Privacy Policy

These privacy rules cover the website nordlihas.online, purchases made there, and messages sent to us. The rules do not apply to third-party websites that may be linked from our site.

The data controller for your information is NordLihas Oy, located at Runsorintie 1, 65380 Vaasa, Suomi. You can address questions regarding the register by email to [email protected] or by phone to +358 664 109 535.

Merchant

NordLihas Oy

Registered address

Runsorintie 1, 65380 Vaasa, Suomi

Email

[email protected]

Phone

+358 664 109 535

We collect only data that is justified for day-to-day business and order fulfillment.

3.1 Information you provide directly

From your order, we save your name, delivery address, email, and phone number, as well as the content of your message if you send questions or review our products. We retain order data in accordance with accounting periods and correspondence for a maximum of 3 years after the last contact.

3.2 Payment and transaction data

We record the order number, selected muscle care products, total amount, payment method, and parcel status in our system. Card or online banking details are never entered on the site, and records are retained for the statutory accounting period.

3.3 Automatically collected information

We collect IP addresses, device and browser details, pages viewed, referring URLs, and visit timestamps using server logs and cookies. Data remains in server logs for 30 days and in aggregated analytics for up to 14 months.

3.4 Marketing and advertising data

Information about the link, ad, or campaign through which you found our online store is saved to attribute your visit to that marketing effort. We retain this data for up to 90 days.

3.5 Data received from partners

We attach the delivery status provided by the carrier and confirmation of received bank transfers or payments to your order.

3.6 Children

Our online store is not intended for individuals under 18 years of age, and we do not knowingly collect their data. A guardian may request the deletion of data by sending a message to [email protected].

Your name, street address, email, and phone number are essential for delivering the parcel and contacting you about your order. Without these, ordering is not possible, but providing other details is completely optional.

• For packing your order, delivery, resolving billing queries, and handling any returns and refunds fairly.
• For responding to your inquiries and keeping you informed about delivery progress via email or text message.
• For maintaining website security, preventing disruptions and abuse, and compiling statistics on site performance.
• For sending current tips and offers only when you have subscribed to the newsletter. You can unsubscribe anytime directly via the link in the message.
• To fulfill statutory obligations, including archiving accounting records.

We do not sell anyone's data. We only share it with the partners listed below, who are contractually committed to following our strict instructions.

6.1 Payment processing

Only information needed to process and verify the order payment is shared with the payment provider.

6.2 Shipping and fulfilment partners

The logistics partner receives your name, address, and phone number so recovery products can be delivered and pickup notifications sent.

6.3 Service providers

Website hosting providers, communication systems, and support tools process data on our behalf.

6.4 Advertising and analytics partners

Cookies used for statistics and advertising store data for partners according to our cookie policy only when you have given permission.

6.5 Legal and regulatory disclosures

We may need to disclose data to authorities as required by law or to protect our rights, such as resolving a potential order dispute.

6.6 Business transfers

If our business is sold or merged with another company, the customer registry will transfer to the next owner under the same data protection principles.

Some of our partners may process data in countries outside Finland. In these cases, we rely on standard contractual clauses or adequacy decisions to keep data protection just as secure.

Under applicable regulation the General Data Protection Regulation (GDPR), you have data subject rights under Articles 15-22 GDPR.

8.1 Right to access, rectify, erase, and transfer data

You have the right to access your data, correct errors, or request data deletion. You can also request your data in a standard transfer format, restrict or object to processing, and withdraw previously given consent. Withdrawing consent does not affect prior processing.

8.2 Marketing choices

Our marketing messages always include a direct unsubscribe link. You can disable advertising and analytics cookies through the cookie banner at any time.

8.3 Exercising your rights

Send your request to [email protected]. We may verify your identity before releasing data, and we will respond within 30 days. You can also contact the supervisory authority in Finland if necessary.

Browsing and purchasing in our online store runs over an encrypted HTTPS connection. Orders are stored in secure systems accessible only to employees and partners who require access for their duties. We do not ask for or store payment card details on our website.

Purchase and billing records are retained for the period required by accounting law and then deleted. We keep support messages for up to 3 years from the last message. Server logs are kept for 30 days and aggregated analytics data for up to 14 months. Newsletter consent remains valid until you unsubscribe.

Links from us to other websites, social media channels, or payment providers lead to services with their own policies. We cannot be responsible for the privacy practices of these third parties.

We review and update this policy as our operations or legislation change. The latest version can always be found here, and the date of the latest update is marked at the top of the page.