Privacy policy

Privacy Policy

Sisu Grip Ltd.
Last updated: 20.10.2026

1. General

This Privacy Policy explains how Sisu Grip Ltd. processes personal data on the website and in the online store at www.sisugrip.com.

Sisu Grip Ltd. is a Finnish company whose online store serves customers in Finland, Sweden and elsewhere in the European Union. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

2. Controller and contact details

The controller of personal data is:

Sisu Grip Ltd.
Business ID: 3119729-9
Address: Vantaan yksityistie 135, 04350 Nahkela, Finland
Email: shop@sisugrip.com
Phone: +358 50 5341133

3. Contact person for data protection matters

Sisu Grip Ltd. has not appointed a data protection officer under the GDPR, as the nature and scope of the company’s activities do not require it.

The contact person for data protection matters is the company’s managing director, who can be reached using the contact details above.

4. What personal data do we collect?

We only collect personal data that is necessary for the purposes described below.

In connection with orders and the customer relationship:

  • name
  • email address
  • phone number
  • delivery and billing address
  • order details, such as purchased products, order number and delivery method
  • payment transaction details
  • communication relating to customer service, returns and complaints

We do not store customers’ payment card details in our own systems. Card payments are processed by Shopify Payments. We do not carry out credit checks for invoice payments.

Through forms:

  • information provided via the contact form and the withdrawal form, such as name, email address, phone number, order number and message

In connection with customer reviews:

  • name or nickname, email address, rating, review content and any photos

When using the website:

  • IP address
  • browser and device information
  • information related to cookies and website use, such as pages and products viewed
  • technical information necessary for the shopping cart and the functioning of the online store

5. Where do we obtain personal data?

Personal data is mainly obtained from the customers themselves, for example when they place an order, fill in a form, contact customer service or write a review.

In addition, the online store platform, the payment service, cookies and the analytics and advertising services used on the website collect information when the website is used. Analytics and advertising services only collect information if you have given your consent.

6. For what purposes and on what legal basis is personal data used?

Order processing and delivery

We use personal data to receive, process, charge and deliver orders and to handle returns and complaints.

Legal basis: performance of a contract and legal obligations

Customer service

We use personal data to respond to enquiries, look into orders and manage the customer relationship.

Legal basis: performance of a contract and legitimate interest

Customer reviews

After an order, we send you an email asking you to review the product you purchased. Writing a review is voluntary. When you write a review, we publish it on our website together with the name or nickname you provided. Your email address is not published. You can ask us to remove your review at any time.

Legal basis: legitimate interest (review request) and consent (publication of the review)

Accounting and legal obligations

We retain information relating to orders, payments and accounting as required by law.

Legal basis: legal obligation

Functioning of the online store and information security

We use technical information to ensure the functioning of the online store, prevent misuse and maintain information security.

Legal basis: legitimate interest

Analytics and advertising

We use Google Analytics to analyse the use of the website, and the Meta pixel (Facebook and Instagram) and Google Ads to target our advertising and measure its results. These services are only used if you have accepted analytics and marketing cookies.

Legal basis: consent

Electronic direct marketing

We do not currently send newsletters or other electronic direct marketing. If we start doing so in the future, we will only send it to customers who have given their consent, and consent can be withdrawn at any time.

7. Is providing personal data mandatory?

Placing an order requires providing your name, contact details, delivery address and the information needed for payment. Without this information, we cannot process the order or deliver the product.

Writing a review and accepting analytics and marketing cookies are voluntary.

8. How long is personal data retained?

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or to comply with legal obligations.

  • Order and payment data: for the period required by the Finnish Accounting Act, i.e. six years from the end of the year in which the financial period ended
  • Data relating to customer service, returns and complaints: three years from the order, or longer if required for handling the matter
  • Customer reviews: for as long as the review is published on the website or until you ask us to remove it
  • Analytics and advertising cookies: for the period defined by the service provider, up to two years
  • Technical log data: only for as long as necessary for the functioning and information security of the online store

When there is no longer a basis for retaining personal data, it is deleted or anonymised.

9. Protection of personal data

We protect personal data with appropriate technical and organisational measures. These include, for example:

  • encrypted connections
  • access control and restricted user rights
  • protecting and updating systems
  • limiting the processing of personal data to persons and service providers with a justified need
  • processing card payments in the payment service provider’s system

No electronic system is completely risk-free, but we aim to protect personal data carefully and appropriately.

10. Who do we share personal data with?

We use the following service providers, who process personal data on our behalf and in accordance with our instructions:

  • Shopify (Shopify International Limited, Ireland): online store platform and card payments (Shopify Payments)
  • Judge.me: collection and publication of customer reviews
  • Posti, Matkahuolto and PostNord: delivery of orders
  • Accountant: accounting and legal obligations
  • Sisu Grip Schweiz GmbH (Switzerland): our sister company, which handles part of customer service and marketing on behalf of and in accordance with the instructions of Sisu Grip Ltd.

In addition, we use the following services if you have accepted analytics and marketing cookies:

  • Google (Google Ireland Limited, Ireland): Google Analytics and Google Ads
  • Meta (Meta Platforms Ireland Limited, Ireland): the Meta pixel for Facebook and Instagram advertising

With regard to the Meta pixel, Sisu Grip Ltd. and Meta Platforms Ireland Limited are joint controllers for the collection and transmission of data to Meta. Meta’s own processing of data is described in Meta’s privacy policy at www.facebook.com/privacy/policy.

We do not sell our customers’ personal data to third parties. We may disclose information to authorities if required by law.

11. Is data transferred outside the EU/EEA?

Some of our service providers also process data outside the EU/EEA. In these cases, the transfer is based on the following safeguards:

  • Switzerland (Sisu Grip Schweiz GmbH): European Commission adequacy decision
  • Canada (Shopify): European Commission adequacy decision
  • United States (for example Shopify, Google and Meta): the EU–U.S. Data Privacy Framework or standard contractual clauses approved by the European Commission

For other service providers, we ensure that the transfer has an appropriate basis, such as standard contractual clauses approved by the European Commission.

12. Cookies

Our website uses cookies and other similar technologies. Cookies are used:

  • for the technical functioning of the online store, such as the shopping cart and checkout (necessary cookies)
  • to remember your settings
  • to analyse the use of the website (Google Analytics)
  • to target and measure advertising (Meta pixel and Google Ads)

Necessary cookies are required for the online store to function. Analytics and marketing cookies are only used if you have given your consent.

You can change your cookie settings or withdraw your consent at any time via the website’s cookie settings or your browser settings.

13. Automated decision-making and profiling

Sisu Grip Ltd. does not make automated decisions that would have legal or similarly significant effects on customers.

If you have accepted marketing cookies, Meta and Google may use information collected on the website to target advertising to you. This always requires your consent.

14. Your rights

Under the GDPR, you have the right to:

  • know whether we process your personal data and access it
  • request the correction of inaccurate data
  • request the erasure of your data
  • request the restriction of processing
  • object to the processing of personal data when it is based on legitimate interest
  • receive the data you have provided in a structured, machine-readable format, where the applicable conditions are met
  • withdraw your consent at any time

To exercise your rights, please contact us by email at shop@sisugrip.com. We may need to verify your identity before fulfilling your request. We respond to requests without undue delay and at the latest within one month of receiving the request.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (www.tietosuoja.fi). You can also lodge a complaint with the supervisory authority in your country of residence or work.

15. Changes to this Privacy Policy

We may update this Privacy Policy, for example when legislation, the operations of the online store or our service providers change. The current Privacy Policy is always available on our website.

16. Contact

For questions relating to data protection, please contact:

Sisu Grip Ltd.
Email: shop@sisugrip.com
Phone: +358 50 5341133
Address: Vantaan yksityistie 135, 04350 Nahkela, Finland