The full privacy policy is available in Icelandic. A summary of key points is provided below. For the complete document, please switch to Icelandic or contact us at personuvernd@leiguskjol.is.
Summary
Igloo (Leiguskjól ehf., reg. no. 510906-1520) is the data controller for personal data processed through myigloo.is and the Igloo mobile app. We process your data in accordance with the Icelandic Data Protection Act (No. 90/2018) and the General Data Protection Regulation (EU) 2016/679 (GDPR).
Data we collect
We collect identification data, contact details, financial information (income, credit assessments), household data, technical data (IP address, device info), and AI-derived data (fraud scores, conversation summaries).
How we use your data
To provide rental services, process guarantee applications, verify identities, detect fraud, improve our platform, and comply with legal obligations (AML, tax reporting).
Third parties
We share data with: AWS (hosting), Google Gemini (AI processing), Dokobit (e-signatures), Creditinfo (credit assessments), Meta (advertising, with your consent), Expo (push notifications), Datadog and Sentry (system monitoring).
International transfers
Some data is transferred to the United States (Google, Meta, Expo, Datadog, Sentry) under Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.
Your rights
You have the right to access, rectify, erase, restrict, port, and object to the processing of your data. You may also withdraw consent at any time. We respond to requests within 30 days. Contact: personuvernd@leiguskjol.is. You may also lodge a complaint with Persónuvernd (the Icelandic Data Protection Authority).
Retention
Data is retained for 4 years after the business relationship ends (general), 7 years for financial/accounting data, 5 years for AML/KYC data, and shorter periods for technical data (90 days) and call recordings (90 days to 2 years).
Automated decisions
We use automated decision-making for rental guarantee approvals (based on credit scores and income data) and AI fraud detection. You have the right to contest automated decisions and request human review.
The service is intended for users aged 18 and older.