Privacy Policy

How we collect, use, and protect your personal data.

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

Refreshdetoxifye
Kokkolantie 16 B
44500 Viitasaari
Finland
Email: inquiry@refreshdetoxifye.world
Phone: +358 40 5313277

2. Scope and Applicable Law

This Privacy Policy describes how we process personal data when you visit our website at refreshdetoxifye.world or contact us through our contact form. We process personal data in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR)
  • The Finnish Data Protection Act (Tietosuojalaki 1050/2018)
  • The Act on Electronic Communications Services (Tietoyhteiskuntakaari 917/2014), where relevant to cookies and electronic communications
  • Other applicable Finnish and EU data protection legislation

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you (Art. 22 GDPR).

3. Legal Basis for Processing

Legal bases for processing include:

  • Consent (Art. 6(1)(a) GDPR): When you submit our contact form and agree to data processing, or when you accept non-essential cookies (including analytics and marketing cookies).
  • Legitimate interests (Art. 6(1)(f) GDPR): For website security, fraud prevention, maintaining website functionality, and improving our educational content. Where we rely on legitimate interests, we balance our interests against your rights and freedoms.
  • Legal obligation (Art. 6(1)(c) GDPR): When required to comply with applicable laws, including Finnish accounting, tax, or regulatory obligations.
  • Contract performance (Art. 6(1)(b) GDPR): When processing is necessary to respond to your inquiry or fulfil a request you have made.

4. Data We Collect

4.1 Contact Form Data

When you use our contact form, we collect:

  • Your name
  • Your email address
  • Your message content
  • Timestamp of submission
  • Confirmation of consent to data processing

4.2 Automatically Collected Data

When you visit our website, our server may automatically collect:

  • IP address (anonymised where possible)
  • Browser type and version
  • Operating system
  • Referring URL
  • Date and time of access
  • Pages viewed

4.3 Cookie and Similar Technology Data

We use cookies and similar technologies as described in our Cookie Policy. Cookie consent preferences are stored in your browser's localStorage. Non-essential cookies, including those used for analytics and online advertising, are activated only after you give consent through our cookie banner.

4.4 Online Advertising Data

If you consent to marketing cookies, we may use services such as Google Ads to measure the effectiveness of our advertising and understand how visitors reach our website. This may involve processing of pseudonymous identifiers, conversion data, and interaction data. Google processes data as an independent controller or processor under its own terms; see Google's Privacy Policy.

5. Purposes of Processing

We process your personal data for the following purposes:

  • Responding to your inquiries and communications
  • Providing and maintaining our website
  • Analysing website usage (with your consent)
  • Ensuring website security and preventing abuse
  • Complying with legal obligations
  • Measuring and improving the effectiveness of our online advertising (with your consent)

We do not send direct marketing communications by email unless you have given separate, explicit consent. You may object to processing for direct marketing at any time.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: Up to 24 months from the date of your last communication, unless a longer period is required by law.
  • Server logs: Up to 90 days.
  • Cookie consent records: Stored locally in your browser until you clear your browser data.
  • Analytics data: Up to 26 months, if you have consented to analytics cookies.

7. Data Sharing, Processors, and Transfers

We do not sell your personal data. We may share data with the following categories of recipients:

  • Hosting and infrastructure providers located within the European Economic Area (EEA)
  • Analytics providers (e.g. Google Analytics), only with your consent
  • Advertising providers (e.g. Google Ads), only with your consent
  • Content delivery and font providers (e.g. Google Fonts, Cloudflare CDN) that support website delivery
  • Public authorities when required by Finnish or EU law

Where we use service providers to process personal data on our behalf, we enter into data processing agreements as required by Art. 28 GDPR.

If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or an adequacy decision by the European Commission. Transfers to the United States may occur where providers participate in the EU–US Data Privacy Framework or use equivalent safeguards.

8. Your Rights Under GDPR and Finnish Law

As a data subject, you have the following rights:

  • Right of access (Art. 15): Request a copy of your personal data.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your data where legally applicable.
  • Right to restriction (Art. 18): Request limitation of processing.
  • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior lawful processing. You can withdraw cookie consent via our cookie banner or by clearing your browser data.
  • Right not to be subject to automated decision-making (Art. 22): We do not make decisions based solely on automated processing that significantly affect you.

To exercise any of these rights, contact us at inquiry@refreshdetoxifye.world. We will respond without undue delay and, in any event, within one month as required by GDPR and the Finnish Data Protection Act. This period may be extended by two further months where necessary; we will inform you of any extension and the reasons.

We may request information to verify your identity before responding to a rights request. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive.

9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or place of the alleged infringement. In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi
Email: tietosuoja@om.fi

For matters relating to cookies and electronic communications, you may also contact the Finnish Transport and Communications Agency (Traficom): traficom.fi.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption for all data transmission
  • Access controls limiting data access to authorised personnel
  • Regular security assessments of our systems
  • Secure storage of contact form submissions

11. Children's Privacy

Our website is not directed at children. Under the Finnish Data Protection Act, the age of digital consent for information society services in Finland is 13 years. We do not knowingly collect personal data from individuals under 13 without verifiable parental consent. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete it.

12. Provision of Data

Providing personal data through our contact form is voluntary. However, if you do not provide the information requested (name, email, message), we may be unable to respond to your inquiry. Where processing is based on consent, you are not obliged to provide data, and declining consent will not result in detriment beyond the inability to use the related feature.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact

For any questions regarding this Privacy Policy or your personal data, please contact:

Refreshdetoxifye
Kokkolantie 16 B, 44500 Viitasaari, Finland
Email: inquiry@refreshdetoxifye.world
Phone: +358 40 5313277