Privacy Policy

Data controller

• Fero Clothing Oy
• Business ID: 3094114-3
• Email: samu@fero.fi

If you have any questions about this policy or your personal data, contact us at the email address above.

What data we collect

We only collect the data we need. This website has no contact form, no user accounts, no analytics and no advertising trackers.

• Emails you send us: your name, email address, the content of your message and anything you choose to include, such as your company name, phone number, or texts and images for your website.
• Customer information: if you become a customer, your contact details, company details, the agreed work and billing information.
• Technical data: when you visit the website, our hosting provider automatically processes technical data such as your IP address, browser type and the time of your visit. This is needed to deliver the website and keep it secure.
• Language preference: the website remembers the language you chose (Finnish, English or Swedish) in your own browser. This stays on your device and is not sent to us.

Why we use your data and on what legal basis

• To reply to your enquiry and prepare a quote – steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in answering messages (Art. 6(1)(f)).
• To deliver the services we have agreed on, such as building and maintaining your website – performance of a contract (Art. 6(1)(b)).
• To keep the accounting and other records the law requires – legal obligation (Art. 6(1)(c)).
• To run the website securely and prevent misuse – our legitimate interest (Art. 6(1)(f)).

We do not sell your personal data, use it for advertising, or make decisions about you based solely on automated processing, including profiling.

Who we share data with

We only share personal data with service providers who help us run our business and who process it on our behalf under a data processing agreement:

• Website hosting provider – delivers this website and processes technical data.
• Email service provider – stores and delivers our email.
• Google Fonts (Google Ireland Limited) – the website's fonts are loaded from Google's servers, so your browser sends your IP address to Google when the page loads. See Google's privacy policy at policies.google.com/privacy
• Accounting services – for customer billing records.

We may also disclose data to authorities when the law requires it.

Transfers outside the EU/EEA

Some of our service providers may process data outside the European Union or the European Economic Area, for example in the United States. In those cases the transfer is protected by appropriate safeguards, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep data

• Enquiries that don't lead to a customer relationship: up to 2 years from our last contact, after which they are deleted.
• Customer and project information: for as long as the customer relationship lasts and up to 2 years after it ends.
• Accounting records: as long as Finnish accounting law requires (generally 6–10 years).
• Technical log data: kept by our hosting provider only as long as needed for security and troubleshooting.

Your rights

Under the GDPR you have the right to:

• get a copy of the personal data we hold about you
• have incorrect data corrected
• have your data deleted
• restrict or object to how we process your data
• receive your data in a machine-readable format (data portability)
• withdraw your consent at any time, where processing is based on consent

To use any of these rights, email us at samu@fero.fi. We will reply within one month.

If you think we handle your data unlawfully, you can lodge a complaint with the Finnish supervisory authority, the Office of the Data Protection Ombudsman (tietosuoja.fi/en), or with the supervisory authority in your own EU country.

Security

We protect personal data with appropriate technical and organisational measures. The website is served over an encrypted (HTTPS) connection, and access to emails and customer records is limited to those who need it for their work.

Changes to this policy

We may update this policy when our services or the law change. The latest version is always on this page, with the date it was last updated at the top.