Privacy Policy

Effective date: 1 April 2026

Kultakori AfroMart ("we", "our", "us") is committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection law.

1. Data Controller

Kultakori AfroMart, Tampere, Finland. Contact: support@kultakoriafromart.fi.

2. Personal Data We Collect

We collect the following categories of personal data when you use our website or place an order: • Identity data: first name, last name • Contact data: email address, phone number, delivery address • Order data: products purchased, order history, special instructions • Payment data: payment method type and transaction reference (full card details are processed by our payment provider and never stored by us) • Technical data: IP address, browser type, cookies, and usage data collected via analytics tools

3. Legal Basis for Processing

We process your personal data on the following legal bases: • Contract performance: to fulfil your orders and provide our services • Legal obligation: to comply with Finnish tax, accounting, and consumer protection requirements • Legitimate interest: to improve our website, prevent fraud, and send order-related communications • Consent: for marketing emails and non-essential cookies (you may withdraw consent at any time)

4. How We Use Your Data

Your personal data is used to: • Process and deliver your orders • Communicate order confirmations, updates, and delivery notifications • Respond to customer service enquiries • Comply with legal and financial reporting obligations • Improve website functionality and user experience • Send promotional offers only if you have explicitly opted in

5. Payment Processing

Payments are processed through PCI-DSS-compliant third-party providers. We do not store your full card number or CVV. Transaction references are retained for accounting and dispute resolution purposes. By placing an order, you agree to the payment provider's own terms and privacy policy.

6. Data Sharing & Third Parties

We may share your data with trusted third parties only as necessary: • Delivery and logistics partners (for order fulfilment) • Payment processors (Stripe or equivalent) • Cloud infrastructure and image hosting (Cloudinary) • Analytics providers (aggregated, anonymised where possible) • Authorities if required by Finnish law or court order We do not sell your personal data to third parties.

7. Cookies

We use essential cookies required for the site to function, and optional analytics cookies to understand how visitors use our site. You can manage cookie preferences via the cookie banner displayed on your first visit. Refusing non-essential cookies does not affect your ability to shop.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above. Order and financial records are kept for a minimum of 7 years to comply with Finnish accounting legislation (Kirjanpitolaki). Inactive account data is deleted after 3 years of inactivity, unless a longer retention period is required by law.

9. Your Rights Under GDPR

As a data subject you have the right to: • Access: request a copy of the personal data we hold about you • Rectification: request correction of inaccurate or incomplete data • Erasure ("right to be forgotten"): request deletion of your data where no legal obligation requires us to retain it • Restriction: request that we restrict processing of your data • Portability: receive your data in a structured, machine-readable format • Object: object to processing based on legitimate interests or for direct marketing • Withdraw consent: at any time for consent-based processing To exercise any right, contact us at support@kultakoriafromart.fi. We will respond within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our systems use HTTPS encryption for all data in transit. Access to personal data is restricted to authorised personnel only.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via a prominent notice on our website. Continued use of the site after the effective date of any update constitutes acceptance of the revised policy.

12. Contact

For any privacy-related enquiries or to exercise your rights, please contact us: Email: support@kultakoriafromart.fi Tampere, Finland