Privacy Policy

1. Data Controller

Hoikka ("we", "us") is the data controller responsible for processing your personal data in accordance with the EU General Data Protection Regulation (GDPR).

2. What Data We Collect

• Name and email address (when you create an account or place an order)
• Shipping address (when you place an order for physical products)
• Order history and transaction details
• Product reviews and ratings you submit
• Wishlist data

3. Why We Process Your Data

We process your personal data for the following purposes:

• Order fulfillment — to process and deliver your orders (legal basis: contract performance)
• Account management — to maintain your customer account (legal basis: contract performance)
• Communication — to send order confirmations and shipping updates (legal basis: legitimate interest)

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Order data is retained for the period required by applicable accounting and tax regulations.

5. Data Sharing

We do not sell your personal data. We may share data with third-party service providers (payment processors, shipping carriers) solely to fulfill your orders. These providers process data only on our behalf and under our instructions.

6. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us using the details below.

7. Analytics

We use Vercel Web Analytics to collect anonymous usage data such as page views. This service does not use cookies, does not collect personal data, and does not track individual users (legal basis: legitimate interest).

8. Cookies

We use essential cookies only: a session cookie for authentication and a cart token cookie for maintaining your shopping cart. These are strictly necessary for the site to function and do not require consent.

9. Contact

For any questions about this privacy policy or your personal data, please contact us at privacy@hoikka.dev.