Tietosuojakäytäntö

Privacy Policy

Last updated: September 4, 2026

TuliTuikku respects the privacy of its customers and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

This Privacy Policy explains what personal data TuliTuikku processes, why we process it, with whom it may be shared, how long it may be retained, and what rights you have regarding your personal data.

1. Data Controller

TuliTuikku
Business ID: 3450318-3
Uudenmaankatu 159
05840 Hyvinkää
Finland

Email: iiris.tulituikku@protonmail.com
Phone: +358 45 8566950

TuliTuikku acts as the data controller for personal data processed in connection with our online store and customer relationships.

2. Personal Data We Process

Depending on how you interact with our online store, we may process information such as:

  • your name
  • email address
  • telephone number
  • billing and shipping address
  • order and purchase information
  • transaction and payment confirmation information
  • customer account information, if you create an account
  • messages and other information you provide when contacting customer service
  • information relating to returns, cancellations and complaints
  • IP address and technical information about your device, browser and use of the online store
  • information collected through cookies and similar technologies in accordance with your choices and applicable law.

TuliTuikku generally does not receive or store your complete payment card details. Payments are processed through the payment service providers available through our online store.

3. Why We Process Personal Data

Orders and performance of a contract

We process the personal data necessary to receive and process your order, enable payment, deliver products, communicate with you regarding your order, and handle returns, cancellations and other matters relating to your purchase.

The legal basis for this processing is generally the performance of a contract or taking steps at your request before entering into a contract.

Legal obligations

We may process and retain personal data where necessary to comply with legal obligations applicable to TuliTuikku, including accounting and taxation requirements.

The legal basis for this processing is compliance with a legal obligation.

Customer service and complaints

We process information contained in customer enquiries, returns and complaints in order to respond to you, resolve the matter and, where necessary, establish, exercise or defend legal claims.

Depending on the circumstances, this processing may be based on performance of a contract, compliance with a legal obligation, or our legitimate interests.

Security and prevention of misuse

Technical and other necessary information may be processed to maintain the security of our online store and to detect and prevent fraud, misuse and other harmful activity.

The processing may be based on TuliTuikku's legitimate interest in protecting its online store, business and customers.

Marketing

If you subscribe to marketing communications such as our email newsletter, we may process your contact details for marketing purposes in accordance with applicable law.

Where marketing is based on your consent, you may withdraw that consent at any time, for example by using the unsubscribe link included in our marketing emails.

4. Shopify and Other Service Providers

Our online store is hosted by Shopify. Shopify processes personal data in order to provide the technical infrastructure and services required to operate our online store.

Personal data may also be processed by service providers used by TuliTuikku where necessary for purposes such as:

  • processing payments
  • delivering orders
  • operating and maintaining the online store
  • sending transactional emails and other customer communications
  • providing security, analytics and other online store functionality.

Service providers receive or process personal data only to the extent necessary for the relevant service and in accordance with applicable data protection requirements.

5. Shipping and Logistics Providers

When you place an order, personal data necessary to deliver your order may be provided to the relevant shipping or logistics provider.

This may include your name, shipping address, email address and/or telephone number where required for delivery and delivery notifications.

6. Transfers Outside the EU and EEA

Some of the service providers used by TuliTuikku, including Shopify, may process personal data outside the European Union or European Economic Area.

Where personal data is transferred outside the EEA, appropriate safeguards required by applicable data protection law are used. Depending on the destination and circumstances, these may include an adequacy decision by the European Commission, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.

7. How Long We Retain Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected or as required to comply with our legal obligations.

Personal data contained in order, accounting and taxation records is retained for the period required by applicable accounting and tax legislation.

Customer account information may be retained while the customer account remains active and afterwards where there is a legitimate or legal reason to retain the information.

Customer service and complaint information is retained for as long as reasonably necessary to resolve the matter and to establish, exercise or defend potential legal claims.

Where processing is based on consent, such as certain marketing activities, the relevant information may be processed until you withdraw your consent or the information is no longer required for that purpose.

8. Cookies and Similar Technologies

Our online store uses cookies and similar technologies for purposes such as providing essential website functionality, remembering preferences, maintaining security and, depending on your choices, analytics and marketing.

Where required by applicable law, non-essential cookies and similar technologies are used only in accordance with your consent or other applicable choices.

You can manage your cookie preferences through the cookie settings provided on our online store where available.

9. Data Security

TuliTuikku takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

10. Your Data Protection Rights

Under the GDPR, depending on the circumstances, you may have the right to:

  • receive information about how your personal data is processed
  • request access to your personal data
  • request correction of inaccurate or incomplete personal data
  • request deletion of your personal data
  • request restriction of processing
  • object to certain processing of your personal data
  • receive certain personal data in a portable format and, where applicable, have it transmitted to another controller
  • withdraw your consent at any time where processing is based on consent.

These rights are not absolute and may be subject to conditions or exceptions under applicable law. For example, we may be required to retain certain information despite a deletion request where the information is subject to a legal retention obligation.

To exercise your rights, please contact us at:

iiris.tulituikku@protonmail.com

We will respond to requests without undue delay and generally within one month of receiving the request, as required by the GDPR.

We may request additional information where reasonably necessary to verify your identity before fulfilling a request.

11. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection legislation, you may contact TuliTuikku so that we can investigate the matter.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

If you live in another EU or EEA country, you may also contact the competent supervisory authority in your country of residence.

12. Third-Party Websites

Our online store may contain links to websites or services operated by third parties.

TuliTuikku is not responsible for the privacy practices of independent third-party websites. We recommend reviewing the privacy policy of any third-party service you choose to use.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, personal data processing practices, service providers or applicable legal requirements.

The latest revision date will be displayed at the beginning of this Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy, the processing of your personal data, or wish to exercise your data protection rights, please contact:

TuliTuikku
Uudenmaankatu 159
05840 Hyvinkää
Finland

Email: iiris.tulituikku@protonmail.com
Phone: +358 45 8566950