Privacy policy
PURELA – PRIVACY POLICY
Last updated: 9 March 2026
Purela / H/H Design Oy (hereinafter "Purela", "we" or "controller") respects the privacy of its customers and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.
This privacy policy explains what data we collect, why it is collected and what rights you have as a customer.
1. Data Controller
Purela / H/H Design Oy
Business ID: 2173159-0
Sakkelikuja 4, 90650 Oulu
info@purela.fi
040 825 8277
Data protection enquiries: info@purela.fi
2. Register Name
Purela online store customer and marketing register.
3. Purpose of Processing Personal Data
Personal data is processed for the following purposes.
Customer relationship management: processing and delivering orders, handling payments, customer service, and managing returns and complaints.
Development of the online store: analysing website usage, improving service quality and optimising the shopping experience.
Marketing: newsletters, customer offers, personalised digital marketing and campaign communications.
4. Personal Data Processed
The register may contain the following data.
Basic customer information: name, email address, phone number, delivery address and billing address.
Order information: products purchased, order date, payment method, delivery method and order value.
Customer account information: username, password (encrypted) and order history.
Customer service data: enquiries, complaints and feedback.
Technical data: IP address, browser type, device type, website usage data and analytics collected via cookies.
5. Legal Basis for Processing
Data processing is based on the following legal grounds.
Contract: when a customer places an order in the online store.
Consent: when a customer subscribes to the newsletter or accepts marketing cookies.
Legitimate interest: development of the online store, analytics and improving the customer experience.
Legal obligation: for example, obligations related to accounting.
6. Recipients of Personal Data
Data may be shared with service providers involved in the operation of the online store, including the following.
Payment services: Paytrail, Klarna, Stripe and PayPal.
Logistics: Posti, Matkahuolto, Budbee, PostNord, DHL and UPS.
E-commerce platform: Shopify.
Marketing and analytics: Google (Google Analytics), Meta Platforms (Meta Pixel) and Klaviyo.
Data is processed only to the extent required for the provision of the service.
7. Transfer of Data Outside the EU/EEA
Some of our service providers may process data outside the EU/EEA. In such cases, we ensure an adequate level of data protection through EU standard contractual clauses and EU-approved data protection mechanisms.
8. Retention Periods
Personal data is retained only for as long as necessary. Typical retention periods are as follows.
Customer account: for the duration of the customer relationship.
Order data: in accordance with accounting legislation (6 years).
Marketing data: until the customer withdraws consent.
9. Cookies
The Purela website uses cookies for the following purposes.
Necessary cookies: enable the functioning of the online store.
Analytics cookies: help us understand how the website is used.
Marketing cookies: enable personalised advertising.
Cookies are used by the following services, among others: Google Analytics, Meta Platforms and Shopify.
Users can manage cookie settings through their browser settings or via the cookie banner on our website.
10. Your Rights
You have the following rights regarding your personal data.
The right to access your data
The right to rectify inaccurate data
The right to request erasure of your data
The right to restrict processing
The right to object to processing
The right to data portability
Requests should be sent to the data controller's contact details above. You also have the right to lodge a complaint with the Data Protection Ombudsman.
11. Data Security
Purela applies technical and organisational security measures to protect personal data, including SSL-encrypted connections, secure servers, access controls and data minimisation.
12. Changes to This Privacy Policy
Purela may update this privacy policy as necessary. The current version is always available on our website.
