Last updated: 18 September 2026
Who we are
Lapland Base provides travel guides and information about Finnish Lapland.
The website is operated by Scott Sherwood, based in the United Kingdom. Scott Sherwood is the data controller responsible for personal information processed in connection with Lapland Base.
For questions about this policy or to exercise your privacy rights, please use our contact form.
Information we collect
Depending on how you use the website, we may collect:
- Your name, email address and information you provide when contacting us.
- Your email address, subscription preferences and consent records when you subscribe to our newsletter.
- Business and contact details submitted with featured-partner, advertising or other commercial enquiries.
- Technical information such as your IP address, browser, device, pages requested and the time of your visit.
- Information about website use collected through Google Analytics and cookies or similar technologies.
Please avoid sending sensitive personal information unless it is necessary for your enquiry.
How we use your information
Operating and protecting the website
We use technical information to deliver the website, investigate errors, prevent misuse and maintain security.
Our lawful basis is our legitimate interest in operating a reliable and secure website.
Lapland Base is hosted by WP Engine, which processes website data as part of providing hosting and related services.
Responding to enquiries
We use information submitted through our contact form to respond to your message and manage any follow-up correspondence.
Our lawful basis is our legitimate interest in answering enquiries and communicating with visitors.
Sending newsletters
We use your subscription details to send newsletters you have requested and manage your preferences. Our lawful basis is consent.
You can unsubscribe using the link in our newsletter emails or through our contact form.
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
Featured partners and business relationships
We use information submitted with partner and advertising enquiries to assess proposals, discuss arrangements and manage business relationships.
Our lawful basis is our legitimate interest in managing and developing Lapland Base’s business relationships. Where you personally enter into a contract with us, we may also process information to perform that contract or take steps you request before entering into it.
We process records needed for tax and other statutory requirements to comply with our legal obligations.
Submitting an enquiry does not automatically subscribe you to our newsletter. If a partnership involves publishing information identifying you, we will agree the relevant listing details with you.
Google Analytics
We use Google Analytics to understand how visitors find and use Lapland Base and to improve our content.
Depending on the settings and permissions in use, analytics may involve information about pages visited, interactions, approximate location, device and browser details, and online identifiers.
We rely on consent for optional analytics involving personal information. Where consent is required, analytics must not operate before you have provided it.
More information about Google’s processing is available in Google’s privacy policy.
Cookies and similar technologies
Cookies and similar technologies may be used to deliver website functions, remember preferences, measure usage and support advertising.
Strictly necessary technologies can be used without consent where they are essential to provide a service you request. Other technologies require consent unless a legal exemption applies.
You may refuse optional tracking and withdraw consent. Where cookie preference controls are available, use them to change your choices. You can also contact us about withdrawing consent.
Your browser allows you to block or delete cookies. Blocking necessary cookies may affect some website functions. Deleting cookies alone does not necessarily communicate your withdrawal of consent to a provider.
Embedded YouTube videos
Our articles include YouTube videos and webcam streams.
When embedded content loads or you interact with it, YouTube and Google may receive information such as your IP address, device details and video interactions. They may also use cookies or similar technologies. If you are signed into a Google account, activity may be associated with that account.
Tracking that requires consent must remain blocked until you consent; simply visiting an article is not consent to advertising tracking.
Google explains its use of information in its privacy policy.
Advertising
Where advertisements are displayed, advertising providers may process technical information and online identifiers to deliver advertisements, measure performance and prevent fraud.
Personalised advertising may involve building a profile of your interests using browsing activity. Where used, personalised advertising and associated tracking require your consent.
You can decline or withdraw consent to optional advertising tracking. The providers involved and their tracking purposes must be disclosed when consent is requested.
Who we share information with
Personal information may be processed by providers that support our website and communications, including:
- WP Engine, for hosting and related technical services.
- Google, for analytics and embedded YouTube content.
- Email and newsletter providers, for managing subscriptions and sending messages.
- Contact-form providers, for receiving and managing enquiries.
- Advertising providers, where advertising is used.
- Technical support, security and backup providers.
Some providers process information on our instructions. Others, including certain third-party content and advertising services, may also act as independent controllers for their own processing.
We may disclose information to professional advisers or public authorities where necessary to meet legal obligations or establish, exercise or defend legal claims.
International transfers
Our service providers may process personal information outside the United Kingdom, including in countries with different data protection laws.
Where international transfer restrictions apply, transfers require an appropriate legal mechanism. This may be an applicable adequacy arrangement or approved contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum to the European Commission’s Standard Contractual Clauses.
WP Engine describes its contractual arrangements in its Data Privacy Addendum.
You can contact us to request details of the destinations and safeguards relevant to your information, including how to obtain a copy of applicable safeguards.
How long we keep information
We retain personal information only for as long as needed for its purpose. The period depends on the type of information, the relationship involved and applicable legal requirements.
We use the following criteria:
- Contact enquiries: The time needed to respond, complete follow-up discussions and resolve related issues.
- Partner applications: The time needed to assess the proposal and conclude related discussions.
- Business relationships: The duration of the relationship and any further period needed for contractual, tax or legal obligations.
- Newsletter records: While your subscription remains active. Following withdrawal, limited consent and suppression records may be retained to demonstrate compliance and prevent unwanted emails.
- Analytics: The retention settings applied to the analytics service and the period needed to evaluate website use.
- Security logs: The period reasonably needed to identify, investigate and resolve technical or security incidents.
- Backups: The applicable backup rotation period. Deleted information may remain in restricted backups until those copies expire.
Information may be retained for longer where necessary to comply with a legal obligation or handle a dispute. When no longer needed, it should be deleted or anonymised.
Comments
Visitor comments are currently disabled.
If comments are introduced, we will update this policy to explain the information collected, how moderation and spam detection work, and the relevant retention arrangements.
Your rights
Depending on the circumstances and applicable law, you may have the right to:
- Access your personal information.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Restrict its use.
- Object to processing based on legitimate interests.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
You can object to the use of your information for direct marketing at any time.
Some rights are subject to exceptions. For example, we may need to retain information to meet a legal obligation.
To make a request, use our contact form. We may ask for information reasonably necessary to verify your identity. We normally respond within one month, subject to the applicable rules on clarification and extensions.
Making a complaint
Please contact us if you have concerns about how your information is handled.
You can also complain to the UK Information Commissioner’s Office through its complaints service.
Where the EU GDPR applies, you may complain to the relevant supervisory authority in the European Economic Area.
Providing information is optional
You do not need to subscribe or submit an enquiry to read our articles.
If you request a service, certain information is needed to provide it. For example, we need an email address to send a newsletter and suitable contact details to respond to an enquiry.
Changes to this policy
We may update this policy as our services and data-processing arrangements change. The latest version will appear here with an updated date.
Where required, we will notify you of significant changes or request fresh consent.