Privacy Policy

Effective date: March 2026

This Privacy Policy explains how vaivatta. market ("we", "us") collects, uses, and protects your personal data when you use market.vaivatta.fi.

1. Data We Collect

• Email address — required to process your order and send a receipt via Stripe
• Name — optional, used for delivery identification
• Payment information — processed directly by Stripe; we never see or store your card details
• Analytics — we use Fathom Analytics, which is cookie-free and privacy-focused; no personal data is collected

2. How We Use Your Data

• To process and deliver your order
• To send order confirmation and receipts (via Stripe)
• To comply with Finnish tax and legal requirements

3. Data Sharing

We share your data only with Stripe for payment processing. We do not sell, rent, or share your personal data with any other third parties.

4. Data Retention

Order data (email, name, order details) is retained for the duration required by Finnish tax and accounting regulations (typically 6 years). You may request deletion of non-legally-required data at any time.

5. Cookies

We do not use cookies. Fathom Analytics is cookie-free. Language preference is stored in your browser's local storage and is never sent to our servers.

6. Your Rights (GDPR)

Under the EU General Data Protection Regulation, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to processing
• Data portability

To exercise any of these rights, contact us at [email protected].

7. Data Controller

The data controller is Vaivatta, based in Lahti, Finland. For data protection inquiries, contact [email protected].

8. Changes

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.