Privacy Policy
Last updated: January 2025
Evalue Praxis Oy ("we", "us", "our") operates the website frozencapeshop.com (the "Website") and the associated online store. We are committed to protecting your privacy and handling your personal data in a transparent, secure, and lawful manner in accordance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679), Finnish data protection legislation, and other applicable laws.
This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, how long we keep it, and what rights you have regarding your data.
1. Controller of Personal Data
The controller of your personal data is:
Evalue Praxis Oy Business ID (Y-tunnus): 0833176-0 [Insert full registered address here, e.g. from official records – commonly in Espoo/Helsinki area based on public info; please confirm and add exact street address] Finland Email: [insert your contact email, e.g. info@frozencapeshop.com or kari@brands4globe.com if still relevant] Phone: [insert if available]
You can contact us at any time regarding your personal data or this Privacy Policy.
2. Personal Data We Collect
We collect and process the following categories of personal data:
- Identification and contact data: Name, email address, phone number, delivery and billing address (when you place an order or create a customer account).
- Order-related data: Products purchased, order date, order number, payment method (not full card details), order status, and related correspondence.
- Account data: Username/email, password (stored hashed), order history (if you create and log into a customer account).
- Technical and usage data: IP address, browser type and version, device information, operating system, pages visited, time and date of visit, referral source (automatically collected via cookies and similar technologies).
- Analytics and advertising data: Aggregated usage statistics and advertising interaction data via Google Analytics and Google Ads.
We do not collect special categories of personal data (sensitive data) or data about children.
3. Sources of Personal Data
We collect data directly from you when you:
- Place an order as a guest or logged-in customer
- Create or use a customer account
- Contact us (e.g. via email)
We also receive technical data automatically from your browser/device.
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and on the following legal bases:
| Purpose | Personal Data Categories | Legal Basis (GDPR) |
| Processing and fulfilling orders, delivery, invoicing, customer service | Identification, contact, order-related | Contract (Art. 6(1)(b)) |
| Maintaining and providing customer account functionality | Account data, order history | Contract (Art. 6(1)(b)) |
| Ensuring website security, preventing fraud | Technical data, IP address | Legitimate interest (Art. 6(1)(f)) |
| Website analytics and improvement | Technical & usage data | Legitimate interest (Art. 6(1)(f)) |
| Targeted online advertising (remarketing) | Technical data, advertising interaction | Legitimate interest (Art. 6(1)(f)) or consent where required (Art. 6(1)(a)) |
We do not currently send marketing emails or newsletters. If we introduce such features in the future, we will obtain your explicit consent and update this policy.
5. Cookies and Similar Technologies
Our Website uses cookies and similar technologies. For details, see our separate Cookie Policy [link to it if you create one; otherwise describe briefly here or refer to Odoo's cookie banner].
6. Recipients and Data Transfers
We share your personal data only when necessary:
- Payment processor: Stripe (processes payments; their privacy policy: https://stripe.com/privacy)
- Shipping providers: UPS and Posti (for delivery; their privacy policies apply after handover)
- Analytics & advertising: Google LLC (Google Analytics and Google Ads; data may be transferred to the US under EU-U.S. Data Privacy Framework or Standard Contractual Clauses)
- Hosting & technical providers: Odoo or related cloud providers (EU-based where possible)
We do not sell your personal data. All third parties are processors bound by GDPR-compliant agreements.
7. International Data Transfers
Some recipients (e.g. Google, Stripe) are located outside the EU/EEA (primarily the US). Such transfers are safeguarded by:
- EU-U.S. Data Privacy Framework participation (where applicable), or
- EU Standard Contractual Clauses
You can request a copy of the safeguards by contacting us.
8. Data Retention
We retain your personal data only as long as necessary:
- Order data: 6 years (accounting and warranty/legal claims under Finnish law)
- Customer account data: Until you delete the account or request deletion (inactive accounts may be deleted after 2–3 years)
- Technical/log data: Typically 14–26 months (Google Analytics default)
Afterwards, data is anonymized or deleted.
9. Your Rights
Under GDPR you have the right to:
- Access your data
- Rectify inaccurate data
- Erase data (in certain cases)
- Restrict processing
- Data portability
- Object to processing (especially legitimate interest-based)
- Withdraw consent (if used)
- Lodge a complaint with the supervisory authority: Tietosuojavaltuutetun toimisto (Finland) – www.tietosuoja.fi
To exercise your rights, contact us at the email/address above. We respond within one month (extendable if complex).
10. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction (e.g. encryption, access controls, secure hosting).
11. Changes to This Policy
We may update this Privacy Policy. Changes will be posted here with an updated "Last updated" date. Significant changes may be notified via the Website or email.
Contact Us
For any questions about this Privacy Policy or your personal data, please contact:
Evalue Praxis Oy sales@frozecapeshop.com
Thank you for trusting us with your data.