Privacy Policy

1. About this Privacy Policy

This Privacy Policy explains how Foss & Beyond collects, uses and protects personal information when you use fossandbeyond.is, submit a ride request or contact us directly.

Edgar Leonen Tulagan, operating Foss & Beyond, is responsible for the personal information processed through this website and related booking communications.

2. Data controller and contact details

The person responsible for personal information processed through this website is:

• Edgar Leonen Tulagan
• Foss & Beyond
• Reykjavík, Iceland
• Email: info@fossandbeyond.is
• Phone: +354 780 4008

3. Information we collect

When you submit a ride request through the website, we may collect information including:

• Your name
• Email address
• Phone number
• Pickup location
• Drop-off location
• Requested date and time
• Number of passengers
• Flight number, where relevant
• Additional travel details or requests that you choose to provide

We may also receive information that you provide when contacting us directly by email, telephone or WhatsApp.

4. Why we use your information

We use personal information primarily to:

• Review and respond to ride requests
• Discuss availability, routes and journey details
• Communicate with you before and after a requested journey
• Arrange services that you request from us
• Maintain necessary business and booking records
• Protect the website and prevent misuse or fraud

5. Legal basis for processing

When you submit a ride request or contact us about a possible journey, we process the information necessary to respond to your request and take steps toward arranging the requested service.

The main legal basis for this processing is that it is necessary to take steps at your request before entering into a contract, or to perform a contract where a service has been agreed.

We may also process limited information where necessary for legitimate business interests, such as maintaining security, preventing misuse, managing communications and protecting legal rights.

Where processing is necessary to comply with a legal obligation, we may also process and retain information as required by applicable law.

6. Booking requests

Submitting a booking request through the website does not automatically create a confirmed booking.

The information you submit is sent to Foss & Beyond so that we can review the request and contact you regarding availability and journey arrangements.

You may also receive an automatic acknowledgement email containing a summary of the information submitted through the form.

7. Who receives your information

Personal information is used only where reasonably necessary to handle your request and provide the requested service.

Information may be accessible to:

• Foss & Beyond personnel involved in arranging or providing your journey
• Trusted drivers or service providers where information is necessary to provide the requested transport
• Website hosting and email service providers used to operate the website and communications
• Authorities or other parties where disclosure is required by law

We do not sell personal information to advertisers.

8. Email and communication services

Ride requests submitted through the website are transmitted through our website hosting and email systems.

If you contact us through WhatsApp or another third-party communication service, that provider may process information according to its own privacy terms.

9. How long we keep information

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected, including handling booking requests, providing services, resolving disputes, maintaining appropriate business records and complying with legal obligations.

Retention periods may therefore vary depending on whether a request becomes a confirmed service and whether records must be kept for legal, accounting or administrative purposes.

10. Cookies and tracking

Foss & Beyond does not currently use advertising cookies or behavioural tracking technologies through this website.

Basic technical information may still be processed automatically by our hosting provider as part of operating and securing the website, such as server logs and network information.

If additional analytics or tracking technologies are introduced in the future, this policy will be updated and any required consent mechanism will be implemented.

11. Your privacy rights

Depending on the circumstances and applicable data-protection law, you may have the right to:

• Request access to personal information held about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain processing based on legitimate interests
• Receive certain personal information in a portable format where applicable

To exercise a privacy right, contact us at info@fossandbeyond.is .

12. Complaints

If you believe that your personal information has been handled unlawfully, you may have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).

We encourage you to contact Foss & Beyond first if you have a concern so that we can try to address it directly.

13. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

However, no internet or email transmission can be guaranteed to be completely secure.

14. Changes to this policy

We may update this Privacy Policy when our services, website functionality or legal obligations change.

The current version will be published on this page with the latest revision date shown above.