Privacy
Who we are
MALLA.one OY ("we") sells handmade bags online. Contact: hello@malla.one. Business ID (Y-tunnus): 3645051-3. Registered address: Nuottalahti 2 A 2, 02230 Espoo, Finland.
What we collect
When you buy: name, email, phone, shipping address, and payment status, processed by Stripe. When you withdraw from a purchase: your name, what you tell us about the contract, and the email address for the acknowledgement. When you write to us or join the new-bag list: the email and message you send. We measure page views with Vercel Web Analytics, which sets no cookies and does not identify you. We do not run advertising cookies or tracking pixels.
Why we use it
To fulfil orders, handle returns, answer messages, and (if you opt in) tell you when a new bag is listed. Legal bases: contract performance for orders, legitimate interest for ops email, consent for the mailing list.
Who we share with
Stripe (payments and tax calculation), Resend (email), Posti and Matkahuolto (shipping, when an order is booked), Upstash (secure storage of availability, withdrawal notices, and mailing-list addresses), and our hosting provider (Vercel). We do not sell your data.
How long we keep it
Order records, including withdrawal notices, for as long as tax and consumer law require. Mailing-list addresses until you ask to leave. Contact messages long enough to resolve them.
Your rights
Under the GDPR you can ask for access, correction, deletion, or restriction, and complain to the Finnish Data Protection Ombudsman (tietosuoja.fi). Email us to exercise a right.