We use cookies

We use cookies to enhance your browsing experience, serve personalized content, and analyze our traffic. By clicking 'Accept All', you consent to our use of cookies.

Fresh products directly from producers

Privacy Policy

Last updated: 13 October 2026

This Privacy Policy explains how AroWild Oy (“we”, “our”, “us”) collects, uses, and protects personal data when you visit or interact with our website arcticdelice.fi and related services under the Arctic Delice brand.

1. Data Controller

AroWild Oy
Business ID: 3093261-8
Address: Eteläranta, 00130 Helsinki, Finland
Email: info(at)arcticdelice.fi

Arctic Delice is a registered trademark in Finland and protected under EU trademark law.

2. Data We Collect

We collect and process the following categories of personal and technical data:

  • Contact information: name, email, phone number, shipping address.
  • Payment information: handled securely via Stripe (we do not store card data ourselves).
  • Technical data: IP address, browser type, device, language, and region settings.
  • Cookies and usage data: used to determine user preferences (language, region, taxes).
  • Analytics data:
    • Google Analytics (user behavior and traffic metrics);
    • Internal analytics, including session recordings (user path and interaction replay);
    • Mux (for video playback analytics and delivery performance);
    • YouTube tracker (for embedded videos);
    • Mapbox (for map rendering and geolocation features).

3. Purposes of Processing

We process collected data for the following purposes:

  • To operate and improve our website and digital services.
  • To process and deliver customer orders.
  • To perform analytics and improve user experience.
  • To ensure proper payment and tax handling.
  • To send promotional emails and updates (only with user consent).
  • To comply with legal and regulatory obligations.

4. Legal Basis for Processing

We process personal data under the following legal grounds in accordance with the EU General Data Protection Regulation (GDPR):

  • Consent – for analytics, cookies, marketing, and promotional communications.
  • Contract – for order processing and delivery.
  • Legal obligation – for accounting, invoicing, and tax reporting.
  • Legitimate interest – for website operation, fraud prevention, and service improvement.

5. Payments and Third-Party Services

We use trusted third-party providers to deliver our services:

  • Stripe – for secure payment processing. Stripe independently stores and processes payment information in accordance with its own Privacy Policy. By completing a payment, you agree to Stripe’s terms.
  • Google Analytics – for statistical analysis and service improvement.
  • Mux – for managing video playback and performance metrics.
  • YouTube – for embedded video content tracking.
  • Mapbox – for interactive map functionality.

Each third-party service may collect and process personal data according to its own privacy policy and in compliance with GDPR or equivalent frameworks.

6. Data Retention

  • We retain customer data as long as necessary to provide services and fulfill legal obligations.
  • Inactive customer data (no orders or interactions) is automatically deleted after 5 years.
  • Session recordings and analytics data are kept for limited analytical periods (up to 24 months).
  • Technical server logs, which include IP addresses, are kept for 30 days. Request traces used to monitor performance contain no names, email addresses or IP addresses and are kept for 15 days.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember user preferences (language, location, taxes).
  • Analyze website traffic and performance.
  • Support embedded media and services.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect website functionality.

8. Marketing and Communications

By placing an order or submitting your contact details, you consent to receive occasional promotional and informational emails.
You can opt out at any time by contacting us at info(at)arcticdelice.fi or by following the unsubscribe instructions in any email.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access (to know what data we hold about you).
  • Right to rectification (to correct inaccurate data).
  • Right to erasure (“right to be forgotten”).
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw consent at any time.

To exercise any of these rights, please contact us at info(at)arcticdelice.fi or by mail at our business address.

You also have the right to lodge a complaint with your local data protection authority.
In Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutettu) — https://tietosuoja.fi

10. Data Security

Our website is protected with HTTPS and other standard security measures, including secure servers and controlled data access.
We take all reasonable precautions to protect personal information; however, no system is 100% secure, and we cannot guarantee absolute data security.

11. Data Transfers Outside the EU

Some of our service providers (e.g., Stripe, Google, Mux, YouTube) may process data outside the EU.
When such transfers occur, they are safeguarded using EU Standard Contractual Clauses (SCCs) or other recognized legal mechanisms ensuring adequate protection under GDPR.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The latest version will always be available on this page.

13. Global Blue Tax-Free Data Processing

For tax-free purchases, we collect certain personal data in advance to prepare the Global Blue form without requiring the courier to carry a payment terminal.
We request the following details: passport number, issuing country, and name as shown in the passport.

The courier may verify the original document or a copy during delivery, but no copies are taken or stored by the courier.

These data are stored securely for 6 months on our servers and then automatically deleted.
We retain them only to enable the transfer of information to Global Blue for tax refund processing.

Data processed by Global Blue are handled in accordance with their own Privacy Policy — we are not responsible for their data management practices.
All data stored by us are encrypted; however, despite our precautions, we cannot guarantee absolute security.

14. Arctic Delice Mobile App

This section applies when you use the Arctic Delice app for iPhone and iPad. It adds to the sections above and does not replace them.

Account and sign-in. You can create an account with your email address and password, or sign in with Apple or Google. When you use Sign in with Apple or Google, we receive a stable identifier from the provider, your name and your email address (for Apple this may be a private relay address). We keep the Apple sign-in token on our server only so that we can revoke it when you delete your account.

What we process in the app. Your account details, saved addresses, orders and order status, Membership (loyalty) status and points, your selected country, your notification token and notification preferences, and the in-app notifications we send you. Card payments and Apple Pay are processed by Stripe; card numbers do not reach our servers.

AI assistant chat. The chat assistant (Björn) uses third-party AI service providers, such as OpenAI or OpenRouter, which may route requests to the underlying model provider. Before you first use the chat, the app asks for your explicit consent. If you agree, the messages you type and the page you are viewing (product or collection, country and language) are sent to these providers to generate answers. Please do not enter sensitive information such as payment details or passwords. The chat is not linked to your account; if you ask to speak to a person, your messages are handled by our support team. You can withdraw your consent at any time under Account → Settings → Privacy Settings → AI Assistant Chat; after that no chat messages are sent. Legal basis: consent (GDPR Art. 6(1)(a)). Conversations handled only by the assistant are deleted automatically 30 days after the last message; conversations handled by our support team are deleted 12 months after the last message.

Optional analytics and diagnostics. When you first open the app we ask whether you agree to share anonymous usage statistics and error reports; nothing is collected before you answer. If you agree, we collect the screens you open, actions such as adding to the cart or completing an order (including the order number and order value), your selected country, app and operating system version, device type, language, a randomly generated installation identifier that is not linked to your account, and technical reports about crashes, freezes, slow screens and failed requests. We do not collect your name, email address, phone number, address, payment card data, or chat or search text. Your approximate location (country or region) is derived from your IP address when the data is received. This data is processed on our own servers and is not shared with third parties. You can change your choice at any time under Privacy Settings; after that no further data is collected and data not yet sent is discarded. Legal basis: consent. App analytics data is kept for up to 24 months and crash and error reports for up to 90 days.

Push notifications. Order and Membership updates are sent as notifications once you allow notifications in iOS. Promotional notifications are sent only if you choose “Allow All” in the app or switch on “Promotional Notifications” under Account → Settings → Push Notifications; you can switch them off there at any time. We store your device's notification token while you are signed in and remove it when you sign out.

Camera. The camera is used only if you choose to scan a payment card when adding it. We do not receive or store camera images.

Product reviews. Published reviews show the reviewer's name, country and review text. Reviews are checked by moderation and added by our team. If a review should not be published, write to us at info(at)arcticdelice.fi.

Deleting your account. In the app, go to Account → Settings → Privacy Settings → Delete Account. We then erase your profile, saved addresses, saved cards (including your Stripe customer record), links to Apple and Google sign-in (and revoke the Sign in with Apple token), notification tokens and in-app notifications and your server cart, and we remove your name from published reviews. Order and invoice records are kept for the period required by applicable accounting and tax law. Your Membership is closed in our loyalty system. After deletion you can use your email address to register again.

Last updated: 13 October 2026.

AroWild Oy
Eteläranta, 00130 Helsinki, Finland
Email: info(at)arcticdelice.fi
Business ID: 3093261-8