Data Controller

SBX Finland
Company Tax ID: FI14956353
Address: Vapaaherrantie 2, 40100 Jyväskylä, Finland

Customer service (English and Finnish):
Email: sales@sbx.fi
Tel: +358 20 720 9030, Monday–Friday 07.00–17.00 (UTC+2)

Purpose of Data Collection

Personal data collected through our website and business operations are used exclusively for:

  • Maintaining and managing customer relationships.
  • Processing orders and deliveries.
  • Providing customer service via chat, phone, and email.
  • Handling sales-related inquiries and follow-ups.
  • Marketing and communications (with your consent).
  • Managing and improving website functionality and user experience.
  • Ensuring site security and preventing fraud.

We may also use your information, combinations thereof, or information derived here for other business purposes.

Collected Personal Data

We may collect and process the following personal data:

  • Identification and Contact Information: Name, email address, phone number, billing and shipping address, company details.
  • Order and Transaction Data: Information related to orders, purchases, payments, delivery, returns, and customer interactions.
  • Technical Information: IP addresses, referral sources, browser types, device information, language preferences, and similar data.
  • Communication Data: Messages, emails, chat conversations, and other voluntarily submitted information.

We may also collect and use, in accordance with this Privacy Policy, other information you provide to us, or information we have obtained from third parties, or combinations of such information, in the ways described above and below.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined above, comply with legal obligations, resolve disputes, and enforce agreements. Typically, customer-related information is retained for the duration of the customer relationship and for a reasonable period thereafter (usually no longer than five years after the last interaction).

Disclosure of Personal Data

Our guiding principle is that the information you trust us with is used solely for our purposes. We do not sell, share, or publish your data as a matter of course. However, there are situations where sharing information with third parties is necessary for the normal course of business. We may share your data with:

  • Trusted service providers and subcontractors (e.g., payment processing, logistics, and IT service providers).
  • Marketing and analytics providers (e.g., Google Analytics, Google Ads, Mailchimp).
  • CRM providers (eg, HubSpot).
  • Authorities or legal entities when required by law or to protect our legal rights.

Data Transfers Outside the EU

You can trust us to keep your data secure. As a matter of general principle, we will not transfer your data outside the EU. However, as part of our service, we use external services, some of which operate outside the EU. Personal data may be transferred outside the European Union to third-party service providers:

  • HubSpot (Marketing and CRM)
  • Mailchimp (newsletter services)
  • Shopify (e-commerce platform)
  • Google Analytics, Google Fonts, Google Ads network

We ensure compliance with GDPR when transferring data internationally through appropriate safeguards, such as EU-approved standard contractual clauses.

Automated Decision-Making

We do not use your personal data for automated decision-making or profiling.

Your Rights Under GDPR

You have the following rights:

  • Right to access your personal data.
  • Right to rectify incorrect or incomplete personal data.
  • Right to request erasure of your personal data.
  • Right to restrict or object to processing of your personal data.
  • Right to data portability.
  • Right to withdraw consent for processing, where applicable.

To exercise your rights, please contact us in writing via email or postal mail to the address listed above. We may request additional verification of your identity.

Cookies

Our website uses cookies to:

  • Record your consent to cookies (necessary cookies).
  • Enable functional services such as Google Fonts, chat services, and contact forms (functional cookies).

Data Security

We apply appropriate technical and organizational measures to safeguard your personal data against unauthorized access, misuse, loss, or alteration.

Changes to This Policy

We reserve the right to update this policy. Any changes will be communicated clearly on our website.

Contact Information

For any inquiries or concerns regarding this Privacy Policy or your data, don’t hesitate to get in touch with us on the contact details mentioned above “Data Controller”.