Tietosuojakäytäntö

PRIVACY POLICY (GDPR)

Updated: December 3, 2025 Current privacy policy for QZ-Boys company's Nablit Joe online store

1. Data Controller

Company: QZ-Boys Brand: Nablit Joe Business ID: 1426231-9 Address: Djupsjöbackantie 267, FI-68700 TEERIJÄRVI, Finland Email: info@nablitjoe.com

The data controller is responsible for processing personal data and ensuring data protection in accordance with the EU General Data Protection Regulation (GDPR).

2. What Information Do We Collect?

We collect the following personal data to provide our services:

Information provided by the customer:

  • Name
  • Address
  • Email
  • Phone number
  • Order contents
  • Payment information (through payment service provider)

Technical information:

  • IP address
  • Location at city level
  • Device information
  • Cookies and tracking (Shopify, Klaviyo, Google, Meta)

Marketing information:

  • Consents and opt-outs
  • Email open and click data (Klaviyo)

3. For What Purposes Do We Process Information?

We process information for the following purposes:

  • Order processing
  • Receiving payments
  • Product delivery
  • Customer service
  • Email marketing (Klaviyo)
  • Analytics and development
  • Fraud prevention (Shopify)

Information is not sold or disclosed to third parties unless necessary to provide the service (e.g., logistics and payment services).

4. Data Retention Period

  • Order information is retained for 6 years in accordance with accounting legislation.
  • Marketing-related information is deleted upon request or when no longer necessary.
  • Web behavior data is retained for 12-36 months (depending on cookie settings).

5. Third Parties to Whom Information Is Transferred

We use the following service providers:

Shopify (e-commerce platform) Shopify processes customer data for order management and fraud prevention.

Klaviyo (email marketing) Processes email and marketing data in accordance with EU/USA protection mechanisms.

Payment services (PayPal, Shopify Payments, Klarna, etc.) Only see information necessary for payment processing.

Shipping services (e.g., Posti, DHL) Receive for delivery purposes:

  • Name
  • Address
  • Phone number

6. Cookies

We use cookies for:

  • Website functionality
  • Shopping cart memory
  • Analytics
  • Advertising targeting

Customers can manage cookies through browser settings and our website's cookie banner.

7. Data Transfer Outside the EU/EEA

Some service providers (Shopify, Klaviyo) operate in the United States. Transfers are based on approved mechanisms:

  • Standard Contractual Clauses (SCC)
  • Necessary safeguards

8. Customer Rights

Customers have the right to:

  • Access their own data
  • Correct incorrect information
  • Request deletion of data
  • Restrict processing
  • Object to marketing
  • Withdraw consent
  • Transfer data from one system to another

To exercise these rights, contact us at: 📩 info@nablitjoe.com

9. Data Security

We protect personal data with technical and organizational measures:

  • Encryption
  • Access control
  • Firewalls
  • Log monitoring
  • Secure server connections

10. Processing Personal Data Based on Contracts

We process information when necessary for:

  • Order delivery
  • Payment processing
  • Fulfilling legal obligations (accounting)

11. Changes to Privacy Policy

We reserve the right to update this policy. The latest version is always available at: 🔗 https://nablitjoe.com/policies/privacy-policy