Privacy Policy

Our Privacy Policy
Any sale made through our webshop is governed by the terms and conditions of the Finnish Sales of Goods Act.
When placing an order, a customer shall provide requisite contact details, as necessary, to facilitate the delivery of that order. These include the name, address, phone number and/or e-mail address.
Customer data may be saved in an electronic customer register, and this information is used for the purpose of maintaining customer relationships. Inkuto will not use your data for any other purposes, nor sell or otherwise make that data available to third parties, except where necessary for providing webshop-related services.
Inkuto undertakes to respect all customers’ privacy and to protect their data.
After a purchase has been made, the customer may receive an invitation to give a product review. Responding to this invitation is voluntary. The invitation only concerns products already purchased by the customer. The review is shown without publicly revealing the customer’s contact details. Inkuto uses information from product reviews to improve customer experience and services.
Inkuto’s website uses cookies to enable the development of the website and to make it more user-friendly. The purpose of cookies is to ease, improve, and speed up the user experience. Cookies may also be used to provide better-targeted offers and product recommendations to customers.
The user’s browser is likely to accept cookies as a default setting, but the user can also disable cookies in the browser settings or by deleting cookies from the browser at the end of each use.

Data Controller and Contact Details
The data controller is Inkuto International Oy (Business ID 2306810-4), trading under the business name Inkuto Organics, Lapinlahdenkatu 23 A 56, 00180 Helsinki, Finland.
Contact: info@inkuto.com
Phone: +358(0)407515178

Purposes and Legal Bases for Processing
Personal data is processed to handle and deliver orders, manage customer relationships, provide customer service, and improve services.
The legal basis for processing order and customer data is the performance of a contract and the legitimate interest of the company in operating and developing its business.
Product review invitations are sent based on legitimate interest, and responding is voluntary.
Google Analytics, tracking technologies, and similar cookies are used to analyse website use, improve the website, and support advertising and product recommendations. Such non-essential cookies and tracking technologies are used on the basis of consent, where required by applicable law.

Recipients of Data
Personal data may be shared only to the extent necessary with service providers involved in operating the webshop, such as payment service providers, delivery partners, IT service providers, hosting providers, and analytics or advertising partners.
Personal data is not sold to third parties.

Transfers Outside the EU/EEA
Because the website may use services provided by Google and Meta, some personal data may be processed outside the European Union or European Economic Area.
Where such transfers take place, appropriate safeguards required by data protection law are used, such as contractual safeguards provided by the relevant service provider.

Storage Period
Personal data is stored only for as long as necessary for the purposes described in this Privacy Policy and to comply with legal obligations, such as accounting obligations.
As a general estimate, order-related customer data may be retained for up to 6 years after the last purchase, unless a longer retention period is required by law.

Data Subject Rights
The customer has the right to request access to personal data, correction of inaccurate data, deletion of data, restriction of processing, and data portability, and to object to processing based on legitimate interest.
Where processing is based on consent, the customer also has the right to withdraw consent at any time.

Right to Lodge a Complaint
If the customer believes that personal data has been processed unlawfully, the customer has the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland.