Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains how Archtop Laminates Oy collects, uses, stores and protects personal data through its website and online shop.


1. Data controller

Archtop Laminates Oy
Business ID: 3102697-5
Laanikatu 2 A 1
60200 Seinäjoki, Finland
Website: https://archtoplaminates.fi
General email: support@archtoplaminates.fi
Privacy enquiries: privacy@archtoplaminates.fi


2. Personal data we process

Depending on how you use the website, we may process:

  • Contact information and messages submitted through the contact form.
  • Customer account information, such as your name, email address, username, telephone number and saved addresses.
  • Order information, including billing and shipping addresses, purchased products, payment status and delivery details.
  • Technical information, such as IP address, browser and device information, security logs, cookies and consent choices.
  • Website usage and analytics data when you consent to analytics cookies.
  • Information generated when you interact with embedded YouTube or Instagram content.

Full payment card or online banking credentials are processed by the relevant payment provider and are not received or stored by Archtop Laminates Oy.


3. Purposes and legal bases

We process personal data for the following purposes:

  • Contact enquiries: to respond to messages and take requested steps before entering into a contract. The legal basis is our legitimate interest or pre-contractual measures.
  • Orders and customer accounts: to process orders, payments, deliveries, returns, refunds and customer service. The legal basis is the performance of a contract.
  • Accounting and taxation: to comply with statutory accounting, tax and record-keeping obligations.
  • Website security: to prevent misuse, fraud and technical problems. The legal basis is our legitimate interest in maintaining a secure service.
  • Analytics and embedded content: to understand website use and display third-party media. The legal basis is your consent.

Information marked as required during checkout is necessary to process and deliver an order. Without this information, we cannot complete the purchase. Providing information through the contact form is voluntary, but we need your contact details to respond.


4. Contact form

When you use the contact form, we collect the name, email address, inquiry type and message you provide. Messages are sent to contactform@archtoplaminates.fi and are not stored as separate WPForms entries on the website.

Contact form messages are deleted when they are no longer needed and, at the latest, within 12 months after the enquiry has been resolved. Messages related to orders, agreements, complaints or legal obligations may be retained longer where necessary.


5. Online shop, payments and delivery

We use WooCommerce to operate the online shop. Personal data required for purchases may be shared with service providers involved in processing and delivering the order.

Payments are processed through Paytrail and the payment method provider selected at checkout. Shipping information is shared with Shipit and the carrier selected for the order. Accounting information is processed using the Kitsas accounting system.


6. Who may receive personal data

Access to personal data is limited to authorised persons who need it for their work. Where necessary, data may be disclosed to:

  • Website hosting, maintenance, email and security service providers.
  • Paytrail and payment service providers involved in the selected payment method.
  • Shipit and the carrier selected to deliver the order.
  • Kitsas and other services required for accounting and statutory reporting.
  • Google Analytics, YouTube and Instagram when you have consented to the relevant services.
  • Professional advisers and public authorities where required by law.

Only the information necessary for providing the relevant service is shared.


7. International data transfers

Some service providers, including providers of analytics and social media services, may process personal data outside the European Economic Area. Where required, transfers are protected using a valid mechanism under data protection law, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.

8. Retention periods

  • Contact form messages: deleted when they are no longer needed and, at the latest, within 12 months after the enquiry has been resolved. Messages related to orders, agreements, complaints or legal obligations may be retained longer where necessary.
  • Completed orders and accounting records: for at least six years from the end of the calendar year in which the relevant financial year ended, or longer where required by law.
  • Failed, cancelled or pending orders: normally for two weeks, unless the information is needed to resolve a problem, prevent fraud or establish a legal claim.
  • Inactive customer accounts: normally deleted or anonymised after six months of inactivity. Order information subject to statutory retention is retained separately.
  • Google Analytics user-level and event data: for up to 14 months, depending on the configured analytics settings.
  • Technical and security logs: until routine deletion by the relevant technical provider, unless information is required for investigating a security incident.

Cookie-specific retention periods are listed in the Cookie Policy available on this website.


9. Cookies and embedded content

The website uses necessary cookies for functions such as security, customer accounts, the shopping cart and checkout. These cookies do not require consent where they are strictly necessary for providing the service.

Analytics cookies and third-party content, such as YouTube videos and Instagram content, are used only after you provide consent through the cookie banner. You can reject non-essential cookies or withdraw your consent through the website’s cookie settings.


10. Your data protection rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • Access your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion or restriction of processing.
  • Object to processing based on legitimate interests.
  • Receive certain data in a portable format.
  • Withdraw your consent at any time.

Withdrawing consent does not affect processing carried out before the withdrawal. To exercise your rights, contact privacy@archtoplaminates.fi.

You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland.


11. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to authorised persons and service providers who require the information for their tasks.


12. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services or legal obligations change. The latest version and its update date will be published on this page.

Right of withdrawal — submit a withdrawal request