Tarina Engravers - Privacy Policy

Privacy Policy

Last updated 28 October 2026.

This policy explains how Tarina Engravers Oy handles personal data under the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.

1. Controller

Tarina Engravers Oy (Business ID 3660000-8), Pakkalanrinne 2, 01510 Vantaa, Finland. Contact for privacy matters: hello@tarinaengravers.fi, +358 45 872 2919.

2. What we collect and why

Orders: name, email, phone, delivery address, the delivery time we agree, the text, photos or artwork to engrave, and for business orders company name and VAT number. Used to make and deliver your order and to answer questions about it. Basis: contract (Art. 6(1)(b)). Order and receipt records are also kept to meet accounting and tax law (Art. 6(1)(c)).
Account (optional): name, email, phone, password (stored encrypted) and order history. Basis: contract.
Contact form and emails: what you send us. Basis: our legitimate interest in answering you (Art. 6(1)(f)).
Back-in-stock alerts: your email and the product. Used once to tell you it is available. Basis: your request (Art. 6(1)(b)).
Reviews: the name you give is shown with your review.
Technical data: IP address and browser details in server logs, used to run and protect the site. Basis: legitimate interest.

We send emails about your orders (confirmation, status updates, delivery) and may call or text you to agree the delivery time. We do not send marketing emails, and we do not use your data for automated decisions or profiling.

3. Who processes your data for us

Stripe (Stripe Payments Europe Ltd, Ireland): payments.
Klarna (Klarna Bank AB, Sweden): only if you choose to pay with Klarna.
SmarterASP.NET (EU data centre in the Netherlands): hosts this website, its database and the photos and logos you upload for engraving, sends our order emails and holds the emails we exchange with you.
Holvi (Holvi Payment Services Oy, Finland), our business bank, and Kitsas (Kitsas Oy, Finland), our bookkeeping software, and our accountant: order and payment records for bookkeeping.

We deliver orders ourselves, so your name and address are not passed to a delivery company. Fonts, icons and scripts are served from our own server, so browsing the shop does not send your IP address to Google or other content networks. Where a provider handles data outside the EU/EEA (for example a service based in the USA), the transfer relies on the EU–US Data Privacy Framework or EU Standard Contractual Clauses. We never sell personal data.

Visitor statistics are counted by this website itself, without cookies: the page viewed, the site you came from (if any) and the type of device. To count each visitor only once a day, your IP address and browser details are turned into an anonymous code that changes every day; the IP address itself is not stored. Nothing is shared with anyone, and these records are deleted after 13 months.

4. How long we keep it

Photos, logos and artwork you send for engraving: deleted about three months after your order is delivered.
Contact form messages and emails not needed for an order: about one year.
Back-in-stock alerts: until the alert is sent, or at most about one year.
Orders and receipts: as the Finnish Accounting Act requires, receipts for six years and the accounts for ten years after the end of the financial year.
Accounts: until you ask us to delete your account. Your orders stay, as above.

5. Your rights

You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to its use, and get it in a portable format. Email hello@tarinaengravers.fi; we answer within one month. When you ask us to delete your account we remove your account, saved cart, wishlist, alerts and messages; order records are kept only as accounting law requires.

You can complain to the Office of the Data Protection Ombudsman (tietosuoja.fi).

6. Cookies

We only use cookies that the shop needs to work, so we do not ask for cookie consent:

TarinaCartId: remembers your basket and wishlist, 30 days.
TarinaUserInfo: keeps you signed in, 30 days (encrypted).
ASP.NET_SessionId: keeps your visit together, until you close the browser.

We use no analytics, advertising or social media tracking cookies.