Draft — to be checked by a Finnish advisor before launch.
Who we are
The data controller is Nordic Lights Adventures, business ID available on request, Rovaniemi, Finnish Lapland. Contact: contact@nordiclightsadventures.com.
What we collect
- Booking details you give us (name, email, phone, pickup address, group size, special needs).
- Messages you send through our contact form.
- Payment information is handled by our booking and payment providers; we do not see or store card numbers.
Why we use it
To deliver your tour and contact you about it (contract), to answer your questions (legitimate interest), and to meet accounting obligations (legal obligation).
Photo souvenirs
If you order a photo mug or magnet, we keep the photo you send us only to print your order. We delete it 30 days after delivery, and never use it for anything else (for example marketing) without asking you first.
Who we share it with
Bokun (booking system), our payment provider, our email provider, and — if you booked through them — the travel website you used. We never sell your data.
How long we keep it
Booking and accounting records as long as Finnish accounting law requires; contact-form messages for up to 2 years.
Your rights
You can ask to see, correct or delete your data, or object to its use, by emailing contact@nordiclightsadventures.com. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).