Privacy Policy

Last updated: April 11, 2026

This Privacy Policy explains how Flott Taxi ehf ("we", "us") collects, uses and protects your personal data when you visit our website or use our services (city rides, airport transfers and tours) in Iceland.

Who we are

Controller: Flott Taxi ehf (530323-0640). Contact: [email protected], phone +354 793 7777.

Data we collect

• Contact details: name, email, phone.
• Order details: pickup/dropoff, dates/times, flight number, notes, passenger counts, luggage.
• Technical data: IP address, device/browser info, basic cookies (necessary for site operation).
• Verification data: SMS verification status and masked phone number (via Twilio Verify).

How we use your data

• Provide and manage bookings (Article 6(1)(b) GDPR — performance of a contract).
• Verify phone ownership and prevent fraud (Article 6(1)(f) — legitimate interests).
• Communicate with you about your ride (confirmations, driver coordination).
• Improve our website and services (with your consent where required).

Sharing

We share only what is necessary to fulfill your request:

• Drivers: necessary ride details to perform the service.
• Telegram: airport orders are sent to our dispatch channel only after successful SMS verification.
• Twilio Verify: phone number and code status for SMS verification.
• Service providers: hosting and infrastructure necessary to run the website.

International transfers

Some providers (e.g., Twilio) may process data outside the EEA with appropriate safeguards (e.g., SCCs). We select reputable processors and minimize shared data.

Cookies

We use necessary cookies to run the site and remember preferences. Optional analytics cookies, if enabled, help us improve the service. You can accept or reject non‑essential cookies in the banner at the bottom of the site at any time by clearing consent in your browser storage.

Retention

Order data is kept for as long as necessary to provide services and comply with legal obligations (e.g., accounting). Verification codes are short‑lived. Session data is temporary.

Your rights

Subject to conditions in the GDPR, you have rights to access, rectification, erasure, restriction, portability and to object. You also have the right to lodge a complaint with your local supervisory authority.

Security

We implement technical and organizational measures appropriate to risk. No method is 100% secure, but we strive to protect your data.

Children

Our services are not directed to children under 16. If you believe we have collected such data, contact us to delete it.

Changes

We may update this Policy periodically. The latest version is published on this page.

Contact

For privacy inquiries: [email protected].