Privacy Policy

Our commitment to you

• Secure handling. We apply strict technical and organisational safeguards to prevent your data from being accessed or misused.
• Minimal collection. Only the details required to deliver your journey are collected—nothing superfluous.
• Purposeful use. Data is used solely for the services and purposes explained to you at the time of collection.
• Transparent communication. We keep you informed about how information is processed and when trusted partners are involved.

Data collection & processing

When you book, we collect what the booking form asks for: your name, email, phone or WhatsApp number, pick-up and drop-off locations, pick-up date and time, flight number, passenger and luggage count, and any notes you add. The contact form collects your name, email, phone and message. We do not collect sensitive data or continuous location data. This information is used to price, confirm, and carry out your transfer or tour, and to contact you about it.

To protect the booking form from abuse we use Cloudflare Turnstile, which may process your IP address and browser characteristics. Our server also records the details of each booking submission, including your IP address, in operational logs so that we can trace and support your booking.

Payments & service providers

Online payments are processed by Rapyd on a hosted checkout page. Your card, Apple Pay, Google Pay or Alipay details are entered directly with Rapyd and never reach Skyline Taxi. Rapyd receives your name, email, phone number, the amount, and a summary of your booking so the payment can be matched to it, and processes it under its own privacy policy.

Booking and contact emails are delivered through Resend, which processes the email addresses and message content needed to send them. These providers operate partly outside Iceland; transfers within the EEA are covered by the GDPR, and transfers beyond it rely on the providers’ standard contractual clauses.

Retention & security

Booking records are kept for as long as Icelandic bookkeeping law requires for paid services, and otherwise no longer than needed to deliver and support your trip. Operational server logs are kept for a short period and then deleted. Data in transit is encrypted, and payment data is handled only by our PCI-compliant payment provider.

Your rights

You may access, correct, or request the deletion of your personal data at any time. Where processing is based on consent, you may withdraw that consent whenever you choose. Concerns may be escalated to the Icelandic Data Protection Agency.

Policy updates

This Privacy Policy may be updated to reflect service changes or regulatory requirements. Updates take effect immediately when published.