Last Updated: January 23rd, 2026

1. Who We Are

ByMegan is a consulting business based in Iceland, providing digital marketing, website, and related professional services. If you have questions or concerns about this policy, you may email us at: [email protected]

2. Information We Collect

We may collect the following personal information:

• Name
• Email address
• Company name
• Message content submitted through forms
• IP address and device/browser information
• Usage data related to interactions with our website

3. How We Collect Information

We collect personal data when you:

• Submit a contact form on our website
• Communicate with us by email
• Visit our website (via cookies and analytics tools)

4. Purpose of Processing

We process personal data for the following purposes:

• Responding to inquiries
• Providing consulting services
• Business communication
• Website analytics and improvement
• Marketing follow-ups where permitted by law

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), our legal bases include:

• Consent – when you submit a form
• Legitimate interest – for B2B communication, service delivery, and analytics

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and analyze our website. Details about cookie usage are provided in our Cookie Policy.

7. Third-Party Processors

We use trusted third parties to operate our website and services, including:

• HubSpot – CRM, forms, analytics
• Website hosting providers
• Analytics infrastructure providers as needed

These providers process data only according to our instructions.

8. International Data Transfers

Some of our service providers are located outside the European Economic Area, including the United States.
Where applicable, data transfers are protected using Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations.

10. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

Requests can be made by contacting us at the email address above, or submitting a Data Privacy Request.

11. California Privacy Rights

California residents have the right to request information about the personal data we collect and to request deletion of their data. We do not sell or share personal information for monetary value.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.