Legal information
Privacy Policy
Last updated 17 September 2026
These pages are still being completed. Details marked “to be added” will be supplied before online payment is opened.
We collect only what is needed to deliver your order. We never sell your data, and we never use it for advertising.
1. Data controller
The controller of your personal data under Lög nr. 90/2018 (the Icelandic act implementing the GDPR) is:
- Seller
- to be added
- Address
- to be added
- contact@le-benic.com
2. At a glance
- No analytics, no advertising trackers and no profiling.
- As a customer, you may occasionally receive emails about our products; a single tick at checkout, or the link in any email, stops them.
- We do not ask for your kennitala.
- Card details are entered only on the payment provider’s secure page.
3. What we process, and why
| Activity | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Visiting the website | IP address, time, page requested and browser type (server logs) | Operating and securing the website. Legitimate interests (GDPR Art. 6(1)(f)). | For the hosting provider’s log period (being confirmed). |
| Orders and delivery | Email address, phone number, first and last name, delivery address, delivery method and order contents | Processing, delivering and supporting your order, including returns and complaints. Contract (Art. 6(1)(b)). | Until the two-year complaint period following delivery has ended, or for as long as a claim remains open. |
| Bookkeeping | Order and sales records, receipts and payment references | Legal obligation under Lög um bókhald nr. 145/1994 (Art. 6(1)(c)). | 7 years from the end of the financial year. |
| Payment | Payment status, amount and reference (card details remain with Teya) | Confirming your payment. Contract (Art. 6(1)(b)). | As part of the bookkeeping records. |
| Correspondence | Your messages to contact@le-benic.com and our replies | Responding to you. Contract, for matters concerning an order; otherwise legitimate interests. | For as long as is needed to deal with your enquiry. |
| Emails about our products | Email address, first name, language, and a record of the choice you made at checkout (wording, version, time and order number) | Occasional emails to customers about LE BENIC’s own products and related news, unless you ticked “Don’t email me” at checkout. Legitimate interests (Art. 6(1)(f)) under the existing-customer rule of Lög um fjarskipti nr. 70/2022, Article 94. You can stop them at any time using the unsubscribe link in every email, or by writing to us. | Until you unsubscribe. |
| Affiliate links | The handle of the affiliate whose link brought you to the website during the same visit, stored with your order | Remunerating our affiliates for the purchases they introduce. Legitimate interests (Art. 6(1)(f)). The affiliate learns only that a purchase was made, never who made it. | For as long as the order record is kept. |
| Affiliate applications | Name, email address, phone number (optional), where you would present LE BENIC, and your message | Considering your application and replying to you. Steps taken before entering into a contract, at your request (Art. 6(1)(b)). | Until we have replied to you, and for 6 months thereafter; for accepted partners, for the duration of the partnership. |
| Cart and language | Stored only in your browser; never sent to us | See the Cookie Policy. | Until you clear it. |
| Wholesale applications | Business or store name, contact person, business email address, phone number (optional), website and Instagram (optional), town, type of store, number of locations, the brands you carry, and your messages | Considering your application and replying to you. Steps taken before entering into a contract, at your request (Art. 6(1)(b)). | Until we have replied to you, and for 6 months thereafter; for accepted stockists, for the duration of the partnership. |
4. Details we require
Your email address, phone number, name and delivery address are needed to conclude and deliver your order; without them, we cannot accept it. The apartment field is optional. Your phone number is used for delivery notifications from Dropp or Pósturinn.
5. Recipients of your data
- Websupport s.r.o. (Slovakia, EU) — hosts the website and its server logs on our behalf.
- Dropp ehf. — delivers Dropp orders and receives your name, phone number, email address and delivery address.
- Íslandspóstur ohf. (Pósturinn, Póstbox) — delivers Pósturinn orders under its own privacy statement and receives your name, phone number, email address and delivery address.
- Teya Iceland hf. — processes card and wallet payments as an independent controller under its own privacy notice.
- Google — provides our email (Google Workspace) and the website’s fonts (Google Fonts), which receive your IP address when a page loads.
- Cloudflare (cdnjs) and jsDelivr — deliver the animation scripts used by the website and receive your IP address when a page loads.
- Email marketing service (to be named here once chosen) — holds the customer email list and sends our product emails on our behalf, excluding anyone who declined at checkout or has since unsubscribed.
Some of these providers may process data outside the EEA, for example in the United States. Such transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses.
6. Your rights
- Access — a copy of the data we hold about you.
- Rectification — correction of inaccurate data.
- Erasure — deletion, except for records we are required to keep for bookkeeping.
- Restriction and data portability.
- Objection — to processing based on legitimate interests.
Write to contact@le-benic.com. We respond within one month.
No decisions concerning you are made by automated means.
7. Complaints
You may lodge a complaint with the Icelandic Data Protection Authority: Persónuvernd, Laugavegur 166, 105 Reykjavík, postur@personuvernd.is, island.is/s/personuvernd. You are welcome to contact us first, although you are under no obligation to do so.
8. Security and changes
The website uses an encrypted connection (HTTPS), and access to order data is restricted. We update this policy whenever our processing changes; the date shown above identifies the current version.