privacy policy

Last updated: 11.2.2026
Website: www.superflinda.fi
Data Controller: Superflinda
Email: hello@superflinda.fi
Location: Finland

1. Introduction

This website is a portfolio and online store hosted on Squarespace. We process personal data in accordance with the GDPR.

This policy explains how we collect, use, and protect your personal data when you:

  • Visit our website

  • Purchase products

  • Subscribe to our newsletter

  • Contact us

2. Data We Collect

2.1 Website Visitors

Automatically collected data may include:

  • IP address

  • Device and browser type

  • Pages visited

  • Interaction data

  • Referral source

Legal basis: Legitimate interest (security and functionality). Consent (analytics/marketing).

2.2 When You Make a Purchase

We collect:

  • Full name

  • Billing address

  • Shipping address

  • Email address

  • Phone number (if provided)

  • Order details

  • Transaction confirmation

Payments are processed securely by third-party providers (e.g., Stripe or PayPal). We do not store full credit card information.

Legal basis: Contract performance. Legal obligation (tax/accounting).

Order data is retained according to applicable accounting laws (typically 6–10 years depending on jurisdiction).

2.3 Newsletter Subscribers

If you subscribe to our newsletter, we collect:

  • Email address

  • Name (if provided)

  • Email engagement data (opens, clicks)

Legal basis: Consent.

You may unsubscribe at any time via the unsubscribe link in any email.

2.4 Contact Forms

When you submit a contact form, we collect:

  • Name

  • Email address

  • Message content

Legal basis: Legitimate interest (responding to inquiries)

3. How We Use Personal Data

We use data to:

  • Fulfill orders

  • Provide customer support

  • Send order confirmations

  • Send newsletters (with consent)

  • Improve website functionality

  • Meet legal obligations

We do not sell personal data.

4. Data Sharing

We share data only with necessary service providers:

  • Squarespace (hosting & infrastructure)

  • Payment processors

  • Shipping companies

  • Email marketing provider

  • Analytics providers

All processors operate under appropriate data processing agreements where required.

5. International Transfers

Squarespace and some providers may process data in the United States. Transfers are safeguarded via:

  • Standard Contractual Clauses

  • Other GDPR-compliant transfer mechanisms

6. Data Retention

We retain data as follows:

  • Order records: As required by law

  • Newsletter data: Until consent is withdrawn

  • Contact inquiries: Up to 12 months

  • Analytics data: According to provider settings

7. Your GDPR Rights

You have the right to:

  • Access your data

  • Correct inaccurate data

  • Request erasure

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with your Data Protection Authority

To exercise your rights, contact: hello@superflinda.fi

8. Security

We implement appropriate technical and organizational measures including:

  • SSL encryption

  • Secure checkout

  • Limited data access

  • Regular software updates

9. Changes to This Policy

We may update this Privacy Policy when necessary. The current version will always be available on this page.