Data Controller and contact person
Wooded Empathy Ltd/ Wooded Empatia Oy/ Hetkinen
(Business ID: 2937604-4)
Tel.: +358 505933038
SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
We process your personal data only to the extent it is necessary for us to provide you the services you have requested. We process your personal data primarily in order to offer you the opportunity to use our website, to deliver the order you place on our online store, and to fulfil any possible subsequent warranty measures. We also process your personal data to send you updates about your order and may send you questionnaires to measure your satisfaction with our online store or the products ordered by you.
When you purchase something from our online store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address. We will also collect information about your order and other information relevant to your customership, such as type and amount of products you ordered, purchase price, date of placing the order, status of your order, method of payment, specifics related to your payment, product returns and customer service requests.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address and certain other metadata such as your browser type, time of visit and the content viewed in order to provide us with information that helps us improve our website.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
SECTION 2 – LEGAL BASES FOR PROCESSING
The legal bases for processing your personal data are either compliance with the agreement entered into between us, compliance with legal obligations to which we are subject, our legitimate interest, or your consent as further described below.
How do you get my consent?
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at email@example.com.
SECTION 3 – DISCLOSURES AND TRANSFERS
We may disclose your personal data to our partners within the limits permitted by law, e.g. for purposes of carrying out deliveries. For example, to execute your orders, we use services of our partners (such as payment services providers or shipping and delivery services offered by our logistics partners). We will only provide these partners the information they need to provide the services agreed.
We may also disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
Our store is hosted on Webfow. Webflow acts as our data processor and processes your personal data on our behalf. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Webflow data storage, databases and the general Webflow application. Webflow store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, Webflow stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help to ensure the secure handling of credit card information by our store and its service providers.
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than you or we are. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
In no circumstances are we, Wooded Empathy Ltd, liable for any actions or privacy policies of third parties.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 4 – COOKIES
SECTION 5 – MINORS AND OUR WEBSITE
Our website is not intended to be used by persons under the age of 18 or other minors. By using this website, you represent that you are at least the age of 18 or majority in your state or province of residence, or that you are 18 or the age of majority in your state or province of residence.
SECTION 6 – HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?
Where the personal data is processed on the basis of an obligation based on applicable law, the retention period may also be subject to explicit statutory requirement. For example, we are obliged to retain any personal data included in accounting material for up to six years. We may also retain certain personal data after the termination of the initial processing purpose, should such retention of personal data be necessary to comply with other applicable laws or should we need the personal data to establish, exercise or defend a legal claim, on a need to know basis only.
Where the processing has been based on your consent, for example in case you have subscribed to our newsletter, we will retain your personal data for as long as you withdraw your consent.
When we no longer need the collected personal data, the data will be safely destroyed or irrevocably anonymized.
SECTION 7 – YOUR RIGHTS
The extent of your rights is subject to the legal basis for processing and exercising your rights requires identification.
In addition, you have the right to lodge a complaint with the supervisory authority regarding our processing of your personal data should you consider that our processing of your personal data is not lawful. The complaint shall be made to the competent supervisory authority, in Finland the Data Protection Ombudsman, in accordance with his instructions. The website of the Data Protection Ombudsman can be found here.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer Mari Isotupa at firstname.lastname@example.org.
We want to decrease global consumption of plastics, and we felt it was our duty to create a fully recyclable line of natural cosmetics. None of the packaging materials use plastic. When we use nature's offerings, we also want to offer love and compassion back in exchange. We are committed to protect the forests. We oppose clear-cutting forests, and stand up for animal rights.