Privacy
Privacy policy
What we collect when you book or contact us, why, who else sees it, and how we look after it. Updated 9 October 2026.
Who we are
Luxury Basecamp Levi is a privately owned holiday apartment at Hissitie 10 C 2, 99130 Sirkka, Finland. The owner is the controller of your personal data, for this website (luxurybasecamplevi.fi) and for the direct booking service (book.luxurybasecamplevi.fi). Questions about your data go to [email protected].
What we collect
- When you book: your name, email address, phone number, country, the dates of your stay, the number of guests and anything you write to us in the booking.
- When you pay: card payments are handled by Stripe. We see the amount, the payment status and the last four digits and brand of the card — never the full card number.
- When you contact us: whatever you send by email or WhatsApp, and your address or number.
- When you browse: this website sets no cookies, runs no analytics and loads no third-party scripts. Our hosting provider keeps short-lived technical logs (such as IP address and browser type) for security.
Why we use it
- To take and confirm your booking, collect payment, send you arrival instructions and the door code, and help you during your stay — this is needed to carry out our agreement with you.
- To keep accounting records, as Finnish law requires.
- To prevent fraud and keep the site and booking service secure — our legitimate interest.
We don't sell your data, we don't send marketing, and we don't make automated decisions about you.
Who else sees it
Only the services we need to run the booking, each bound to protect your data:
- Stripe — card payments and fraud prevention
- Cloudflare — website hosting and email routing
- Railway — hosting of the booking service
- Our email provider — booking confirmations and messages
- WhatsApp (Meta) — only if you choose to message us there
- Our cleaning staff — your arrival and departure dates, never your contact or payment details
- Our accountant and the authorities — where the law requires it
Some of these companies process data outside the EU, mainly in the United States. Those transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
If you booked through Airbnb or Booking.com, that platform's own privacy policy applies to the data you gave them.
How long we keep it
Booking and contact details are kept for as long as the booking needs them and then for up to two years, so we can answer questions about a past stay. Accounting records, including payment details, are kept as long as Finnish accounting law requires — generally six years from the end of the year in which the booking was paid. After that the data is deleted.
How we protect it
Everything travels over encrypted (HTTPS) connections. Card details go straight to Stripe and never pass through or stay on our servers. Access to booking data is limited to the owner and protected by strong passwords and two-factor authentication where the service offers it.
Your rights
You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to its use, or receive it in a portable format. Email [email protected] and we'll answer within a month. Some records we must keep for accounting even if you ask us to delete them.
If you think we've handled your data wrongly, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Changes
If this policy changes, the new version is published on this page with its date.