Privacy Policy

Sólka, operated by Sólfríður Jóhannesdóttir in Reykjavík, Iceland, is the data controller for the personal data collected through this website and online storefront.

You can contact us at privacy@solka.is if you have questions about this policy or how we handle your information.

We only process personal data for specific, legitimate purposes that help us run the Sólka business:

• Order fulfilment

  Processing purchases, delivering products, and providing updates about your order.

• Customer communication

  Responding to messages, support requests, and enquiries you send through our contact form or email.

• Site safety and improvement

  Maintaining our digital services, preventing fraud, and understanding how visitors use the site so we can improve it.

Depending on the context, we rely on the following legal bases to process personal data:

• Performance of a contract when we process your order or deliver purchased goods.
• Legitimate interests to maintain our services, keep them secure, and grow our business responsibly.
• Consent when you sign up for optional communications or provide information for specific purposes.

We keep personal data only for as long as necessary to fulfil the purposes described above. For example, order information is retained to meet accounting and legal obligations.

When data is no longer needed, we securely delete it or anonymise it so it can no longer be linked back to you.

We sometimes share information with trusted partners who help us operate the store. They only process data on our behalf and under strict confidentiality obligations:

• Payment service providers

  Process secure transactions and prevent fraudulent payments.

• E-commerce and hosting platforms

  Provide the infrastructure that powers the Sólka storefront and keeps it available online.

• Email and communication tools

  Deliver order confirmations, customer support replies, and essential service messages.

Depending on your location, you may have the following rights over your personal data:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Request deletion of your data when it is no longer needed or if you withdraw consent.
• Object to or request restriction of certain processing activities.
• Request a portable copy of the data you provided to us.

Contact us using the details below to exercise these rights or ask questions.

If you have privacy questions or would like to exercise your rights, please reach out. We aim to respond promptly to every request.