Privacy Policy

When you buy a digital product, you enter your name, email address, card details and billing information directly on Stripe's hosted checkout pages. Card details are not received or stored by the Get Arctic Ready website.

After a completed purchase, the website receives and stores:

• customer email address
• Stripe Checkout Session ID
• Stripe Payment Intent ID
• payment status
• product purchased
• purchase and system timestamps

The website also creates a random download token linked to the purchase. The token is used only to provide access to the purchased digital files.

Hosting infrastructure may process technical information such as IP address, browser information, the requested page, the time of the request and error information for security, delivery and troubleshooting purposes.

If you contact lets@getarcticready.com, the information included in your email is processed in order to answer your enquiry.

Answers given in the readiness quiz exist only temporarily in your browser's memory. They are not saved or transmitted.

• Processing the order, confirming payment and delivering the purchased product: necessary to perform the purchase contract, GDPR Article 6(1)(b).
• Responding to purchase-related customer support: performance of the contract and, where applicable, legitimate interests under Article 6(1)(f).
• Retaining transaction documentation required by Norwegian bookkeeping and tax rules: legal obligation, Article 6(1)(c).
• Website security, fraud prevention, server operation and technical error diagnosis: legitimate interests in operating and protecting the service, Article 6(1)(f).

Personal data is not used for advertising, profiling, automated decision-making, newsletters or unrelated marketing.

Payments are processed on Stripe's hosted checkout service. Stripe processes payment and fraud-prevention information in accordance with its own privacy documentation and applicable legal obligations.

Stripe's privacy information: stripe.com/privacy

• Stripe — payment processing and payment verification
• Lovable Cloud — website database, private file storage, server functions and encrypted configuration
• Cloudflare infrastructure — website delivery, security and technical request processing
• Lovable error reporting — limited crash and diagnostic information

Instagram and YouTube are only external links. No social-media content is embedded in the website, and no visitor information is intentionally sent to those services before you follow a link.

Providers may process information in countries outside Norway and the EEA. Where required, applicable transfer safeguards are used.

• Download access is valid for 30 days after purchase.
• The associated download access record is automatically deleted after its expiry time has passed.
• Purchase records are retained for five full years after the end of the calendar year in which the purchase occurred, to meet bookkeeping and transaction-documentation obligations.
• Purchase records are automatically deleted after that period.
• Support emails are retained only for as long as reasonably necessary to answer the enquiry, handle the purchase or establish, exercise or defend legal claims.
• Technical logs and diagnostic information are retained according to the relevant hosting provider's operational and security retention settings, and only for as long as necessary for those purposes.

The current Get Arctic Ready website does not intentionally set analytics, advertising or marketing cookies, and does not use analytics pixels.

No cookie-consent banner is currently displayed, because the website does not use non-essential cookies.

Stripe may use cookies and similar technologies on its own checkout pages under Stripe's own policies. Hosting infrastructure may also set strictly necessary technical cookies for delivery and security.

• Purchase tables are not publicly accessible.
• Access is restricted to protected server-side functions.
• Digital products are kept in private storage.
• Download links use random, expiring tokens.
• Payment card details are handled by Stripe and are not stored by Get Arctic Ready.

No method of transmission or storage can be guaranteed to be completely secure, but these measures are intended to protect your information appropriately.

Subject to applicable conditions, you may request:

• access
• correction
• deletion
• restriction
• objection
• data portability

Information that we are required by law to keep cannot be deleted until the mandatory retention period has ended.

Requests can be sent to lets@getarcticready.com.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority: datatilsynet.no

Some products are designed for families and children, but purchases are intended to be completed by an adult. The website does not knowingly request or collect personal information directly from children.

This policy may be updated if the website, our services or legal requirements change. The current revision date is shown at the top of this page.