Marita Universe

Privacy Policy

This privacy statement describes how Marita Universe (CVPE Development Ltd) processes personal data when you use this store, in line with the EU General Data Protection Regulation (GDPR).

1. Data controller

CVPE Development Ltd (Y-tunnus FI36514732)
08100 Lohja, Uusimaa, FI
Contact: [email protected]
Data protection contact: [email protected]

2. What we process and why

Orders. Name, contact details and order contents are processed to fulfil your purchase and provide customer service. Legal basis: performance of a contract (Art. 6(1)(b)) and our legal obligation to retain accounting records (Art. 6(1)(c)).

Payments. Card and payment details are entered directly with our payment processor; we receive and store only a transaction reference, never card numbers. Legal basis: performance of a contract (Art. 6(1)(b)).

Order emails. Your email address and order details are used to send order confirmations and replies to your enquiries. Legal basis: performance of a contract and legitimate interest (Art. 6(1)(b), (f)).

Newsletter. With your consent (Art. 6(1)(a)), we use your email address to send product news and newsletters after you confirm your subscription. Every newsletter includes unsubscribe and preference links. Optional, separately permitted image-based open measurement provides approximate campaign totals; withdrawing measurement permission does not cancel your newsletter. Essential service emails do not depend on newsletter consent.

Store analytics. When you accept analytics, Google Analytics uses cookies and browsing events to measure store usage and purchases. You can change your choice through Cookies in the footer. Legal basis: consent (Art. 6(1)(a)).

AI-assisted content. Storefront content and product imagery may be generated or edited with AI tooling. No customer personal data is used for this purpose.

3. Processors and international transfers

We use the following processors, bound by data processing agreements:

  • Google Cloud (Google Ireland Ltd / Google LLC) — hosting, database, file storage, and AI services. Store data is hosted in European regions (eur3, europe-north1, europe-west3). Any access from outside the EEA is covered by EU Standard Contractual Clauses.
  • Stripe (Stripe Payments Europe Ltd / Stripe Inc.) — payment processing. Transfers to the US are covered by Standard Contractual Clauses.
  • SendGrid (Twilio Inc.) — transactional and newsletter email delivery, delivery feedback and optional open measurement. Transfers to the US are covered by Standard Contractual Clauses.

We do not sell personal data and do not share it with third parties for advertising.

4. Retention

Order and invoicing records are kept for the period required by Finnish accounting and tax law (up to 10 years). Correspondence is retained up to 24 months. Aggregated analytics data is retained up to 14 months. Pending newsletter signups expire after 30 days; email delivery details are retained for up to 90 days, and raw delivery/open-measurement feedback for 30 days. Unsubscribing stops marketing use immediately. Minimal consent and suppression evidence may be retained to respect withdrawals and demonstrate compliance. Data is deleted or anonymised when no longer needed.

5. Your rights

You may request access to, rectification or erasure of your personal data, restriction of or objection to processing, and data portability by contacting [email protected]. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or your local supervisory authority.

6. Cookies

Strictly necessary technologies support checkout. Optional analytics cookies are loaded only after acceptance through the consent banner. You can revisit your choice using Cookies in the footer.

7. Automated decision-making

We do not make decisions with legal or similarly significant effects about you solely by automated means.

8. Changes

We may update this statement when our processing changes. The current version is always available on this page.
Last updated: October 2026.