Privacy Policy

1. Data Controller

2. Personal Data We Collect

We collect and process the following personal data:

Customer Information:

• Name (first and last name)
• Email address
• Phone number
• Delivery address
• Billing address

Order Information:

• Order history
• Products purchased
• Payment information (processed by payment provider)

Technical Data:

• IP address
• Browser type and version
• Device information
• Cookies and similar technologies

3. Purpose of Data Processing

We process your personal data for the following purposes:

• Processing and fulfilling orders
• Customer service and communication
• Payment processing
• Delivery of products
• Handling returns and complaints
• Legal obligations (accounting, consumer protection)
• Marketing (with your consent)
• Improving our services and website

4. Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary for fulfilling purchase agreements
• Legal obligation: Compliance with accounting and consumer protection laws
• Consent: Marketing communications and optional cookies
• Legitimate interest: Fraud prevention and service improvement

5. Data Sharing and Recipients

We may share your personal data with:

• Payment processors: For secure payment processing
• Delivery services: For shipping products
• IT service providers: For hosting and maintenance
• Authorities: When required by law

We do not sell your personal data to third parties. All data processors are bound by data processing agreements ensuring GDPR compliance.

6. Data Retention

We retain your personal data:

• Order data: 6 years (accounting legislation requirement)
• Customer account: Until account deletion or 3 years of inactivity
• Marketing data: Until consent is withdrawn
• Technical logs: 12 months

7. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate information
• Right to erasure: Request deletion of your data
• Right to restriction: Limit processing of your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: For consent-based processing

To exercise your rights, contact us at privacy@flashsale.fi

8. Cookies

We use cookies and similar technologies to improve user experience, analyze website traffic, and for marketing purposes. You can manage cookie preferences through your browser settings. Essential cookies necessary for website functionality cannot be disabled.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include encryption, access controls, regular security assessments, and staff training.

10. International Data Transfers

Your personal data is primarily processed within the EU/EEA. If data is transferred outside the EU/EEA, we ensure adequate protection through standard contractual clauses or other approved mechanisms under GDPR.

11. Changes to Privacy Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman: