Privacy Policy
Finnexion uses privacy-conscious website analytics only when you consent. Advertising storage and personalisation remain disabled. We also process information needed to answer enquiries, operate the Finnexion AI Assistant, remember local preferences and complete orders through Stripe.
1. Who is responsible
Finnexion Oy, office address Kappelikuja 6A, 02200 Espoo, Finland, is the data controller. For privacy questions or requests, email info@finnexion.com.
2. Information we process
- When you contact us or submit the statutory withdrawal form, we receive the contact, order and message information you choose to provide.
- The shop and vintage cart are stored in your own browser using local storage. A dismissed language suggestion may be stored in session storage. Finnexion does not receive this information unless you proceed to checkout.
- At checkout, Stripe collects the information needed to process payment and delivery, such as name, email, phone number, billing details, delivery address and optional pickup-store information.
- If you allow analytics, Google Analytics receives website usage information such as pages viewed, approximate location, device and browser details, referral source, scrolls and outbound-link interactions. We do not intentionally send names, email addresses, payment details or other directly identifying form data to Google Analytics.
- When you use the Finnexion AI Assistant, we process the message you enter, the assistant response, the time of the conversation and a one-way hashed technical identifier used to prevent abuse. Please do not enter sensitive personal information, payment details or confidential business information in the chat.
3. Why we use the information
We use information to respond to requests, provide AI-assisted answers based on Finnexion's published website information, improve the usefulness of those answers, take steps before entering into a contract, fulfil orders, provide customer service, meet accounting and legal obligations, and protect the service from fraud or misuse. The legal bases are contract, legal obligation and Finnexion's legitimate interests in operating and securing the business. The legal basis for Google Analytics is your consent, which you may withdraw at any time.
4. Analytics choices
Google Analytics is off by default. If you select “Allow analytics”, the site loads Google Analytics 4 and stores its analytics identifiers in your browser. Advertising storage, Google signals and advertising personalisation are disabled. Selecting “Necessary only” keeps Analytics off. Your choice is saved locally so the site can remember it.
5. Service providers and transfers
Payments are handled by Stripe, which acts as an independent controller or processor depending on the activity. The AI Assistant uses Supabase for database infrastructure and OpenAI to generate answers; chat messages and relevant Finnexion website extracts may therefore be processed by these providers on Finnexion's behalf. With consent, analytics is provided by Google Ireland Limited; see Google's Privacy Policy. Email and hosting providers may process limited technical or communication data on Finnexion's behalf. Where data is transferred outside the European Economic Area, we rely on an applicable lawful transfer mechanism.
6. Retention
Enquiries and AI Assistant conversations are kept only as long as needed to provide and improve the service, handle the conversation and maintain normal business records. Rate-limit records automatically roll over after their short abuse-prevention window. Order, payment and accounting records may be retained for the periods required by Finnish law. Browser cart, language and analytics-consent preferences remain on your device until you clear them. Google Analytics event-level data is retained according to the retention period configured in our Analytics property.
7. Your rights
Depending on the situation, you may request access, correction, deletion, restriction, portability or objection to processing. You may also complain to the Office of the Data Protection Ombudsman of Finland. Contact us first at info@finnexion.com and we will respond as required by law.
8. Security and changes
We use reasonable technical and organisational measures and do not receive your full card details from Stripe. We may update this policy when services or legal requirements change; the current version and date will remain on this page.