Privacy policy

We collect only what you send us yourself, plus the minimal technical data that comes with using any website:

• Contact form: name, phone or email, the chosen service and your message. With it come the path of the page the form was sent from, the site language and a campaign code if you arrived through a campaign link.
• Contact you initiate: phone calls, email and WhatsApp messages, together with whatever you send us there, for example photos of the floor.
• If a job follows: the address of the job, the quote, the contract and invoices.
• Visit counting: the page path, language, device class, the domain of the referring site and a campaign code, together with a random session id that lives only while the tab is open. No IP address, no cookies and nothing that ties the visit to you.
• Technical logs of the hosting provider: IP address, time and path, recorded automatically for security and operational purposes.

• Enquiries and contact: to answer you, inspect and quote. Based on Art. 6(1)(b) GDPR, steps taken at your request before a contract is made.
• Contract and invoices: to perform the contract (Art. 6(1)(b)) and to comply with the Icelandic Accounting Act No. 145/1994 (Art. 6(1)(c), legal obligation).
• Visit counting and security logs: our legitimate interest in knowing which pages are used and in protecting the site from abuse (Art. 6(1)(f)). You can object to that processing and switch counting off on the cookies page.
• We do not use the data for marketing, do not sell it and do not pass it to advertisers.

A few companies host or transmit data for us as processors, under data processing agreements. None of them may use the data for their own purposes.

• Vercel Inc. (USA): hosts the website and runs the enquiry service. Sees technical logs and enquiries in transit.
• Resend Inc. (USA): delivers your enquiry to us as an email. Receives your name, contact details and message.
• Google LLC (USA): the company mailbox is on Gmail, so enquiries and emails from you are stored there.
• Supabase Inc. (USA): the site database, where enquiries and the visit count are kept for the site's admin panel, when connected.
• Anthropic PBC (USA): translates articles we write in the admin panel between languages. Receives only the article text, never visitor data.
• Meta Platforms and WhatsApp: only if you choose to contact us there. Their terms then govern that conversation.

The processors above are US companies. Transfers to them rely on the European Commission's adequacy decision under the EU-US Data Privacy Framework where the company is certified under it, and otherwise on the Commission's standard contractual clauses under Art. 46 GDPR. A copy of the clauses is available on request.

• Enquiries that do not lead to a job: deleted no later than twelve months after the last contact.
• Quotes, contracts and invoices: kept for seven years from the end of the financial year, as the Accounting Act requires.
• Visit counting: records kept for at most 24 months. They contain nothing that identifies you.
• Hosting provider logs: according to its own rules, typically days to weeks.

The website uses no cookies and no third-party analytics or advertising scripts. It keeps a few technical items in your browser, and they are listed one by one on the cookies page.

Cookies and browser storage

Under data protection law you have the right:

• to access the personal data we process about you,
• to have inaccurate or incomplete data corrected,
• to have data erased,
• to restrict processing and to object to processing based on legitimate interest,
• to receive your own data in a machine-readable form,
• to withdraw consent, where processing relies on consent.

Send requests to expertparket2024@gmail.com. We reply within a month. You can also complain to the Icelandic Data Protection Authority, Persónuvernd, Rauðarárstígur 10, 105 Reykjavík, personuvernd.is, or to the supervisory authority in your own EEA country.

All communication with the website is encrypted with TLS. The site runs a strict security policy (Content Security Policy and further security headers) that forbids third-party scripts, the enquiry form is protected against automated submissions, and the admin panel requires sign-in. We collect as little as we can get by with.

Part of the photographs on this site are of work by Expert Parket og Mál ehf. They show rooms we have worked in and, in a few frames, ourselves at work. Other images, including those on the home page, in the catalogue, on the parquet-choice article cover and behind the enquiry form, are illustrative. Some are AI-generated. They show wood types and laying patterns, not particular jobs of ours. No image on the site shows an address or a person outside the company.

We update this policy when the processing or the functionality of the website changes. The latest version is always published here with the date of the last update.