Privacy Policy

This privacy policy explains how Laatukoru Oy processes the personal data of its customers and of the users of its online store and retail stores in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

Laatukoru Oy (Business ID 0836992-9)
Hämeenkatu 3, 05800 Hyvinkää, Finland

Laatukoru Oy is part of the Keskisen Kello Oy group.

2. Contact details

Data protection matters: Henri Silvan, henri.silvan@laatukoru.fi

Customer service: by email at laatukoru.verkkokauppa@laatukoru.fi or by phone at +358 400 110045 on weekdays from 9 am to 4 pm (Finnish time).

3. Why we process personal data

• Processing orders, payments, deliveries, returns and customer service. Legal basis: contract.
• Maintaining your customer account. Legal basis: contract.
• In-store transactions, such as orders, servicing and warranty matters. Legal basis: contract.
• Accounting and obligations related to consumer protection and product liability. Legal basis: legal obligation.
• Financial reporting and statistics for the business. Legal basis: our legitimate interest in monitoring and managing the company's finances.
• Developing the online store and maintaining information security. Legal basis: legitimate interest.
• Newsletters and email marketing. Legal basis: consent, or an existing customer relationship when we market our own similar products. You can opt out of marketing at any time using the link at the end of each message.
• Website analytics and ad targeting using cookies. Legal basis: consent.

You may object to processing based on legitimate interest (see section 10). We do not make decisions based solely on automated processing that would have legal effects concerning you.

4. What data we process

• Basic details: name, email address, phone number, billing and shipping address
• Order details: products purchased, prices, order and delivery history, returns and discount codes
• Payment details: payment method and time of payment. We do not process payment card numbers; these are handled by the payment service provider.
• Customer account details, such as username and customer number
• Marketing consents and opt-outs
• Customer service messages and details of servicing and warranty matters
• Website usage data, such as IP address, browser and device information, and cookie data in accordance with your consent

5. Where we get the data

We receive data directly from you when you shop in our online store or in one of our stores, subscribe to our newsletter or contact customer service. We collect website usage data with cookies in accordance with your consent. Payment service providers inform us whether a payment was successful.

6. Who we share data with

We do not sell personal data. We use the following service providers, who process data on our behalf and according to our instructions unless otherwise stated:

• Shopify – e-commerce platform
• Tehden Oy – enterprise resource planning system
• Keskisen Kello Oy (group company) – IT and reporting services. The data is stored in Google Cloud within the EU.
• Payment service providers – payment processing:
  • Paytrail Oyj – online bank payments
  • Shopify Payments – card payments (Visa, Mastercard, American Express, Maestro, UnionPay), Shop Pay, Apple Pay, Google Pay, Klarna and local payment methods such as MobilePay (Finland, Denmark), Bancontact (Belgium), iDEAL | Wero (Netherlands), Satispay (Italy), EPS (Austria), Przelewy24 and BLIK (Poland), MB WAY and Multibanco (Portugal), Bizum (Spain), Swish (Sweden), TWINT (Switzerland), Alipay and WeChat Pay. Payments are processed by Shopify's payment processors Stripe, PayPal and Adyen.
  • PayPal
  The providers of Klarna, PayPal, Shop Pay, Apple Pay and Google Pay, as well as the providers of local payment methods, also process data as independent controllers under their own terms.
• Customer service system provider – handling customer service messages and chat
• Shipping carriers – order delivery
• Klaviyo – newsletters and email marketing
• Google (Google Analytics, Google Ads) – website analytics and advertising in accordance with your consent
• Meta (Facebook, Instagram) – ad targeting and measurement using the Meta Pixel in accordance with your consent. Meta is our joint controller with respect to the collection and transfer of the data.

We may disclose data to authorities where required by law.

7. Transfers outside the EU and EEA

We primarily process personal data within the EU and EEA. Some of our service providers and their subcontractors, such as Shopify, Google, Meta, Klaviyo, payment processors (e.g. Stripe and PayPal) and the subcontractors of our customer service system, may also process data outside the EU and EEA, for example in the United States or Canada. In such cases, the transfer is based on an adequacy decision by the European Commission (for example the EU–U.S. Data Privacy Framework) or on standard contractual clauses approved by the Commission. If you pay with Alipay or WeChat Pay, the payment service provider may also process data in China under its own terms. Our data stored in Google Cloud is located in the EU.

8. How long we keep data

• Customer account: for as long as you are an active customer. Activity means a purchase, logging in to your customer account, clicking a link in our newsletter, or browsing the online store as an identified customer (browsing counts only if you have accepted marketing cookies). If you have not been active for 48 months, we delete or anonymise your data.
• Purchase and order data: for the period required by the Finnish Accounting Act.
• Customer service, complaint and warranty data: for as long as related claims can be made under the Finnish Act on the Statute of Limitations.
• Marketing consents: until you withdraw your consent. We retain marketing opt-outs so that we can comply with them.
• Cookies: for the period stated in the cookie settings.

After the retention period, the data is deleted or anonymised.

9. Data security

We protect personal data with appropriate technical and organisational measures. The data is stored encrypted, and access is restricted to designated persons who need the data for their work. We use two-factor authentication and regularly review access rights. We have data processing agreements in place with our service providers.

10. Your rights

You have the right to:

• access the data we process about you
• request the rectification of inaccurate data
• request the erasure of your data, unless we are legally required to retain it
• restrict the processing of your data
• object to processing based on legitimate interest and to direct marketing
• transfer the data you have provided from one system to another (data portability)
• withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Please send your request to the data protection contact person named in section 2. We will respond within one month.

If you believe that we are processing your data unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

11. Cookies

We use strictly necessary cookies for the online store to function. We use analytics and marketing cookies, such as Google and Meta cookies, only with your consent. You can change your choices at any time in the website's cookie settings.

12. Changes to this policy

We update this policy when our processing of personal data changes. We will announce significant changes on our website.

Last updated 13th of October, 2026