What we collect
The contact and order details needed to make and deliver your order.Who sees it
Shopify (shop and checkout), our production partners, carriers and our payment processing.Your choice
TikTok's ad cookie is only set if you accept it, and you can change your mind any time.Your rights
See, correct, delete or take a copy of your data. Just email us.
Who is responsible
The data controller responsible for your personal data is:
- Seller
- Nexus Brands (trading as Jouri & Co.)
- Business form
- Sole trader (yksityinen elinkeinonharjoittaja)
- Business ID
- 3371592-6
- VAT number
- FI33715926
- Address
- Niittylaakso 27, 02760 Espoo, Finland
- jouriandco@outlook.com
For anything about your data, email jouriandco@outlook.com.
What we collect
- Order details: your name, email, shipping and billing address, phone number if you give one, what you ordered and your order history.
- Payment details: payments are processed through Shopify's checkout. We only see limited details such as the card type, the last four digits and the payment status, never your full card number.
- Messages: what you send us by email or social media direct message.
- Technical data: when you visit the website, our hosting provider and Shopify process your IP address, browser type and request logs to deliver the site and keep it secure.
- Browsing data, only if you accept TikTok's cookie: the pages and products you view, what you add to your bag and when you start checkout, sent to TikTok together with its cookie and your IP address and browser details.
Why we use it
| Purpose | Legal basis (GDPR) | How long we keep it |
|---|---|---|
| Taking, making and delivering your order, and customer service about it | Performing our contract with you | For as long as needed to fulfil the order and handle returns or claims |
| Bookkeeping and tax | Legal obligation | At least 6 years after the end of the financial year, as required by the Finnish Accounting Act |
| Preventing fraud and keeping the shop secure | Our legitimate interest in a safe shop | As long as needed for that purpose |
| Answering messages you send us | Our legitimate interest in replying to you | Up to 24 months after the conversation ends |
| Newsletters, only if you opt in (for example with the box at checkout) | Your consent | Until you unsubscribe or withdraw consent |
| Seeing which of our TikTok videos and ads bring visitors, and showing them to people likely to be interested, only if you accept TikTok's cookie | Your consent | Until you withdraw consent. TikTok's cookie expires after 13 months |
Shopify may flag an order as a fraud risk. A person, not an automated system, always decides what happens to the order. We don't make decisions about you based solely on automated processing, and we don't sell your data.
Transfers outside the EEA
Some of these providers, or their subcontractors, are located outside the European Economic Area, for example Shopify (Canada and the US), Vercel Inc. (United States) and TikTok, if you accept its cookie. Such transfers rely on an EU adequacy decision, the EU–US Data Privacy Framework, or the EU's Standard Contractual Clauses. If you order for delivery outside the EEA, your order is produced and delivered there, and sharing your details for that is necessary to fulfil your order.
Your rights
Under the GDPR you have the right to:
- get a copy of the personal data we hold about you
- have incorrect data corrected
- have your data deleted, unless we must keep it by law (for example bookkeeping)
- restrict or object to processing based on our legitimate interests
- receive the data you gave us in a machine-readable format
- withdraw consent at any time, for example by unsubscribing from emails
Email jouriandco@outlook.com and we'll respond within one month. You can also complain to the Finnish Office of the Data Protection Ombudsman or to the data protection authority where you live.
Changes
If we change how we handle personal data, we'll update this page and the date at the top.