Privacy policy

This privacy policy explains how Clickers.fi processes personal data when you browse the shop, place an order, or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish law.

Controller

The controller is Clickers.fi (Clickers), Business ID (Y-tunnus) 3651450-5, Purjeentekijänkuja 3 A 4, 00210 Helsinki, Finland. Contact us via the contact form .

Personal data we process

When you place an order we process your name, email address, phone number, shipping address, order contents and customisation choices, delivery method, payment status, and related identifiers (such as order reference and Stripe/Shipit identifiers). When you use the contact form we process your name, email address, subject, and message. Technical data such as IP address, browser type, and security logs may be processed when you use the site. Your cart contents may be stored locally in your browser until checkout.

Purposes and legal bases

We process order data to conclude and perform the sales contract (GDPR Art. 6(1)(b)), including payment, fulfilment, shipping, and order emails. We process data where needed to meet legal obligations such as bookkeeping (Art. 6(1)(c)). Contact-form messages are processed to respond to your enquiry (Art. 6(1)(b) or Art. 6(1)(f), legitimate interest in customer service). Site security, fraud prevention, and error monitoring are based on legitimate interests (Art. 6(1)(f)). We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not send marketing emails unless you separately ask us to.

Recipients and processors

We share personal data only as needed with service providers that help us operate the shop: Stripe (payment processing — we do not store card numbers on our servers), Shipit and the chosen carrier (e.g. Posti, Matkahuolto, or PostNord) for delivery, Mailgun for transactional email, our hosting provider (Hetzner in the EU), Cloudflare for website security and content delivery, and Slack for operational error alerts that may incidentally include limited request context. These parties act as processors or independent controllers according to their roles and only receive the data required for their service.

Transfers outside the EEA

Some providers (notably Stripe, and depending on configuration Mailgun or Cloudflare) may process data outside the European Economic Area. Where that happens, transfers rely on appropriate safeguards under the GDPR, such as the European Commission’s Standard Contractual Clauses and, where applicable, supplementary measures described by the provider.

Retention

Order and payment records are kept for as long as needed to fulfil the order and for legal bookkeeping and consumer-claim periods (typically up to six years under Finnish bookkeeping rules, unless a longer period is required). Contact-form messages are kept only as long as needed to handle your enquiry and any related follow-up. Technical logs are retained for a limited period for security and troubleshooting. Cart data stored in your browser remains until you clear it or complete checkout.

Cookies and similar technologies

We use strictly necessary cookies and similar technologies for the shop to work: session and CSRF protection cookies, and security cookies that may be set by Cloudflare. The shopping cart uses local browser storage rather than tracking cookies. We do not use advertising or analytics cookies on the storefront.

Your rights

You have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability, and to object to processing based on legitimate interests, subject to the limits in the GDPR (for example where we must keep data for a contract or legal obligation). To exercise your rights, contact us via the contact form . We may need to verify your identity before responding.

Complaints

If you believe we have processed your personal data unlawfully, you may lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) in Finland (tietosuoja.fi), or with another supervisory authority in your EU/EEA country of residence.

We may update this privacy policy when our processing practices or legal requirements change. The “Last updated” date at the top of this page will be revised accordingly.