madebyvaleri
Last updated: 26.06.2026
1. Data Controller
The data controller responsible for processing personal data is:
Valeriia Tulchinskaia (trading as “madebyvaleri”)
Business ID (Y-tunnus): 3635216-3
Email: madebyvalery@outlook.com
For any questions regarding this Privacy Policy or personal data processing, you can contact the controller at the email above.
2. Register Name
Customer and Order Register of madebyvaleri online store.
3. Purpose of Processing Personal Data
Personal data is processed for the following purposes:
- Processing and fulfilling customer orders
- Managing customer relationships
- Delivering products
- Processing payments
- Handling returns, complaints, and customer support
- Maintaining legal accounting and tax obligations
- Improving services and website functionality
- Marketing communications (only with user consent, where applicable)
4. Legal Basis for Processing (GDPR)
Personal data is processed based on:
- Contract performance (GDPR Art. 6(1)(b)) – to fulfill orders
- Legal obligations (GDPR Art. 6(1)(c)) – accounting and tax requirements
- Legitimate interests (GDPR Art. 6(1)(f)) – service improvement, fraud prevention
- Consent (GDPR Art. 6(1)(a)) – marketing and optional communications
5. Data Collected
We may collect and process the following personal data:
- Full name
- Email address
- Phone number (if provided)
- Billing and shipping address
- Order history
- Payment-related information (processed securely via payment provider)
- IP address and cookies (for security and website functionality)
We do not store full card details. Payments are processed securely by third-party providers.
6. Payment Processing
Payments are handled by Stripe.
Stripe
Stripe processes payment data as an independent data controller according to its own privacy policy. We do not store or have access to full credit card details.
7. Shipping and Delivery
Orders are delivered using Shipit Oy and its logistics partners.
Shipit Oy
Shipit Oy processes necessary delivery data (such as name, address, and contact details) solely for the purpose of fulfilling shipments.
8. Data Retention
Personal data is stored only for as long as necessary:
- Order and customer data: as required for fulfilling services and legal obligations
- Accounting records: as required by Finnish accounting laws
- Marketing data: until consent is withdrawn
9. Data Sharing
Personal data may be shared only with:
- Payment service providers (e.g. Stripe)
- Shipping and logistics providers (e.g. Shipit Oy and its partners)
- IT service providers (hosting, email services)
We do not sell or trade personal data.
Some service providers may process data outside the EU/EEA under GDPR-compliant safeguards.
10. Data Security
We apply appropriate technical and organizational measures to protect personal data, including:
- Secure encrypted connections (SSL)
- Restricted access to data
- Secure hosting environments
- Role-based access control
11. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Requests can be sent to: [your email address]
12. Cookies and Analytics
This website may use cookies for:
- Basic website functionality
- Improving user experience
- Analytics (if enabled)
- Marketing (if enabled and consented)
You can disable cookies through your browser settings.
13. Marketing
We may send marketing communications only if you have given consent.
You may unsubscribe at any time.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.