Privacy Policy

1. Data controller

Jump Iceland ehf., kennitala 510424-0450, Reykjavík Domestic Airport, 102 Reykjavík, Iceland, is the controller of your personal data. Privacy questions go to contact@jumpiceland.com.

2. What we collect

• Booking details: name, email, phone, country, preferred dates, party size, notes.
• Jumper details needed to fly you safely: name, weight, height and, for fun jumpers, licence number and rig status.
• Inquiry, event registration and waitlist submissions.
• Payment metadata: amount, currency, payment status and a payment reference from our provider. We never receive or store your full card number, expiry date or security code.
• Basic technical data such as IP address and browser type, used to keep the site secure.

3. Why we use it and our legal basis

• To perform your booking contract: scheduling, manifesting, pairing you with an instructor, and processing payment.
• To meet legal obligations: aviation and parachuting safety records, accounting and tax retention.
• For our legitimate interests: responding to inquiries, preventing fraud and abuse, and improving our service.
• With your consent: marketing emails and waitlist updates. You can withdraw consent at any time.

4. Who we share it with

• Revolut, our payment provider, which processes your card payment as an independent controller.
• Our hosting, database and transactional email providers, acting as processors under contract.
• Icelandic authorities where we are legally required to disclose information.
• We never sell your personal data.

5. International transfers

Some of our providers process data outside the EEA. Where that happens, transfers are covered by an adequacy decision or the EU Standard Contractual Clauses.

6. How long we keep it

• Booking and jump records: seven years, to satisfy Icelandic accounting and safety-record requirements.
• Inquiries and waitlist entries: up to two years from your last interaction with us.
• Marketing consents: until you unsubscribe, plus a suppression record so we do not email you again.

7. Your rights

• Access, correct, delete or export your personal data.
• Object to or restrict processing based on legitimate interests.
• Withdraw marketing consent at any time via the unsubscribe link or by emailing us.
• Lodge a complaint with Persónuvernd, the Icelandic Data Protection Authority. Contact us first at contact@jumpiceland.com and we will try to resolve it.

8. Security and cookies

• Data is encrypted in transit and at rest, with access limited to staff who need it.
• We use only the cookies and local storage needed to run the site, keep sessions secure and remember your language choice. We do not use advertising cookies.