Effective date: 30.09.2025

I respect your privacy and handle your personal data responsibly in accordance with the EU GDPR and Finnish data protection laws.

1. Data I Collect

When you make a purchase or contact me, I may collect:

• Name

• Address

• Email address

• Phone number

• Order details

If you sign up for my newsletter, I collect your email address with your consent.

2. Purpose of Data Collection

I use your data to:

• Process and deliver orders

• Communicate with you about your purchase

• Manage invoices and accounting (as required by Finnish law)

• Send newsletters or marketing emails, if you have opted in

I do not sell or share your personal data with third parties for marketing purposes without your consent.

3. Data Sharing

I only share necessary data with trusted service providers, for example:

• Payment processing (e.g., PayPal)

• Shipping services (e.g., Posti)

• Website hosting (Squarespace)

These providers are required to handle your data securely and according to GDPR.

4. Data Storage & Retention

Your data is stored securely.

• Order information must be kept for six years for accounting purposes (Finnish law requirement).

• Other data (like newsletters) is kept until you unsubscribe or request deletion.

5. Your Rights

Under GDPR, you have the right to:

• Access the data I hold about you

• Request correction or deletion of your data

• Withdraw consent for marketing at any time

To exercise these rights, contact me at: contact@annirapo.com

6. Contact

ANNI RAPO

Mäkelänkatu 97 C

00610 Helsinki