Privacy Policy

Last updated: August 2026

At Stay Reykjavík, we respect your privacy and are committed to handling your personal information responsibly.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with, and the rights you have regarding your personal information.

1. Who is responsible for your personal information?

The controller responsible for personal information processed through this website and in connection with your reservation is:

STAY Reykjavík ehf.
Frakkastígur 20
101 Reykjavík
Iceland

Email: stayreykjavik@stayreykjavik.is
Phone: +354 696 9676

2. What information do we collect?

Depending on how you interact with us, we may collect:

Name
Email address
Telephone number
Booking and reservation details
Number of guests
Check-in and check-out dates
Payment and transaction information
Communications between you and us
Information you provide when requesting assistance or making special arrangements
Information required by applicable Icelandic laws and regulations
Technical information relating to your use of our website, such as IP address, browser type and device information

We do not normally receive or store your full payment card details. Online payments are processed by our payment service provider.

3. How do we use your information?

We use personal information where necessary to:

Process and manage reservations
Take and process payments
Communicate with you before, during and after your stay
Provide check-in and access information
Respond to questions and requests
Provide customer service
Manage cancellations and changes to reservations
Maintain and improve our website and services
Prevent fraud, misuse and security incidents
Comply with legal and regulatory obligations
Establish, exercise or defend legal claims
Send marketing communications where we have a lawful basis to do so

4. Legal basis for processing

Depending on the circumstances, we process personal information on the following legal bases:

Performance of a contract
We need certain information to process your reservation and provide the accommodation and related services.

Legal obligations
We may need to process or retain information to comply with Icelandic tax, accounting, accommodation or other legal requirements.

Legitimate interests
We may process information where necessary for purposes such as operating and securing our website, preventing fraud, handling disputes and improving our services, provided that these interests do not override your rights.

Consent
Where consent is required, for example for certain marketing or optional cookies, we will ask for your consent. You may withdraw consent at any time.

5. Payment and booking providers

We use third-party service providers to operate our booking and payment systems.

Our booking system is provided through OwnerRez, which may process reservation and guest information on our behalf.

Payments are processed through Stripe. Stripe may process payment and transaction information in accordance with its own privacy documentation.

These providers may process personal information outside Iceland where necessary to provide their services. Where personal information is transferred outside the European Economic Area, appropriate safeguards will be used where required by applicable data-protection law.

6. Other service providers

We may share personal information with service providers where necessary to operate our business, provide the accommodation or fulfil your reservation. These may include:

Booking and property-management providers
Payment providers
Website and hosting providers
Email and communication providers
Cleaning and property-service providers, where necessary to provide services relating to your stay
Professional advisers such as accountants, lawyers or auditors
Public authorities where required by law

We only provide service providers with the information reasonably necessary for them to perform their services.

7. Communication

We may contact you by email, telephone, SMS, WhatsApp or other communication methods using the contact information you provide.

Reservation-related communications may include booking confirmations, payment information, check-in instructions, access information, important information about your stay and responses to your requests.

These communications are part of providing the service and may be sent regardless of whether you have opted out of marketing communications.

8. Marketing

We may occasionally send information about Stay Reykjavík, our accommodation or special offers where permitted by law.

Where consent is required, we will obtain it before sending marketing communications.

You can unsubscribe from marketing communications at any time by following the instructions in the relevant message or by contacting us.

9. Cookies and website technologies

Our website may use cookies and similar technologies that are necessary for the operation, security and functionality of the website.

We may also use analytics or other optional technologies to understand how visitors use our website and improve our services.

Where required by law, we will ask for your consent before placing non-essential cookies or using similar technologies.

You can control cookies through your browser settings and, where available, our website's cookie settings.

10. How long do we keep your information?

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Reservation, payment and accounting information may need to be retained for longer periods where required by Icelandic tax, accounting or other legal requirements.

Other information is generally deleted or anonymised when it is no longer needed, unless we have a legitimate reason or legal obligation to retain it.

11. Your rights

Subject to applicable law, you may have the right to:

Request access to personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information
Request restriction of processing
Object to certain processing
Request portability of information you have provided to us
Withdraw consent where processing is based on consent
Lodge a complaint with the Icelandic Data Protection Authority

Some rights are subject to legal exceptions and may not apply in every circumstance.

To exercise your rights, please contact us using the details below.

12. Data security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

13. Third-party websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies before providing them with personal information.

14. Children's information

Our services are intended for adults making accommodation reservations.

We do not knowingly collect personal information directly from children for marketing purposes. Where information about children is necessary for a reservation, it is normally provided by the accompanying adult making the booking.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal requirements.

The latest version will always be published on this page, together with the date it was last updated.

16. Contact and complaints

If you have questions about how we process your personal information or wish to exercise your rights, please contact:

STAY Reykjavík ehf.
Frakkastígur 20
101 Reykjavík
Iceland

Email: stayreykjavik@stayreykjavik.is
Phone: +354 696 9676

You also have the right to contact the Icelandic Data Protection Authority (Persónuvernd) if you believe your personal information has been processed unlawfully.