🔏 privacy policy

1. Data controller — The Golden Hearth ehf. (address: Þingvellir 801, Iceland) is responsible for your personal data.

2. What we collect — When you book or use our contact form, we collect name, email, phone, dining preferences, and any allergy info you provide.

3. Purpose — To manage reservations, send confirmations, improve our service, and occasionally send offers (only if you opt in).

4. Legal basis — Contract performance (booking) and legitimate interest (customer service). For marketing, we ask separately.

5. Sharing — We never sell data. We may share with payment processors or tour partners only when you book a glacier package.

6. Retention — Reservation data stored for 3 years. Marketing data until you unsubscribe.

7. Your rights — Access, correction, deletion — email dpo@goldenhearth.is. You also have the right to lodge a complaint with the Icelandic Data Protection Authority.

8. Cookies — Our website uses only essential technical cookies. No tracking cookies without consent.