laws).

• Customer communication: Up to 24 months.

• Marketing consent: Until you unsubscribe.

• Cookies: Depending on your browser settings or cookie type.

You may request deletion of your data at any time (see section 9).

6. Sharing Your Data

We never sell your information.
However, we share it with trusted service providers necessary for our operation:

A. Payment processors

• Stripe
  (Handles card payments securely)

B. Shipping carriers

• Iceland Post (Pósturinn) or any courier chosen

C. Website infrastructure

• Framer (website platform)

• Hosting providers

• Security/anti-fraud tools

These partners only access data required for their function and must follow GDPR.

7. International Transfers

Some service providers (e.g., Stripe, Framer analytics) process data outside the EU/EEA.
Transfers use GDPR-approved safeguards such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Secure encrypted connections

8. Data Security

We apply technical and organizational measures to protect your information:

• HTTPS encryption

• Secure payment gateway (Stripe)

• Access control

• Firewalls and anti-fraud systems

• Regular security updates

Despite this, no online transmission is 100% risk-free.

9. Your Rights (GDPR)

As a user in the EEA, you have the right to:

• Access

Request a copy of the personal data we hold about you.

• Correction

Fix inaccurate or incomplete info.

• Deletion (“right to be forgotten”)

Request your data to be erased unless required by law.

• Restriction

Limit how your data is used.

• Objection

Stop certain types of processing (e.g., marketing).

• Data portability

Receive your data in a machine-readable format.

• Withdraw consent

At any time, for cookie or marketing preferences.

Contact us at:
info@krans.is

10. Cookies

Our website uses cookies to function properly.
These include:

A. Essential Cookies

Required for:

• Checkout

• Cart functionality

• Website security
  These do not require consent.

B. Analytics Cookies (optional)

Used to understand website performance.
Examples: Google Analytics (if installed).
Requires consent.

C. Marketing Cookies (optional)

For retargeting (Facebook, TikTok, Google Ads).
Requires consent.

You may change or withdraw cookie consent at any time in your browser or via our cookie banner.

11. Children’s Privacy

Krans.is is not intended for anyone under 16 years of age.
We do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this policy from time to time.
Latest version will always be posted on this page with the updated date.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact:

Krans.is
Email: info@krans.is
Address: Reykjaví,ICELAND
Website: https://krans.is

You may also submit complaints to the Icelandic Data Protection Authority:
Persónuvernd – https://www.personuvernd.is

If you want, I can now prepare:

• Icelandic version

• Terms & Conditions

• Cookie Policy

• Delivery & Returns page

• Legal footer text

Tell me what you need next.