1. Data Controller

Glitternisti / Good Tribe Oy

Business ID: [BUSINESS ID]

Kolmas linja 32 LH 4
00530 Helsinki

Phone: +358 45 7838 0921

Email: info@glitternisti.fi

Website: www.glitternisti.fi

2. What personal data do we collect?

We may collect the following personal data:

• Name
• Address
• Phone number
• Email address
• Order and payment information
• Delivery information
• Customer service contacts
• Newsletter subscription information
• Website usage data (e.g., IP address, browser type, device information, and analytics data related to website usage)

We collect information directly from the customer in connection with online store purchases, contacts, newsletter subscriptions, and website usage.

3. For what purposes is personal data used?

We process personal data for the following purposes:

• Processing and delivering orders
• Processing payments
• Customer service
• Maintaining customer relationships
• Fulfilling statutory obligations
• Developing the online store and services
• Website analysis
• Direct marketing and sending newsletters when permitted by law

4. Legal bases for processing personal data

We process personal data based on the following legal grounds:

Performance of a contract

The processing of personal data is necessary for processing the order, receiving payment, and delivering products.

Legal obligation

Accounting legislation and other applicable laws oblige us to retain some data for a specified period.

Legitimate interest

We may process personal data for maintaining customer relationships, developing customer service, and ensuring website security.

Consent

We use consent, for example, for sending newsletters and for certain cookies when required by law.

5. Data disclosure and processors

We do not sell personal data to third parties.

We may disclose personal data to trusted partners to the extent necessary for the implementation of our services, such as:

• Payment service providers (e.g., Klarna, Stripe, PayPal)
• Transport and logistics services (e.g., Posti, Matkahuolto, PostNord)
• E-commerce and technology platforms
• Accounting and financial administration services
• Marketing and analytics services

All personal data processors have entered into the necessary data protection agreements or they process data according to their own data protection policy.

We may disclose data to authorities when required by law.

6. Transfer of data outside the EU or EEA

Some of the services we use may process personal data outside the European Union or the European Economic Area.

In such cases, we ensure that the protection of personal data has been agreed upon in a manner required by EU data protection legislation, for example, by using standard contractual clauses approved by the European Commission.

7. Data retention

We retain personal data only for as long as it is necessary for its intended purpose or as required by law.

For example:

• Order and accounting data are retained for the period required by accounting legislation.
• Newsletter subscriber data is retained until the subscription is canceled.
• Customer service-related data is retained for a reasonable period for managing the customer relationship.

8. Rights of the data subject

In accordance with current data protection legislation, you have the right to:

• Inspect data concerning yourself
• Request correction of inaccurate data
• Request deletion of data in situations where the law allows it
• Restrict the processing of your personal data
• Object to the processing of your personal data
• Transfer data from one system to another in applicable situations
• Withdraw your consent at any time

You can exercise your rights by contacting the data controller.

9. Cookies and analytics

We use cookies and similar technologies on our website to enable the operation of the online store, develop the site, and measure marketing.

We may use, for example:

• Google Analytics
• Google Ads
• Meta (Facebook and Instagram)
• The online store platform's own functional cookies

You can manage cookie settings through the cookie banner and in your browser settings.

10. Newsletters and marketing

We may send newsletters and marketing messages to individuals who have given their consent or with whom we have an ongoing customer relationship within the limits permitted by law.

You can unsubscribe from marketing messages at any time via the link at the bottom of the newsletter or by contacting our customer service.

11. Data security

We protect personal data with appropriate technical and organizational measures.

Access to personal data is limited only to those individuals who need the data to perform their job duties.

12. Right to lodge a complaint

If you believe that your personal data has been processed contrary to data protection legislation, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman.

More information can be found at www.tietosuoja.fi.

13. Changes to the privacy policy

We reserve the right to update this privacy policy due to changes in legislation, authority guidelines, or our operations.

The up-to-date privacy policy is always available on our website.

Updated: 04.06.2026