Guides & policies
Privacy policy
Who holds your data, why we hold it, who else sees it, and how you ask us to change or delete it. Written for GDPR and Finnish law — not as a wall of footnotes.
Controller
Kitdesk, Helsinki
The controller is Kitdesk, Kalevankatu 12, 00100 Helsinki. Desk: tuki@nordpulse.fi. We process what we need to sell a jersey and run the desk: name, email, phone, delivery address, order history, login identifiers, giveaway entries you submit, job applications, and newsletter addresses you give us.
Payments run through Stripe. The full card number never sits on our servers. Live chat messages stay on the thread so we can answer you — we do not ask for a password or a card in that window.
Why we process
Contract: the order, delivery, returns, and your account. Legal obligation: accounting and consumer-law records. Legitimate interest: fraud checks and a named desk that can open your file. Consent: the desk list, optional analytics, and the weekly jersey draw.
How long we keep it
Orders and invoices follow the Finnish Accounting Act. An account stays until you delete it. A newsletter address stays until you unsubscribe or ask us to erase it. Giveaway entries are kept for the campaign and a short audit window after the draw. Chat threads are kept so we can resume a case.
Disclosures
Who else sees a field
Carriers receive name, phone, and address so the parcel can move. Accounting receives what the law requires. Stripe sees the payment. We do not sell, rent, or trade the customer register to third-party marketers. Authority requests are handled case by case, in writing.
Your rights
Access, correction, erasure, objection
You may ask for a copy, a correction, deletion (where the law allows), a restriction, or to object to processing based on legitimate interest. Marketing consent can be withdrawn at any time — unsubscribe in the email, or write to the desk. We reply from Helsinki.
You may also lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu). More on who receives data: How we use and share information.
Helsinki fulfilment · 30-day unused-jersey returns · Card payments via Stripe · Desk in Finnish and English · tuki@nordpulse.fi · Customer service hub