Privacy Policy

Last updated: January 29, 2026

This Privacy Policy explains how Arvo (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website and when you place an order. We are based in Finland.

1. Controller & Contact

Data controller: Arvo (Finland).
Contact: Use the contact options provided on this website (for example, the Help page and WhatsApp contact buttons).

2. What Data We Collect

  • Contact and order details (name, email, phone, shipping address, order notes)
  • Payment-related information (processed by payment providers; we typically do not store full card details)
  • Customer support communications (messages you send to us)
  • Usage and device information (e.g., pages viewed, approximate location, browser type) via cookies/analytics if enabled

3. Why We Use Your Data

  • To fulfill and deliver orders
  • To provide customer support and respond to requests
  • To prevent fraud and secure the website
  • To improve the website and understand usage (analytics, where applicable)

4. Legal Bases

We process personal data based on one or more legal bases such as: performance of a contract (order fulfillment), compliance with legal obligations (accounting), legitimate interests (security and service improvement), and consent (where required, e.g., certain cookies or marketing emails).

5. Sharing & Processors

We may share data with service providers only as needed, such as payment providers, shipping carriers, hosting/IT providers, and analytics tools. These providers process data on our behalf under appropriate safeguards.

6. Data Retention

We keep personal data only as long as necessary for the purposes described above, including legal requirements (e.g., accounting retention periods).

7. Your Rights

Depending on your location and applicable law (including GDPR), you may have rights such as access, rectification, deletion, restriction, objection, and data portability. You may also withdraw consent where processing is based on consent.

To exercise rights, contact us using the details above.

8. Cookies

We may use cookies and similar technologies to make the site work and (optionally) for analytics. You can control cookies through your browser settings. If you deploy a cookie banner/consent tool, this section should be updated to match your configuration.

9. International Transfers

Some service providers may process data outside the EU/EEA. When applicable, we use safeguards such as standard contractual clauses or other lawful transfer mechanisms.

10. Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure, but we work to protect your information.

11. Changes

We may update this policy from time to time. The “Last updated” date indicates when changes were made.