Privacy policy

How Arctic Organs collects, uses and protects your personal information, who we share it with, and the control you have over it. Last updated 14 October 2026.

Who we are

Arctic Organs sells the Reindeer Organ Complex direct to customers worldwide through our website at arcticorgans.com. We are the data controller for the personal information described in this policy.

If you want anything on this page explained, changed or deleted, email hello@arcticorgans.com and a real person will answer.

The short version

• We collect what we need to take your order, bill your subscription, ship your jars and answer your emails. Nothing more.
• We never see or store your full card number. Our payment processors handle that.
• We do not sell your personal information.
• You can unsubscribe from our emails at any time, in one click.
• You can ask us for a copy of your data, or ask us to delete it, and we will act on it.

What we collect

Information you give us

• Identity and contact details. Your name, email address, delivery address, billing address and, if you choose to give it, your phone number.
• Order and subscription details. What you ordered, when, your delivery preferences, your renewal dates, your order history and any discount codes you used.
• Payment details. The card or wallet you pay with, handled by our payment processor. We receive confirmation of payment, the card type and the last four digits, never the full card number or the security code.
• Messages. Anything you send us by email or through our contact page, including the content of your message and the address you sent it from.
• Marketing preferences. Whether you have asked to hear from us by email, and when you asked.
• Reviews and photographs. Anything you choose to submit publicly, such as a product review.

Information we collect automatically

• Your IP address, rough location derived from it, device type, operating system and browser.
• The pages you viewed on our site, how you arrived, what you clicked, what you added to your basket and whether you completed checkout.
• Cookie and similar identifiers set by us and by the services listed further down this page.

We do not ask for and do not want your medical records, diagnoses, prescriptions or any other health information. Please do not send it to us. If you tell us something about your health in an email, we use it only to answer that email.

Why we use your information

• To fulfil your order and your subscription. Taking payment, picking and packing, shipping, handling renewals every four weeks, and sending order, dispatch and renewal notices. See our shipping policy for timings.
• To provide customer support. Answering questions, tracing parcels, arranging replacements and handling returns and refunds under our refund policy.
• To manage your account and subscription. Keeping your delivery address, renewal date and payment method current so your next jar arrives on time.
• To send marketing emails, where you have asked for them or where you are an existing customer and we are telling you about the same sort of product.
• To improve the site and our products. Understanding which pages work, which do not, and where orders fall over.
• To measure and target advertising, where you have consented to advertising cookies.
• To prevent fraud and abuse, including screening suspicious orders and chargebacks.
• To meet our legal duties, such as keeping tax and accounting records and responding to lawful requests.

Where the UK GDPR or the EU GDPR applies, our legal bases are: performance of our contract with you, for orders, subscriptions and support; our legitimate interests, for site improvement, fraud prevention, business records and marketing to existing customers; your consent, for non-essential cookies and for marketing emails where consent is required; and legal obligation, for tax and compliance records. Where we rely on consent, you can withdraw it at any time.

Payment information

Payments on arcticorgans.com are processed by our payment providers, including Shopify Payments, Shop Pay, PayPal and Apple Pay or Google Pay where you choose them. Card data is entered into their systems and is encrypted in transit.

Because this is a subscription delivered every four weeks, your payment provider stores a secure token so your renewal can be taken. That token sits with the provider, not with us. We cannot see or export your card number.

Our payment providers process your data under their own privacy policies and handle it to the standards of the PCI Data Security Standard.

Cookies, analytics and advertising

We use cookies and similar technologies for three things.

• Essential cookies. These keep your basket, your session and the checkout working. The site cannot function without them, so they are always on.
• Analytics cookies. These tell us how many people visited, which pages they read and where they dropped off. We use Shopify's own analytics and Google Analytics.
• Advertising cookies and pixels. These let us measure which adverts bring customers and show our adverts to relevant people. We use the Meta pixel, the TikTok pixel and Google Ads tags.

Where the law requires consent, you choose your cookie preferences in the banner when you first arrive, and you can change them at any time through the cookie settings link in our footer. You can also block or delete cookies in your browser settings, though blocking essential cookies will break the checkout.

Some browsers send a Global Privacy Control or Do Not Track signal. We honour Global Privacy Control signals where we are required to.

Marketing emails and how to stop them

If you ask to hear from us, or you buy from us, we may email you about the Reindeer Organ Complex, how to get the most from it, and offers. We send these through our email platform, Klaviyo.

Every marketing email has an unsubscribe link at the bottom. One click and you are out, and we do not add you back. You can also email hello@arcticorgans.com with the word unsubscribe and we will do it for you.

Unsubscribing stops marketing only. We will still send the emails you need, such as order confirmations, dispatch notices, renewal reminders and replies to your questions, because those are part of your order and your subscription.

Who we share your information with

We share only what each party needs to do its job. We do not sell your personal information and we do not rent out our customer list.

• Our store platform. Shopify hosts arcticorgans.com and stores your order and account records.
• Payment processors. Shopify Payments, Shop Pay, PayPal and the wallet providers, to take payment and manage your renewals.
• Our subscription provider, to schedule, process and record your four weekly deliveries.
• Shipping carriers and our fulfilment partner. Your name, delivery address, phone number and email, so your parcel can be labelled, shipped, tracked and delivered. International parcels may also require your details on a customs declaration.
• Our email platform, Klaviyo, to send transactional and marketing emails.
• Analytics and advertising providers, Google, Meta and TikTok, where you have consented to those cookies.
• Fraud prevention and risk tools, to screen orders and reduce chargebacks.
• Professional advisers, such as our accountants, auditors and lawyers, where they need it to advise us.
• Authorities, where we are legally required to disclose information, or where we need to establish or defend legal claims.
• A buyer, if the business is ever sold or reorganised. Your information would pass to the new owner under the terms of this policy.

Every supplier we use is bound by contract to protect your information and to use it only on our instructions.

International transfers

We ship worldwide and the services we rely on are based in several countries, including the United Kingdom, the European Economic Area and the United States. That means your personal information may be transferred to, stored in and processed in a country outside the one you live in.

When information leaves the UK or the EEA, we rely on one of the following safeguards: the country has been found to provide an adequate level of protection, or the transfer is covered by Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism. Where it applies, we also rely on our providers' certification under the EU and UK Data Privacy Framework.

If you want to know which safeguard applies to a particular provider, email hello@arcticorgans.com and we will tell you.

How long we keep your information

• Order, subscription and payment records. Seven years from the end of the relevant tax year, because tax and accounting law requires it.
• Account and contact details. For as long as your subscription is active, and then up to three years after your last order, so we can help with questions about past deliveries.
• Customer support emails. Up to three years from the end of the conversation.
• Marketing records. Until you unsubscribe, and then a minimal record of the unsubscribe itself so we do not email you again by mistake.
• Analytics and advertising data. Usually between fourteen and twenty six months, depending on the provider's retention settings.

When a retention period ends we delete the information or anonymise it so it can no longer identify you.

Your rights

Depending on where you live you have some or all of the following rights, and we honour them for every customer worldwide wherever we practically can.

• Access. Ask for a copy of the personal information we hold about you.
• Correction. Ask us to fix anything inaccurate or incomplete, such as a misspelled delivery address.
• Deletion. Ask us to erase your personal information. We will do it unless we are legally required to keep something, such as the tax record of a completed order.
• Portability. Ask for your information in a common machine readable format, or ask us to send it to another provider.
• Restriction. Ask us to pause our use of your information while a dispute about it is sorted out.
• Objection. Object to processing we carry out on the basis of legitimate interests, including profiling for marketing.
• Withdraw consent. Change your cookie choices or unsubscribe from marketing at any time.
• No automated decisions. We do not make decisions about you by automated means alone that have a legal or similarly significant effect.

How to use your rights

Email hello@arcticorgans.com from the address you ordered with, and tell us what you want. We may ask a question or two to confirm it is really you, because we are not handing your data to somebody else. We will respond within one month. If the request is complicated we may take up to two further months, and we will tell you if that happens. Using your rights is free.

If you are in the UK or the EEA

Your rights come from the UK GDPR and the EU GDPR. If you are not happy with how we have handled your information, you can complain to your national data protection authority. In the United Kingdom that is the Information Commissioner's Office. We would rather you came to us first so we can put it right.

If you are in California

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect and who we disclose it to, the right to have it deleted, the right to correct it, and the right to opt out of the sale or sharing of personal information for cross context behavioural advertising. You also have the right not to be treated differently for using these rights, and we will not give you a worse price or service for doing so.

We do not sell personal information for money. Our use of advertising cookies may count as sharing under California law. To opt out, set your cookie preferences in our footer, or email hello@arcticorgans.com. You may use an authorised agent to make a request on your behalf, and we will ask for proof of their authority.

If you are elsewhere

If your country gives you privacy rights we have not listed, email us and we will apply them.

Children's privacy

Arctic Organs is for adults. Our site and our product are not intended for anyone under eighteen, we do not sell to under eighteens, and we do not knowingly collect information from children. If you believe a child has given us their information, email hello@arcticorgans.com and we will delete it.

How we protect your information

The whole site runs over encrypted connections. Access to customer records is limited to the people who need it, protected by strong passwords and two factor authentication. Card data never touches our systems. We review who has access and remove it when it is no longer needed.

No system is perfect, so we cannot promise absolute security. If a breach ever put your rights at risk, we would notify you and the relevant authority as the law requires.

Links to other sites

Our site and our emails sometimes link to other websites. Once you leave arcticorgans.com, their privacy policy applies, not ours. We are not responsible for how they handle your information.

Changes to this policy

We will update this page when our practices or the law change. The date at the top always shows the current version. If a change materially affects your rights, we will tell active customers by email before it takes effect. Carrying on using the site after an update means you accept the revised policy.

Contact us

Email hello@arcticorgans.com for anything to do with your data, your order or your subscription. One inbox, answered by us, usually within one working day.

You may also want our contact page, track my order, frequently asked questions, shipping policy, refund policy and terms of service.