Privacy policy
What we collect, why, and how to control it.
1. Who we are
FoxAurora (the website foxaurora.com and the FoxAurora app) is provided by Host It Oy (trading as Book Lapland), business ID 3363423-7, Rovakatu 29 lh. 2, 96200 Rovaniemi, Finland (“we”). We are the data controller for the personal data described here. Contact: sales@booklapland.fi, +358 40 724 0600.
2. What we collect and why
Tour bookings
When you book a tour we collect your name, email address, phone number, pickup address, the tour, date and number of guests. We use this to perform the booking contract (GDPR Art. 6(1)(b)): to confirm your booking, organise pickup, contact you about the tour and send your aurora photos. Bookings are stored in our booking system Bókun and kept as long as required by Finnish accounting law (currently 6 years for accounting records).
Payments
Tour bookings and payments are made in our booking system Bókun (Bókun ehf.), which processes card and wallet payments through its payment service provider. We never see or store your full card number. The booking calendar is loaded from widgets.bokun.io and may set cookies that are necessary for the booking and payment to work.
Aurora alerts
If you turn on aurora alerts we store a device push token, the spot you chose and your alert level. This is based on your consent (Art. 6(1)(a)). Turning alerts off in the app deletes this data from our server immediately. Push messages are delivered via Google Firebase Cloud Messaging and, on iPhone, Apple Push Notification service.
Location
“Use my location” finds the nearest aurora spot on your device. Your coordinates are not sent to or stored on our server – only the chosen spot is saved if you turn on alerts.
Things stored on your device
The app remembers your chosen spot, alert settings, your booking references (for “My trips”) and your choice to load live cameras and weather maps. This is stored only on your device and can be cleared at any time.
3. Third-party content
Live cameras and weather maps come from Windy.com, YouTube (privacy-enhanced mode) and Roundshot (City of Rovaniemi). They are only loaded after you choose to load them, because these services may set their own cookies. Space weather data comes from NOAA, weather forecasts from Open-Meteo and map tiles from Esri; these are loaded without personal data beyond your IP address.
4. Who we share data with
Our processors: Bókun (booking system and payments), Nordic Host (website hosting and database, servers in Finland), Google Firebase (push notifications in the app) and Apple (push notifications on iPhone). Some providers may process data outside the EU/EEA; in that case transfers rely on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework. We do not sell your data and we do not use advertising trackers.
5. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Contact us at sales@booklapland.fi. You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).