Privacy Policy

1. Data Controller

Little Parcel Oy
Helsinki, Finland
Business ID (Y-tunnus): 3542213-1
VAT: FI35422131
Email: info@littleparcel.fi

2. Categories of Data

• Order and delivery data: name, billing/shipping address, email, phone number, ordered products, order value, and shipping status.
• Payment metadata: payment status and transaction references from Shopify/payment providers (we do not store full card numbers).
• Support communications: messages you send to us and related support history.
• Newsletter data: email address, consent log, subscription status, and opt-in/opt-out events.
• Technical data: IP address, browser/device information, and cookie identifiers where applicable.

3. Purposes and Legal Bases

• Order processing and delivery: contract performance (GDPR Art. 6(1)(b)).
• Accounting, tax, and legal obligations: legal obligation (GDPR Art. 6(1)(c)).
• Customer support and fraud/security monitoring: legitimate interest (GDPR Art. 6(1)(f)).
• Newsletter marketing: consent (GDPR Art. 6(1)(a)).
• Optional analytics cookies: consent (GDPR Art. 6(1)(a)).

4. Recipients and Processors

• Shopify and payment partners: checkout, payment, and order management.
• Shipping and fulfillment partners: order delivery, including cross-border logistics.
• Email/SMTP provider: transactional and newsletter confirmation emails.
• Analytics provider (if enabled with consent): website performance and traffic analysis.

5. International Transfers

Some processors and fulfillment partners may process personal data outside the EEA. Where this happens, transfers rely on appropriate safeguards such as the European Commission Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful transfer mechanisms.

6. Retention Periods

• Order/accounting records: retained as required under Finnish accounting and tax legislation.
• Support messages: retained for as long as needed to resolve requests and handle potential disputes.
• Newsletter pending records: automatically removed after up to 90 days.
• Newsletter unsubscribe/suppression records: retained to prevent unwanted marketing sends.
• Analytics data: retained according to configured analytics retention settings.

7. Your GDPR Rights

You may have the right to access, rectify, erase, restrict, or object to processing, and the right to data portability where applicable. You may also withdraw consent at any time for consent-based processing (for example newsletter and optional analytics cookies).

To exercise your rights, contact info@littleparcel.fi.

8. Cookies and Analytics

We use strictly necessary cookies for essential site functionality. Optional analytics cookies are only activated after your consent.

If you change your mind, you can update your preference at any time using Cookie Settings.

9. Complaints

If you believe your data has been processed unlawfully, you can contact us first. You also have the right to lodge a complaint with your local data protection authority, including in Finland with the Office of the Data Protection Ombudsman.