Privacy Policy

Last updated: July 2026

At Northfolk Oy, we respect your privacy and process personal data only when necessary to provide our services, manage bookings, communicate with customers, improve our website and meet legal obligations.

Website Hosting

This website is hosted by Squarespace. Squarespace collects personal information when you visit this website, including:

  • Information about your browser, network and device

  • Web pages visited before coming to this website

  • Pages viewed while on this website

  • Your IP address

Squarespace uses this data to provide, protect and improve its platform and services.

You can read more about Squarespace’s privacy practices in Squarespace’s own privacy policy. https://www.squarespace.com/privacy

Analytics & Cookies

This website uses cookies and similar technologies to improve the browsing experience and analyze website traffic.

We may collect information such as:

  • Pages visited

  • Clicks and interactions

  • Device and browser information

  • IP address

  • Timestamps

Non-essential analytics and performance cookies are used only with your consent where required.

Booking & Contact Forms

When you submit information through our booking or contact forms, we collect personal information necessary to respond to your inquiry or manage your booking.

This may include:

  • Name

  • Email address

  • Phone number

  • Booking details

  • Pick-up information

  • Dietary restrictions or special requests

  • Number of participants

  • Activity date and time

  • Accommodation or meeting point details

  • Relevant health, mobility or safety information provided by the customer

We use this information to manage bookings, provide our services, communicate with you, arrange pick-ups, handle customer support and meet legal or accounting obligations.

Booking System

Our activity bookings may be managed through third-party booking systems such as Bókun.

When you make a booking, the booking system may process personal data such as your name, contact details, booking details, participant information, pick-up information and payment-related information.

These third-party services process data according to their own privacy policies and security practices.

Payments

Payments may be processed securely through third-party payment providers such as Stripe, Squarespace Payments, Bókun or other payment partners.

Payment providers may collect:

  • Billing information

  • Payment details

  • Name

  • Email address

  • IP address

We do not store full payment card information on our servers.

You can read Stripe’s privacy policy here:
Stripe Privacy Policy

Emails & Communication

We may contact you regarding:

  • Booking confirmations

  • Activity details

  • Schedule changes

  • Customer support inquiries

  • Review requests after the activity

If you subscribe to marketing emails, you may unsubscribe at any time using the unsubscribe link included in the email.

Embedded Content & Third-Party Services

Some pages on this website may include embedded content or third-party services such as:

  • Google Maps

  • Instagram

  • Vimeo or YouTube videos

  • Social media sharing tools

  • Booking widgets

These services may collect information about your interaction with the content according to their own privacy policies.

Interacting with embedded content may allow these third-party services to collect data according to their own privacy policies.

Data Storage & Security

We take reasonable steps to protect personal data from unauthorized access, loss, misuse or disclosure.

We store personal data only for as long as necessary to provide our services, manage bookings, handle customer communication and comply with legal, tax and accounting obligations.

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

  • performance of a contract, such as managing and delivering a booked activity

  • consent, such as for non-essential cookies or marketing emails

  • legal obligations, such as accounting and tax requirements

  • legitimate interest, such as customer service, website security and business communication

Your Rights

You may have the right to:

  • request access to your personal data

  • request correction of inaccurate data

  • request deletion of your data where applicable

  • object to or restrict certain processing

  • withdraw consent, for example for marketing emails or non-essential cookies

  • request information about how your personal data is processed

  • lodge a complaint with a data protection authority

To make a request, please contact us at: hello@northfolk.fi

Contact

If you have any questions regarding this Privacy Policy or your personal data, you can contact us at:

Northfolk Oy
Oulu, Finland
hello@northfolk.fi