Privacy Policy

Updated: 20.8.2026

1. Controller

Heja Solutions Oy
Martinkyläntie 43, Vantaa, Finland
info@heja.fi
+358 45 150 3693

2. What information do we collect?

We collect the following personal data:

Order information: name, delivery address, email address, phone number
Payment information: details of the payment transaction (we do not store card information)
Browsing information: cookies and analytics data (see our cookie policy)
Communication: customer service messages and contact form information

3. Why do we process your data?

We process your personal data for the following purposes:

Processing and delivering orders
Providing customer service
Fulfilling statutory obligations (e.g., accounting)
Improving the functionality of the online store

4. Legal basis for processing

The processing of personal data is based on:

Performance of a contract — order processing
Legal obligation — accounting and taxation
Legitimate interest — online store development
Consent — marketing communications (only with consent)

5. Data retention period

We retain personal data for as long as necessary:

Order history: 10 years (Accounting Act)
Customer accounts: indefinitely or until you delete your account
Marketing consent: until you withdraw your consent

6. To whom do we disclose data?

We may disclose data to the following parties:

Shopify Inc. — e-commerce platform (privacy: shopify.com/legal/privacy)
Matkahuolto — for delivery (name, address, phone number)
PostNord — for delivery (name, address, phone number)
Payment service providers — for payment processing
We do not sell personal data to third parties

7. Transfer of data outside the EU

Shopify Inc. is a US company. Data transfer takes place in accordance with the EU General Data Protection Regulation (GDPR) using appropriate safeguards.

8. Your rights

You have the right to:

Access your data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict the processing of your data
Port your data to another service provider
Object to the processing of your data

You can exercise your rights by contacting: info@heja.fi

9. Right to lodge a complaint

You have the right to lodge a complaint with the data protection authority:
Office of the Data Protection Ombudsman
tietosuoja.fi | tel. 029 566 6700