Privacy Policy
Privacy Policy
Last updated: 2.6.2025
General
The controller of the personal data being processed is:
Heron Beauty Labs Oy
3422068-5
Aleksanterinkatu 50 A 1
90120 Oulu
The primary purpose of the register is to act as a customer and marketing register for the online store located at www.daysbydahlia.com.
The operation of the online store and the provision of a functional service require that we collect and process certain information about you. However, we value your privacy and are committed to protecting it. This privacy policy includes information on what personal data we collect, the principles under which we process it, and what rights and influence opportunities you have regarding your data.
We process personal data about you in accordance with this privacy policy and applicable legislation; therefore, we ask that you read this privacy policy carefully.
We may update this privacy policy from time to time, for example, to reflect changes in our operations or practices, as well as for other operational, legal, or regulatory reasons. For this reason, we ask that you visit this page occasionally to check for any updates to the privacy policy; the date of the previous update is visible under the main heading of this site.
By using our services, our website, or by contacting us, you agree that we may process your personal data in accordance with this privacy policy.
For what purpose is my personal data collected and processed?
We collect, store, and process personal data about you only for pre-defined purposes. The main purposes of use are:
· order processing, delivery, archiving, and accounting based on the performance of a contract.
· fulfillment of our contractual obligations
· compliance with legal obligations and claims
· maintaining customer relationships and responding to contact requests
· business development
· targeting of services and marketing
What personal data about me is collected and stored?
The types of personal data we collect depend on how you interact with our site, online store, or services. When we use the term "Personal Data," we mean information that identifies, relates to, describes, or can be linked to you.
1. Information provided by the user themselves
· Contact information: Such as your name, address, phone number, and email address.
· Order information: Such as your name, billing address, delivery address, payment confirmation, your email address, and phone number.
· Account information: Such as your username, password, security questions, and other information related to account security.
· Customer support information: Such as information that you choose to include in your communication with us.
· Location information: For service localization (Currencies, Shipping methods)
· Product reviews
· Marketing message permissions
2. Information observed from the use of services
· Delivery information: Such as delivery address and chosen payment method
· Purchase history: Such as ordered products, returns, and payments
· Online store browsing and usage data
· Terminal device identifier data
· Online store session events
3. Data inferred through analytics
· Product recommendations inferred from browsing and purchase data
· Customer segmentations and interests inferred from purchase data
4. Information collected from third parties
· Companies supporting the site and Service: Such as Shopify
· Payment processors: Our payment processors, which collect payment information to process your payment, fulfill orders, and provide the products or services you have requested, as well as to fulfill contracts with you.
On what basis is personal data processed?
We ensure that we always have a legal basis for processing your personal data. We may process your personal data on several different bases. We process your data to perform a contract and to fulfill legal obligations. We also process your personal data based on our legitimate interest, which is to provide our services and to conduct and develop our business. We may also process some personal data based on your consent.
Who processes my data and is it disclosed to third parties?
As a rule, your personal data is processed by members of our company’s personnel in the course of their duties. We may also outsource some personal data processing, such as the information systems used for storing and processing personal data. In such cases, we ensure through agreements, among other things, that the confidentiality of your data is maintained and that the data is otherwise processed in accordance with the law. We may also disclose data to fulfill contractual obligations or when required by law or a competent authority. We may also disclose your data if we are involved in a corporate or business acquisition.
Some necessary information is transmitted to third parties to enable payment transactions, deliveries, or marketing communications. For example, to enable deliveries, your address and contact information are transmitted to parties responsible for logistics, and in connection with a payment transaction, your payment information passes through a trusted payment processor.
As the website and online store are built on the Shopify e-commerce platform, you can read how Shopify uses your data here (https://www.shopify.com/legal/privacy).
Is my data transferred outside the EU?
Your personal data may be transferred outside the EU or the EEA area using appropriate safeguards in accordance with the European Union's General Data Protection Regulation (2016/679). As safeguards, we use, among other things, contracts based on the EU Commission’s standard contractual clauses, which can be found here (https://eur-lex.europa.eu/legal-content/FI/TXT/HTML/?uri=CELEX:32010D0087&from=FI)
How long is my personal data stored?
We do not store your personal data longer than is necessary for the purposes of its use or as required by contract or law. However, personal data retention periods may vary depending on the purpose and the situation. We also strive to update your information from time to time.
How is my data stored and protected?
Your data is stored on our service provider's servers, which are protected according to general industry practices. The personal data we collect and process is kept confidential and is not disclosed to others, except to those who need it in their work or to our customers based on confidential and limited service agreements. Access to your personal data is protected by user-specific IDs, passwords, and access rights.
Mandatory provision of data and consequences of non-provision?
If you do not provide personal data or allow its processing, we are likely unable to serve you and fulfill the purpose of our operations. Therefore, if you do not want us to process your data in accordance with this privacy policy, we ask that you do not provide us with any information.
Cookies?
Like many websites, we use cookies on our site to provide a better user experience for the visitor. We use cookies to develop our site and services, as well as to perform analytics and understand how users interact with our services. Specific and more detailed information about the cookies we use to operate on the Shopify platform can be found here (https://www.shopify.com/legal/cookies).
We may also allow third parties and service providers to use cookies on our site to better tailor services, products, and advertising to our site. We may utilize analytics tools provided by third parties and service providers on our site to develop our site, to analyze the use of the website, and to target and optimize marketing.
A website user can give their consent or deny the use of cookies in their web browser settings. Most web browsers allow cookies automatically. Remember that deleting or blocking cookies can negatively affect your user experience and may cause some services, including certain features and general functionality, to not work or be unavailable.
What rights and influence options do I have?
· Withdrawal of consent: If we process your data based on your consent, you can withdraw your consent at any time by notifying us.
· Access to data: You have the right to receive confirmation from us as to whether we are processing personal data concerning you and to know what personal data we are processing. Additionally, you have the right to receive supplementary information about the basis for the processing of your personal data.
· Right to have errors corrected: You have the right to request that we correct any incorrect, outdated, or otherwise incomplete personal data concerning you.
· Right to prohibit direct marketing: You can prohibit the processing of your personal data for direct marketing purposes by notifying us.
· Right to object to processing: If we process your personal data based on public interest or our legitimate interest, you have the right to object to the processing of personal data concerning you insofar as there is no compelling reason for the processing that would override your rights, or the processing is not necessary for the handling of a legal claim. Please note that in this situation, we will likely no longer be able to serve you.
· Right to restrict processing: In certain situations, you have the right to demand that we restrict the processing of your personal data.
· Right to data portability: If we have processed your data based on your consent or for the fulfillment of a contract, you have the right to receive the data you provided to us electronically in a commonly used format so that the data could be transferred to another service provider.
How do I exercise my rights or influence options?
You can exercise the rights described above by contacting us, for example, by email. At the same time, please mention your name, address, and phone number, and attach a copy of your passport, driver’s license, or other identification document to your message so that we can verify your identity. If you consider that the processing of your personal data is not lawful, you can also file a complaint with the competent supervisory authority.
Contact
If you have questions about our privacy practices or this privacy policy, or if you wish to exercise any of your rights, please send us an email at
contactus@daysbydahlia.com
