Privacy policy

Privacy Policy

Sisu Grip Ltd.
Last updated: 18.6.2026

1. General

This Privacy Policy explains how Sisu Grip Ltd. processes personal data on its website and online store at www.sisugrip.com.

Sisu Grip Ltd. is a Finnish company whose online store serves customers in Finland and within the European Union. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.

2. Controller and Contact Details

The controller of personal data is:

Sisu Grip Ltd.
Business ID: 3119729-9
Address: Raatinniituntie 36, 04350 Nahkela, Finland
Email: shop@sisugrip.com
Phone number: +358 50 5341133

For questions related to data protection and the processing of personal data, you can contact us by email at shop@sisugrip.com.

3. Contact Person for Data Protection Matters

Sisu Grip Ltd. has not appointed an official Data Protection Officer under the EU General Data Protection Regulation, as the nature and scale of our business do not require this.

The contact person for data protection matters is the company’s CEO, who can be reached using the contact details listed above.

4. What Personal Data Do We Collect?

We only collect personal data that is necessary for the operation of the online store, customer service, order processing, deliveries, payments and compliance with legal obligations.

We may process the following data:

In connection with orders and the customer relationship:

  • name
  • email address
  • phone number
  • delivery address
  • billing address
  • order details
  • payment transaction details
  • customer service communication

We do not store customers’ payment card details in our own systems.

In connection with the use of the website:

  • IP address
  • browser and device information
  • data related to cookies and website use
  • technical data necessary for the shopping cart and online store functionality

In connection with marketing:

  • name
  • email address
  • marketing consent details
  • possible purchase history, if used to target customer communication

5. Where Do We Obtain Personal Data From?

Personal data is primarily obtained from the customer directly, for example when the customer places an order, fills in a form, contacts customer service or subscribes to marketing messages.

In addition, the online store platform, payment services, cookies and other technical systems may collect data in connection with the use of the online store.

6. For What Purposes and on What Legal Basis Do We Process Personal Data?

We process personal data for the following purposes:

Order Processing and Delivery

We use personal data to receive, process, pay for, deliver and manage orders, as well as to handle possible returns or complaints.

Legal basis for processing: performance of a contract and legal obligations

Customer Service

We use personal data to respond to customer enquiries, resolve order-related matters and manage the customer relationship.

Legal basis for processing: performance of a contract and legitimate interest

Accounting and Legal Obligations

We retain data related to orders, payments and accounting as required by law.

Legal basis for processing: legal obligation

Online Store Functionality and Security

We use technical data to ensure the functionality of the online store, prevent misuse, maintain security and improve the service.

Legal basis for processing: legitimate interest and, where necessary, legal obligation

Marketing

We send electronic direct marketing only if the customer has given consent or if other applicable legislation allows it. The customer may withdraw their marketing consent at any time.

Legal basis for processing: consent

7. Is Providing Personal Data Mandatory?

Placing an order requires providing a name, contact details, delivery address and information necessary for payment. Without this information, we cannot process the order or deliver the product.

Providing data for marketing purposes is voluntary.

8. How Long Do We Retain Personal Data?

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations.

As a general rule, retention periods are as follows:

  • Order and payment data: for the period required by accounting legislation
  • Customer service data: for the duration of the customer relationship and for a reasonable period thereafter to handle possible enquiries, complaints or warranty matters
  • Marketing data: until the customer withdraws their consent or the data is no longer necessary for marketing purposes
  • Technical log and cookie data: only for as long as necessary for the operation, security or analytics of the online store

When there is no longer a valid reason to retain personal data, the data will be deleted or anonymised.

9. Protecting Personal Data

We protect personal data using appropriate technical and organisational measures.

These include, for example:

  • encrypted web connection
  • access control and restriction of user rights
  • protection and updating of systems
  • limiting the processing of personal data only to persons and service providers who have a justified need to process it
  • processing payment data through trusted payment service providers

No electronic system is completely risk-free, but we aim to protect personal data carefully and appropriately.

10. Do We Disclose Personal Data to Third Parties?

We may use external service providers to operate the online store, process payments, arrange deliveries, provide customer service, analytics and marketing.

Personal data may be processed, for example, by the following parties:

  • online store platform provider
  • payment service providers
  • transport and logistics companies
  • accounting-related service providers
  • IT and maintenance service providers
  • analytics and marketing service providers, if such services are used and if the customer has given the necessary consent

We disclose personal data only to the extent necessary to provide the service, comply with legal obligations or based on the customer’s consent.

We do not sell our customers’ personal data to third parties.

We may disclose data to authorities if required by law.

11. Is Data Transferred Outside the EU/EEA?

The online store operates on the Shopify platform, and we also use other service providers in connection with the operation of the online store.

In some situations, personal data may be processed or transferred outside the EU/EEA through the systems of service providers. In such cases, we ensure that the transfer has an appropriate legal basis, such as the European Commission’s Standard Contractual Clauses or another safeguard mechanism under applicable data protection legislation.

12. Cookies

Our website uses cookies and other similar technologies.

Cookies are used, for example, for:

  • the technical operation of the online store
  • enabling the shopping cart and checkout functions
  • improving the user experience of the website
  • analysing the use of the website
  • measuring marketing and advertising, if such services are used

Necessary cookies are required for the online store to function. Analytics and marketing cookies are used only if the necessary consent has been obtained.

The customer can manage cookie settings through the website’s cookie settings or through their browser settings.

13. Automated Decision-Making and Profiling

Sisu Grip Ltd. does not use personal data for automated decision-making or profiling that would have legal or similarly significant effects on customers.

Data related to the use of the online store, analytics or marketing may be used to improve the service and target communication, provided that there is an appropriate legal basis for doing so.

14. Rights of the Data Subject

Under the EU General Data Protection Regulation, the customer has the right to:

  • receive information on whether we process their personal data
  • access their own personal data
  • request correction of inaccurate data
  • request deletion of data
  • request restriction of processing
  • object to the processing of personal data when the processing is based on legitimate interest
  • receive data provided by the customer in a structured and machine-readable format, where the applicable conditions are met
  • withdraw consent at any time
  • object to direct marketing at any time

To exercise these rights, you can contact us by email at shop@sisugrip.com.

We may need to verify your identity before fulfilling the request. We aim to respond to requests without undue delay and no later than within one month of receiving the request.

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman: www.tietosuoja.fi.

15. Changes to This Privacy Policy

We may update this Privacy Policy when necessary, for example due to changes in legislation, online store operations or service providers.

The up-to-date Privacy Policy is always available on our website.

16. Contact

For questions related to data protection, you can contact:

Sisu Grip Ltd.
Email: shop@sisugrip.com
Phone number: +358 50 5341133
Address: Raatinniituntie 36, 04350 Nahkela, Finland