Privacy

Controller

The Elf Oy · Sarvvikintie 7 C 9, 02390 Sarvvik, Finland · Business ID 3572101-9 · VAT FI35721019

[email protected] · 8:00 AM–7:00 PM

Data and purposes

We process account and contact details, delivery addresses, orders and support messages to handle your requests and contracts (GDPR Article 6(1)(b)). Security logs and abuse prevention serve our legitimate interest in a secure service (Article 6(1)(f)). Legally required retention is based on Article 6(1)(c).

Recipients and retention

Only authorised personnel and service providers receive data needed for their tasks. The website uses LuxHost hosting and Cloudflare for secure delivery. Support requests and accounts are stored on our server. We do not sell contact data or treat support requests as consent to advertising. Card numbers and security codes are not stored by this shop. Account and support data are kept while needed to provide the service and resolve requests; order records are retained for applicable accounting and tax obligations. Contact us to exercise your rights or ask about retention and any transfers outside the EEA.

Your rights

You may request access, rectification, erasure, restriction and portability, and object or withdraw consent where applicable. Use the support form for privacy requests. You may complain to the Finnish Data Protection Ombudsman.

Card payment service

Card payments are processed through Paynid. For payment processing and fraud prevention, we transmit your name, email, telephone number, billing address, IP address, order reference, payment amount and currency.

Payment verification

The payment provider processes payment details on its secure payment page. If you have supplied an optional date of birth in your account, it may be used for payment verification. Your date of birth is not required to make a purchase.