lunoa
Contact

Legal

Privacy policy

Updated October 13, 2026. This policy explains what personal data we handle on this website and in our client relationships, why, for how long and with whom.

1. Controller

Lunoa Solutions Oy
Business ID 3619742-3
Jussilantie 9 B 9, 91500 Muhos, Finland
Email: roni@lunoa.fi
Phone: +358 40 968 6538

2. Contact person for privacy matters

Roni Puolakanaho, roni@lunoa.fi.

3. Register

Lunoa Solutions Oy customer and contact register.

This policy does not cover our clients' subscriber data. When we manage a client's email program, we process their subscribers' data on the client's behalf under a data processing agreement. The client is the controller. If you are a subscriber and want to use your rights, contact the brand that sent you the email.

4. Purposes and legal bases

4.1 Enquiries and free design applications

Purpose: replying to messages, assessing whether we are a fit and creating your free design. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) of the EU General Data Protection Regulation, GDPR), and our legitimate interest in answering business enquiries (Art. 6(1)(f)).

4.2 Client relationship

Purpose: managing the contract, communication, invoicing and payments. Legal basis: the contract (Art. 6(1)(b)) and legal obligations such as bookkeeping (Art. 6(1)(c)).

4.3 Visitor analytics

Purpose: understanding which pages help and improving the site. Legal basis: your consent (Art. 6(1)(a)). You can withdraw it at any time from the cookie settings.

4.4 Site security

Purpose: keeping the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f)).

We do not add you to a mailing list or send you marketing emails because you used a form. We do not sell your data or share it for marketing.

5. What data we handle

5.1 Contact form

  • Your message, name and email address.
  • If you choose: phone number, store address, monthly sales range and platform.

5.2 Free design application

  • Your store's address and what you sell.
  • Your store's monthly sales range and your current email tool.
  • Where your email leaves sales on the table.
  • Your first name and email address.

5.3 Client relationship

  • Contact details, company details and billing information.
  • Contract documents and communication.
  • Payment records.

5.4 Technical data

  • IP address, time, requested page and browser details in server logs.
  • When you send a form: your IP address and browser details, stored with your message together with the time and the page you sent it from.
  • With your consent: pages viewed, visit length, device and browser details, approximate location (country and city) and where you came from. We do not link this to your name.

We do not knowingly handle special categories of personal data (such as health data), and we do not ask for them.

6. How long we keep data

  • Enquiries and applications: 12 months from the last contact, if no client relationship follows.
  • Client relationships: for the duration of the contract. Invoicing and bookkeeping records are kept for as long as Finnish bookkeeping law requires.
  • Visitor analytics: 14 months.
  • Server logs: according to the hosting service's practice.
  • Cookie choice: 12 months (see the cookie policy).

7. Disclosures and transfers

We do not sell personal data. We share it only with service providers who process it on our behalf, and when the law requires it:

  • The service that hosts and delivers this website and relays form messages to us.
  • Our email hosting provider, where messages you send us arrive.
  • Our e-signature, invoicing and banking providers, for client contracts and payments.
  • Google Ireland Limited, for Google Analytics, only with your consent.
  • Calendly LLC (United States), for booking a call, only when you use the booking window.

Some providers may process data outside the EU/EEA, including the United States. We rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework where applicable. Authorities receive data only when the law requires it.

8. Sources of data

We receive data directly from you: through our forms, by email and by phone. For client relationships we may also see information that is public on your website or store.

9. Your rights

  • Access (Art. 15): to know whether we handle your data and to get a copy.
  • Rectification (Art. 16): to correct inaccurate or incomplete data.
  • Erasure (Art. 17): to ask us to delete your data, unless we must keep it by law.
  • Restriction (Art. 18): to ask us to limit processing in certain situations.
  • Portability (Art. 20): to receive the data you gave us in a machine-readable format.
  • Objection (Art. 21): to object to processing based on legitimate interest.
  • Withdrawal of consent: at any time, without affecting earlier processing.

Send requests to roni@lunoa.fi. We reply within a month and may need to verify your identity first.

If you believe we handle your data unlawfully, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the data protection authority in your own EU country.

10. Security

The site uses an encrypted connection (HTTPS). Only people who need the data for their work can access it. Accounts are protected with multi-factor authentication where the service supports it, and devices are encrypted.

11. Cookies and browser storage

Without your permission, this site sets no cookies. Read the details in our cookie policy.

12. Automated decisions and profiling

We do not use automated decision-making or profiling that has legal effects on you.

13. Changes to this policy

We update this policy when our processing changes. The date at the top shows the latest update. We announce significant changes on this site.

14. Contact

Lunoa Solutions Oy
Business ID 3619742-3
Jussilantie 9 B 9, 91500 Muhos, Finland
Email: roni@lunoa.fi
Phone: +358 40 968 6538