Customer Privacy Notice

This Privacy Notice explains how Arctic Spas processes personal data across its website network, including websites, microsites, landing pages, and associated domains operated by Arctic Spas, its related companies, and authorised partners.

This version of the Privacy Notice applies primarily to customers and website users located in the European Union.

We are committed to protecting the privacy and security of your personal information. This notice explains how we collect, use, store and share personal data.

This notice does not form part of any contract and may be updated from time to time.

For the purposes of applicable data protection law, we act as a data controller in relation to the personal information you provide to us.

Categories of Personal Data We Process

We may collect, store and use the following categories of personal information:

• Your full name
• Your address
• Your contact details, including telephone numbers and email addresses
• Your employment status, salary and homeowner status

Sources of Personal Data

We collect personal information relating to you directly from you.

Lawful Bases for Processing

We process your personal information where one or more of the following lawful bases applies:

• Processing is necessary for the performance of a contract with you
• Processing is necessary for our legitimate interests or those of a third party, provided your rights and freedoms do not override those interests
• Processing is necessary to comply with legal or regulatory obligations
• Processing is based on your consent, where consent is required

Purposes of Processing

We may process your personal data for the following purposes:

• To provide products and services that you have ordered
• To provide quotations and information about available payment methods when you have expressed interest in our products or services
• To send marketing communications, where permitted by law
• To process finance applications where requested by you

Special Categories of Personal Data

In limited circumstances, you may provide us with special category data, such as information about medical conditions, where necessary for us to meet your requirements when providing goods or services.

Where this occurs, we will only process such information where you have given explicit consent or where another lawful condition applies under data protection law.

Cookies

Arctic Spas websites may use cookies and similar technologies where appropriate to improve website performance, understand usage and support relevant marketing activity.

Cookies are stored on your device and generally cannot identify you personally on their own.

Who Has Access to Your Data

We may share your personal information with third parties where required by law, where necessary to perform a contract with you, or where we otherwise have a lawful basis for doing so.

Recipients may include:

• Third-party service providers
• Related business entities
• Regulators or authorities
• Finance providers or lenders, where you request finance products

Where we share personal data with third parties, we require them to respect the security of your data and process it in accordance with applicable law.

Security of Your Data

We have implemented appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, disclosure, alteration or destruction.

Access to personal information is limited to employees, agents, contractors and other parties who have a legitimate business need to know.

We also maintain procedures for dealing with suspected personal data breaches and will notify affected individuals and regulators where required by law.

Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or contractual obligations.

When determining retention periods, we consider the nature, sensitivity and volume of the personal data, the risk of harm from unauthorised use or disclosure, the purposes of processing, and any legal requirements.

Your Rights

Under applicable data protection law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete personal data
• Request erasure of your personal data in certain circumstances
• Object to processing based on legitimate interests
• Request restriction of processing in certain circumstances
• Request data portability where applicable
• Withdraw consent where processing is based on consent

Automated Decision-Making and Profiling

We do not carry out automated decision-making or profiling in relation to your personal information.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be made available through this legal document centre.

Contact

If you have any questions regarding this Privacy Notice or wish to exercise your rights, please contact us using the appropriate contact details provided on the relevant Arctic Spas website.