Privacy policy for Cutiemags

Privacy Policy Effective Date: 2 July 2026 This Privacy Policy explains how Cutiemags Oy ("Cutiemags", "we", "our", or "us") collects, uses, stores, shares and protects your personal data when you visit our online store, place an order, contact us or otherwise interact with our services. We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable Finnish legislation, and other relevant European Union data protection laws.


  1. Data Controller Cutiemags Oy Business ID: 3593208-6 Registered Address: Lammaslammentie 16, 01710 Vantaa, Finland Customer Service: info@cutiemags.com Telephone: +358 4578338231 If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.

  1. Scope of this Policy This Privacy Policy applies to: • visitors of our website; • customers placing orders; • individuals contacting customer support; • newsletter subscribers; • users participating in promotions or competitions; • all personal data processed in connection with our business operations.

  1. Personal Data We Collect Depending on how you use our services, we may collect the following categories of personal data. Identity Information • Full name • Company name (where applicable) • VAT number (business customers) Contact Information • Billing address • Shipping address • Email address • Telephone number Order Information • Ordered products • Order history • Payment status • Delivery information • Customer communications Payment Information Payments are processed securely through Holvi. Cutiemags Oy does not store complete payment card details. Payment information is processed by Holvi and its authorised payment partners according to their own privacy policies and applicable financial regulations. Technical Information When visiting our website, we may automatically collect: • IP address • Browser type • Operating system • Device information • Language settings • Website usage • Session information • Referring URLs Marketing Information Where you have provided consent: • newsletter preferences • marketing permissions • promotional campaign participation

  1. How We Collect Personal Data We collect personal data: • directly from you when placing an order; • when creating an account (if applicable); • when contacting customer support; • when subscribing to newsletters; • through cookies and similar technologies; • through payment and delivery providers; • from publicly available business registers where legally permitted.

  1. Legal Bases for Processing We process personal data under one or more of the following legal bases under Article 6 GDPR. Contract To: • process orders; • deliver products; • provide customer support; • issue refunds; • manage warranties. Legal Obligation Including: • accounting requirements; • tax legislation; • fraud prevention; • consumer protection legislation. Legitimate Interests Including: • improving our website; • preventing fraud; • ensuring information security; • defending legal claims; • maintaining customer relationships. Consent Where legally required, including: • email marketing; • optional cookies; • promotional communications. You may withdraw consent at any time.

  1. Purposes of Processing We process personal data in order to: • fulfil customer orders; • process payments; • arrange shipping; • communicate regarding purchases; • provide customer support; • comply with legal obligations; • prevent fraud; • improve our services; • maintain website security; • analyse website performance; • conduct internal business reporting; • send marketing communications where permitted.

  1. Payment Processing Payments are securely processed through Holvi. Holvi acts as an independent provider of payment services and processes payment-related personal data in accordance with its own privacy practices and regulatory obligations. For further information, customers should consult Holvi's Privacy Notice.

  1. Shipping Partners To fulfil customer orders, we may share necessary information with logistics providers. Typical information includes: • recipient name; • delivery address; • telephone number; • email address (where required); • shipment reference. Only information necessary for delivery is disclosed.

  1. Service Providers We may share personal data with trusted service providers, including: • payment providers; • hosting providers; • website infrastructure providers; • customer support tools; • accounting providers; • logistics companies; • IT security providers. All processors are required to maintain appropriate confidentiality and security measures.

  1. International Transfers As a rule, personal data is processed within the European Economic Area (EEA). If personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, including: • European Commission Adequacy Decisions; • Standard Contractual Clauses; • other lawful transfer mechanisms under GDPR.

  1. Data Retention We retain personal data only for as long as necessary. Examples include: Customer account information: Until account deletion or inactivity. Order records: As required for contractual purposes. Accounting records: As required by Finnish accounting legislation. Marketing permissions: Until consent is withdrawn. Technical logs: Only for the period necessary for security and operational purposes.

  1. Security We implement appropriate technical and organisational measures to protect personal data against: • unauthorised access; • accidental loss; • misuse; • alteration; • destruction. These measures include: • encrypted connections (HTTPS); • access controls; • password protection; • regular software updates; • secure payment processing; • restricted employee access.

  1. Your Rights Under GDPR you have the right to: • access your personal data; • request correction of inaccurate information; • request deletion ("Right to be Forgotten"); • restrict processing; • object to processing; • receive your data in a portable format; • withdraw consent; • lodge a complaint with your local Data Protection Authority.

  1. Cookies Our website uses cookies to: • operate the online store; • remember shopping cart contents; • improve security; • analyse website performance; • remember user preferences. Where legally required, non-essential cookies will only be used after obtaining your consent. A separate Cookie Policy provides further information.

  1. Children's Privacy Our website is intended for adults. We do not knowingly collect personal information from children under the age required by applicable law. If such information is identified, it will be deleted without undue delay.

  1. Changes to this Privacy Policy We may update this Privacy Policy from time to time. The latest version will always be available on our website together with its effective date.

  1. Contact Questions regarding this Privacy Policy should be directed to: Cutiemags Oy Email: info@cutiemags.com Address: Lammaslammentie 16, 01710 Vantaa, Finland Telephone: +358 4578338231