Last updated: September 2026
This website, zoffi.is, is operated by Zoffi ehf. (Zoffi Eiderdown), Lækur, 471 Þingeyri, Iceland, company registration no. 660623-1400, VAT no. 149373 (“Zoffi”, “we”). We process personal data in accordance with the Icelandic Data Protection Act no. 90/2018 and the EU General Data Protection Regulation (GDPR). You can reach us about anything in this policy at zoffi@zoffi.is.
What we collect and why
- Enquiries and orders. When you write to us by email or through the contact form, we receive the information you give us – typically your name, email address, country and message, and for orders your delivery address and telephone number. We use it to answer you, prepare a quote, make and deliver your order and handle any guarantee matters. Legal basis: performance of a contract or steps taken at your request before a contract (GDPR art. 6(1)(b)). We keep enquiries for up to two years and order records for seven years as required by Icelandic accounting law.
- Website analytics. We use Google Analytics 4 (via Google Site Kit) to understand how the site is used – pages visited, country, device type. IP addresses are not stored by Google Analytics 4. Legal basis: your consent, given through the cookie notice, or our legitimate interest in improving the site (art. 6(1)(f)). You can opt out at any time by declining analytics cookies or using Google’s browser add-on.
- Embedded content. Some pages embed videos from YouTube (in privacy-enhanced mode) and a map from Google Maps. These services may set cookies or collect data when you play a video or interact with the map, under Google’s own privacy policy. Links to Airbnb, Instagram and Facebook take you to those services, which have their own policies.
- Server logs and security. Our hosting provider (1984 ehf., Reykjavík) keeps standard server logs, including IP addresses, for security and troubleshooting, for a limited time.
Cookies
The site uses strictly necessary cookies (for example to remember your language choice and to protect forms from spam) and, with your consent, analytics cookies from Google Analytics. We do not use advertising cookies and we do not sell data.
Who we share data with
Only with those we need to fulfil your request: our email and hosting providers, the courier delivering your order, our bank for payments, and our accountant. Some of these (Google) are outside the EEA; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses. We never sell or rent personal data.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing, to data portability and to withdraw consent at any time. Email zoffi@zoffi.is and we will respond within one month. You may also complain to the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is) or the supervisory authority in your own country.
Changes
We may update this policy when the site or the law changes. The date at the top tells you when it was last revised.