Privacy and cookie policy
1. Data controller
Finnish Beauty Oy (“Djusie”, “we”) Business ID: 3198621-2
Ahertajankatu 19, 33720 Tampere, Finland Email: hello@djusie.com
Djusie is responsible for processing your personal data as described
here. We apply the EU General Data Protection Regulation (GDPR) and the
Finnish Data Protection Act (1050/2018). For data protection matters you
can contact us at hello@djusie.com.
2. What data we collect
We process the following personal data:
-
Order and contact details: name, email address,
phone number, delivery and billing address.
-
Order and payment details: order history, products
ordered, payment method. We do not store full payment card details –
payments are processed by the payment service provider (Paytrail /
PayPal).
-
Account details (if you create an account): the
above data and a hash of your password.
-
Marketing permissions: newsletter subscription and
related consents.
-
Technical data: IP address, browser and device
information, and data on your use of the site through cookies (see
section 7).
3. Purposes and legal
bases for processing
| Purpose |
Legal basis (GDPR) |
| Processing, delivering orders and customer service |
Performance of a contract (Art. 6(1)(b)) |
| Accounting and statutory obligations |
Legal obligation (Art. 6(1)(c)) |
| Newsletter and marketing |
Consent (Art. 6(1)(a)) |
| Developing the online store and statistics |
Legitimate interest (Art. 6(1)(f)) |
| Preventing misuse and fraud |
Legitimate interest (Art. 6(1)(f)) |
4. Where we obtain the data
We obtain the data primarily from you when you place an order, create
an account, subscribe to the newsletter or contact us. Technical data is
collected automatically from your use of the site.
5. Who we disclose data to
(processors)
We use trusted service providers who process personal data on our
behalf under data processing agreements. We do not sell your personal
data.
-
Shopify – online store platform (orders, customer
data, accounts).
-
Paytrail Oyj – payment processing (online bank and
card payments).
-
PayPal – payment processing (PayPal payments).
-
Klaviyo – email marketing and newsletter.
-
Google (Google Analytics 4, Google Ads) – site
usage statistics and advertising measurement.
-
Meta (Facebook, Instagram) – advertising targeting
and measurement.
-
Judge.me – product reviews.
-
Shipping companies (Posti, Matkahuolto, PostNord) – data necessary
for delivery.
Some service providers may process data outside the EU/EEA. In that
case the transfer is based on appropriate safeguards, such as the
European Commission’s standard contractual clauses.
6. How long we retain data
We retain personal data only for as long as necessary for the
purposes described above:
-
Order and billing data: for the period required by
the Accounting Act, generally 6 years from the end of the calendar year
in which the financial year ended. This statutory obligation overrides
an erasure request for this data.
-
Customer account: 3 years from the last purchase or
login, after which the account is deleted or anonymized.
-
Customer service correspondence: 2 years from
contact.
-
Complaints and returns: 3 years from the conclusion
of the case (accounting vouchers 6 years).
-
Newsletter and marketing permissions: until you
withdraw your consent. Passive contacts are removed from the list after
24 months of inactivity.
-
Marketing opt-outs: retained permanently so that we
can honor your opt-out.
-
Analytics and cookie data: up to 14 months (Google
Analytics 4 default).
7. Cookies
We use cookies – small files stored on your device – so that the
online store works and so that we can develop it. We use the following
types of cookies:
-
Necessary cookies: operation of the store, shopping
cart, login. These do not require consent.
-
Statistics and analytics cookies: measuring site
use (Google Analytics 4).
-
Marketing cookies: advertising targeting and
measurement (Google Ads, Meta). These are used only with your
consent.
You can manage your cookie consent from the site’s cookie settings
and block cookies in your browser settings. Blocking necessary cookies
may affect the operation of the store.
8. Your rights
Under the GDPR (Articles 12–22) you have the right to:
-
access your data and obtain a copy,
-
rectify inaccurate data,
-
erase your data (“right to be forgotten”) when
there is no longer a basis for processing,
-
restrict processing and object to
it in processing based on legitimate interest,
-
port data from one system to another,
-
withdraw consent at any time (e.g. a newsletter
subscription).
You can exercise your rights by contacting hello@djusie.com. We
respond without undue delay and no later than one month.
If you consider that we process your data unlawfully, you can lodge a
complaint with the Office of the Data Protection
Ombudsman (www.tietosuoja.fi).
9. Data security
We protect personal data with appropriate technical and
organizational measures. Access to data is limited to those who need it
in their work.
10. Changes
We may update this policy. We will notify you of significant changes
on the website. This policy was last updated
27 August 2026.
Finnish Beauty Oy Business ID: 3198621-2 Ahertajankatu 19, 33720
Tampere, Finland hello@djusie.com