Privacy policy

1. Data controller

Your data is processed by Luonnollisesti Natural Oy, which operates the Ei Muovia! marketplace.

Luonnollisesti Natural Oy (luonnollisesti.life), Business ID 3658021-1.

Contact for data protection matters: tuki@eimuovia.fi. We respond to requests within one month.

2. What data we process

Only what is needed to handle orders, customer accounts and customer service.

• Order and delivery data: name, email, phone number, delivery address, ordered products and order status.
• Payment data: payment method, amount and payment reference. We do not see or store your card number – it is handled by the payment service.
• Customer account: login details, saved addresses, favourites and order history.
• Communication: customer service messages and product reviews.
• Community: public display name, username, bio and content you publish in the community (see the Community section).
• Makers and applicants: company and contact person details, bank account number for payouts, and sales and invoicing data.
• Technical data: browser and device information, IP address and usage data collected with cookies.

3. Purposes and legal basis of processing

• Contract: delivering orders, payments, returns, customer accounts and payouts to makers.
• Legal obligation: accounting, taxation and consumer protection obligations.
• Legitimate interest: service security, preventing misuse and developing the service.
• Consent: marketing and analytics cookies. Consent can be withdrawn at any time.

4. Who data is disclosed to

The maker receives only the details needed to ship the parcel. Your data is never sold to anyone.

• The maker of the order: name, delivery address, phone number and ordered products – only for their own order.
• Payment service Stripe: payment processing in line with PCI DSS requirements.
• Carriers (e.g. Posti, Matkahuolto): delivery and arrival notifications.
• Technical service providers: hosting and email delivery, as processors bound by contract.
• Authorities where required by law.

Some service providers may process data outside the EU and EEA. Such transfers are protected by the European Commission's standard contractual clauses or another lawful transfer mechanism.

5. Cookies and the Meta Pixel

Essential cookies keep your cart, favourites, login and theme setting. The shop does not work without them.

Marketing: we use the Meta Pixel (Facebook and Instagram) to measure the effectiveness of advertising. The pixel may send Meta information about page views and purchases. You can limit this in your browser's cookie settings, with tracking protection and in Facebook's ad settings.

6. Retention period

• Accounting data (orders, receipts, invoices): 6 years from the end of the financial year under the Finnish Accounting Act.
• Customer account: as long as the account is in use, or until you ask for it to be deleted.
• Customer service messages: at most 2 years after the matter is resolved.

7. Community (/yhteiso)

A free discussion area for customer account holders.

The Ei Muovia! community is a free part of the service, open to registered users who have confirmed their email address. We process community-related data as follows:

• Community profile: public display name, username and optional bio. The community profile is separate from your shop customer account but linked to it.
• Content: topics, replies, reactions and group memberships you create in the community.
• Reports and moderation: reports about content, how they are handled and decided, and the moderation log.

Who sees what? Other users see only the public display name, username, bio and community content. Your email address, order details and other customer account data are not shown to other users, and the internal identifiers behind usernames are not disclosed to other users.

Legal basis: use of the community is based on the service contract (GDPR Article 6(1)(b)). Handling reports and moderation is based on our legitimate interest in maintaining a safe discussion environment (Article 6(1)(f)).

Moderation: our team and appointed moderators may read community content and reports and, where necessary, hide, restore, lock or remove content and exclude a member who misuses the community. If content receives enough reports from different users, it is automatically hidden pending a moderator's review. Hiding and restoring actions are logged.

Retention: your community profile and content are kept until you ask us to delete them or delete them yourself. When your customer account is deleted, your community profile and its content are deleted too. Reports, moderation decisions and their logs are kept for at most 2 years from handling, to investigate security and misuse.

The community rules are on the Community rules page. For questions, contact tuki@eimuovia.fi.

8. Your rights

You can access, correct and have your data deleted – just write to us.

• the right to access your data and receive it in a portable format
• the right to have inaccurate data corrected
• the right to request deletion of data, unless the law requires us to keep it
• the right to restrict or object to processing
• the right to withdraw consent at any time

Send your request to tuki@eimuovia.fi. You can also lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

9. Data security

Connections are encrypted (HTTPS). Data is stored in a secure cloud environment with access restricted by permissions: customers see only their own data and makers only their own orders. Passwords are not stored in readable form.

10. Changes to this policy

We update this policy when the service or legislation changes. We will announce material changes on the website or by email.