Last updated 27 October 2026
This policy explains what personal data we collect when you visit our website or buy from us, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
The data controller is Decent Enterprises Oy (Business ID 2800683-4), Kilonrinne 10 B 48, 02610 Espoo, Finland. For anything about your data, email Athic.enterprise@gmail.com.
What we collect and why
When you place an order
- Name, delivery and billing address, email, phone number and the products you bought.
- Why: to deliver your order, send order emails and handle returns and complaints (performing our contract with you), and to keep the accounting records the law requires (legal obligation).
When you pay
- Payment details go straight to our payment providers (WooPayments, powered by Stripe, and PayPal). We never see or store your full card number. We receive confirmation of payment and limited details such as the card type and last four digits.
- The payment providers also use device and browser information to prevent fraud (our and their legitimate interest in secure payments).
If you create an account
- Your login details, addresses and order history, so you can track orders and check out faster (contract).
When you contact us
- What you send us by email, phone or the contact form, so we can reply (legitimate interest, or contract if it concerns an order).
If you sign up for our emails
- Your email address, to send news and offers, only with your consent (consent). You can unsubscribe at any time with the link in every email.
When you browse the website
- Technical data such as your IP address, browser and pages visited, to run the website securely and understand how it is used (legitimate interest). See Cookies below.
Who we share data with
We only share what each service needs to do its job:
- Hosting: Hostinger (our shop) and the hosting provider of this website.
- Shop software: WooCommerce and WordPress, with Jetpack/WooCommerce Analytics for shop statistics.
- Payments: WooPayments (Automattic, powered by Stripe) and PayPal.
- Email: MailPoet, for order and newsletter emails.
- Delivery: the delivery company that carries your parcel, which receives your name, address and phone number.
- Authorities, such as the tax authority, when the law requires it.
Some of these providers are based in, or transfer data to, countries outside the EU/EEA, including the United States. Where they do, the transfer is protected by the EU Commission's adequacy decision for certified companies (EU–US Data Privacy Framework) or by Standard Contractual Clauses.
How long we keep data
- Order and accounting records: as long as the Finnish Accounting Act requires (generally 6 years after the end of the financial year, and up to 10 years for some records).
- Your account: until you ask us to close it.
- Customer service messages: up to 2 years after the matter is resolved.
- Newsletter: until you unsubscribe.
Your rights
You have the right to:
- see the data we hold about you and get a copy of it;
- have incorrect data corrected;
- have your data deleted, unless we must keep it by law;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- receive data you gave us in a machine-readable format;
- withdraw your consent at any time, where we rely on consent.
To use any of these rights, email Athic.enterprise@gmail.com. We reply within one month.
You can also complain to the Finnish supervisory authority, the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
Cookies
Cookies are small files stored by your browser. We use:
- Necessary cookies: to keep your cart (for example
athic_carton this website and WooCommerce's cart cookies at checkout), keep you logged in, and protect payments against fraud (Stripe's__stripe_midand__stripe_sid). The shop cannot work without these. - Order attribution cookies (
sbjs_*): these record which page or link brought you to the shop, so we can see which of our pages lead to orders. - Statistics cookies (
tk_*): Jetpack/WooCommerce Analytics, used to understand how the shop is used.
You can delete or block cookies in your browser settings. If you block necessary cookies, the cart and checkout will not work.
Changes to this policy
We may update this policy. The latest version is always on this page, with the date it was last changed.