Privacy Policy

1. Purpose of Data Collection

We collect personal data for the following purposes:

• Processing and fulfilling orders
• Sending order confirmations and updates
• Providing customer support
• Displaying your name in the Void of Silence (only with your consent)
• Complying with legal obligations (accounting, tax records)
• Preventing fraud and abuse

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract - Processing necessary to fulfill your purchase order
• Legal obligation - Retention of accounting and tax records as required by Finnish law
• Consent - Displaying your name publicly in the Void of Silence (optional, you can opt-in during checkout)
• Legitimate interest - Fraud prevention and service security

3. Personal Data We Collect

When you make a purchase, we collect:

• Email address - For order confirmation and account access
• Name - For the certificate and optionally the Void of Silence
• IP address - For fraud prevention and security
• Payment information - Processed by Stripe (we do not store card details)

4. Data Recipients (Third Parties)

Your data may be shared with the following service providers:

• Stripe (Payment processing) - Privacy Policy
• Vercel (Hosting provider) - Privacy Policy
• Email service provider - For transactional emails (order confirmations)

5. Data Retention Period

• Order and accounting data - 6 years (required by Finnish Accounting Act)
• Customer account data - Until account deletion is requested
• Void of Silence entries - Until removal is requested

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate personal data
• Erasure - Request deletion of your personal data
• Restriction - Restrict processing of your personal data
• Portability - Receive your data in a portable format
• Objection - Object to processing based on legitimate interest
• Withdraw consent - Withdraw previously given consent at any time

To exercise any of these rights, contact us at privacy@thenothin.store

Right to lodge a complaint: If you believe your data protection rights have been violated, you have the right to file a complaint with the supervisory authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)

7. International Data Transfers

Some of our service providers (such as Stripe and Vercel) may process data outside the EU/EEA. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives adequate protection.

8. Is Providing Data Required?

Providing your email address and payment information is required to fulfill your purchase order. Without this information, we cannot process your order. Providing your name for the Void of Silence is optional and based on your consent.

9. Cookies

We use essential cookies to maintain your session and shopping cart. These cookies are necessary for the website to function and cannot be disabled. We do not use tracking cookies or share your data with third-party advertisers.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.