1. Data Controller
Quarrionskyx
Annankatu 21, 00100 Helsinki, Finland
Email: info@quarrionskyx.world
2. Purposes of Processing
We process your personal data to: process orders, respond to enquiries, send order confirmations, fulfil legal obligations, and improve our services with your consent where required.
3. Legal Basis (GDPR)
We rely on: contract performance (order processing), legal obligation (tax, consumer rights), legitimate interest (customer service), and consent (marketing, analytics) where applicable.
4. Data We Collect
We may collect: name, email address, phone number, delivery address, order history, payment information (processed by payment providers), and communications related to your orders.
5. Data Retention
Order data: up to 7 years for legal/tax purposes. Marketing data: until consent withdrawn. Enquiry data: up to 2 years. You may request erasure earlier where legally permitted.
6. Your Rights (GDPR)
- Right of access to your data
- Right to rectification
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
To exercise your rights, contact us at info@quarrionskyx.world.
7. Data Security
We implement appropriate technical and organisational measures: encrypted connections (HTTPS), secure storage, access controls, and staff training. No method of transmission over the internet is 100% secure.
8. Data Sharing
We may share data with: payment processors, delivery partners, and service providers who process data on our behalf under strict agreements. We do not sell your data.
9. International Transfers
Where data is transferred outside the EEA, we ensure adequate safeguards (e.g. Standard Contractual Clauses) as required by GDPR.
10. Updates
We may update this policy. Changes will be posted on this page with an updated revision date.