Lappitude Oy (Business ID 3526662-6, Pirkkakatu 2 D 5, 96200 Rovaniemi, Finland) is the controller of the personal data described here. This policy explains what we collect when you book with us, send an enquiry or visit lappitude.fi, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR).

For any privacy question, email contact@lappitude.fi.

• When you book an experience: your name, email address, phone number, pickup location, date and tour, number of guests, children's ages (to check minimum ages) and anything you write in the special requests field.
• When you send an enquiry: your name, contact details, travel dates, group size, preferences and your message.
• Payments: online payments are handled by our payment provider. We see the payment status and amount, but never your full card number.
• Partner referrals: if you arrive through a partner link, we store the partner code with your booking or enquiry.
• Website use: anonymous progress through our booking forms, and, only if you accept cookies, analytics and advertising data. See our Cookie Policy.

If you tell us about a health condition, allergy or diet, we use it only to keep you safe and cater for you. You decide whether to share it.

• To deliver your booking (confirmations, pickup, guiding, catering and changes): performance of our contract with you.
• To answer your enquiry and prepare a quote: steps taken at your request before a contract.
• Accounting and tax: our legal obligations.
• Safety, fraud prevention, crediting partners and improving our booking process: our legitimate interests.
• Analytics and ad measurement: your consent, which you can withdraw at any time.

We never sell your data. We share it only as needed with:

• Our guides and the local partners who deliver part of your booking, such as safari or accommodation providers
• Our payment provider and the IT services that run our website, bookings and email
• Google and Meta, for analytics and ad measurement, only if you accept cookies
• Our accountants, and authorities when the law requires it

If data is handled outside the EU, it is protected by safeguards approved under the GDPR.

• Bookings and payment records: as long as the Finnish Accounting Act requires, currently 6 years after the end of the financial year of the booking.
• Enquiries that do not lead to a booking: up to 2 years, so we can help if you get back in touch.
• Cookie choices and referral codes stored in your browser: see our Cookie Policy.

After that, we delete or anonymise your data.

You have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted, where we no longer need to keep it
• Restrict or object to how we use it
• Receive your data in a portable format
• Withdraw your consent at any time, for example through Cookie settings at the bottom of every page

To use any of these rights, email contact@lappitude.fi. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the data protection authority in your home country.

We protect your data with encrypted connections and give access only to the people who need it.

We may update this policy when our services or the law change. The latest version is always on this page.

Lappitude Oy
Pirkkakatu 2 D 5, 96200 Rovaniemi, Finland
Email: contact@lappitude.fi
Phone: +358 40 359 1660