Privacy Policy

Last Updated: 26.6.2026

At Celvian, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how Celvian Oy collects, uses, stores, shares, and protects personal data when you visit our website, place an order, create an account, contact us, join our community, use our chat, or interact with our services.

This Privacy Policy applies to www.celvian.com and www.celvian.fi. Celvian.fi redirects to Celvian.com, and both domains are operated by Celvian Oy.

 

1. Data Controller

Company Name: Celvian Oy
VAT Number: FI35027051
Y-Tunnus: 3502705-1
Email: Support@celvian.com
Registered Company Address: Vuorikummuntie 6b A, 00390 Helsinki, Finland
Websites: www.celvian.com and www.celvian.fi

Celvian Oy is the data controller for personal data processed through our online store and customer services, unless otherwise stated. For privacy-related questions or requests, contact us at Support@celvian.com with the subject line “Privacy Request”.

 

2. What Personal Data We Collect

We collect personal data that you provide to us, data created when you use our services, and technical data collected automatically when you use our website.

A) Contact and Identity Information

• Name
• Email address
• Phone number
• Shipping address
• Billing address
• Country, region, and language preferences

B) Order, Payment, and Delivery Information

• Order number and order history
• Products purchased, sizes, quantities, prices, discounts, and gift card use
• Payment method, payment status, transaction references, and billing details
• Delivery method, tracking details, return requests, refund details, and customer service notes
• Information required for customs, import duties, tax, accounting, or legal compliance where applicable

Note: Celvian does not store your full payment card details. Card and payment details are processed securely by Shopify Payments and supported payment providers such as Klarna, MobilePay, Shop Pay, Apple Pay, Google Pay, card networks, and other providers shown at checkout.

C) Account, Wishlist, Loyalty, and Store Activity

• Customer account details and login-related information
• Order history, saved addresses, and account preferences
• Wishlist activity, recently viewed products, and product interactions where these features are used
• Celvian Core Club or loyalty-related information, such as points, level, rewards, badges, and member activity, if available to you

D) Customer Support and Communication Data

• Emails and replies sent to Support@celvian.com
• Messages sent through Shopify Inbox or the chat icon on our website
• Return requests submitted through your Celvian account, email, or chat
• Information you provide when asking questions about products, orders, returns, refunds, sizing, accounts, or policies

E) Marketing, Newsletter, and Community Data

• Newsletter sign-up details and marketing consent
• Email engagement, such as whether you open or click marketing emails
• Discount or first-order offer usage
• Responses to surveys, product feedback, reviews, or community campaigns
• Information you submit for Celvian Creator, Model, ambassador, collaboration, or similar applications, if you choose to apply

F) Technical, Cookie, and Usage Data

• IP address
• Device type, browser type, operating system, and approximate location
• Pages visited, products viewed, cart activity, checkout activity, and referral source
• Cookie identifiers, session data, analytics data, and website performance data
• Fraud prevention, security, and risk signals related to website and checkout activity

 

3. How We Use Your Personal Data

A) To Process Orders and Provide Our Services

• Process and confirm your order
• Take and verify payments
• Prepare, dispatch, and deliver your order
• Send order confirmations, shipping updates, and tracking information
• Handle returns, withdrawal requests, refunds, gift card refunds, and customer support
• Maintain your customer account, order history, and store preferences

B) To Provide Customer Support

• Answer your questions and support requests
• Help with order tracking, product information, sizing, returns, refunds, and account issues
• Keep records of support conversations so we can resolve issues properly

C) To Improve and Secure Our Website

• Improve website performance, product pages, navigation, checkout, and customer experience
• Analyze store activity, product interest, and website performance
• Prevent fraud, abuse, unauthorized access, payment misuse, and security incidents
• Troubleshoot technical problems and maintain store security

D) To Send Marketing Communications

• Send newsletters, product drops, restock updates, offers, campaigns, and brand updates where you have subscribed or where otherwise permitted by law
• Personalize marketing content based on your preferences and store activity where permitted
• Measure the performance of email campaigns and advertisements

Opt-out: You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or by contacting Support@celvian.com with the subject line “Unsubscribe Request”.

E) To Meet Legal and Business Requirements

• Comply with accounting, tax, consumer protection, e-commerce, customs, and legal obligations
• Maintain business records
• Respond to lawful requests from public authorities
• Protect our legal rights, customers, website, products, and business

 

4. Legal Basis for Processing Personal Data

We process personal data under the following legal bases:

• Contract: To process your order, deliver products, manage payments, provide customer accounts, handle returns and refunds, and provide customer support.
• Legal obligation: To comply with accounting, tax, consumer protection, customs, fraud prevention, and other legal requirements.
• Legitimate interest: To improve our website, prevent fraud, secure our store, communicate with customers, manage business records, and protect our rights, provided these interests are not overridden by your privacy rights.
• Consent: For newsletter marketing, optional cookies, certain analytics/advertising technologies, and other activities where consent is required by law.

 

5. Who We Share Personal Data With

We do not sell your personal data. We share personal data only when necessary to operate our store, provide services, comply with the law, or protect our rights.

A) Store Platform and Checkout Providers

• Shopify, including Shopify checkout, customer accounts, Shopify Payments, Shopify Inbox, Shopify Email or other Shopify services used by our store
• Payment providers available at checkout, such as Klarna, MobilePay, Shop Pay, Apple Pay, Google Pay, card networks, and other supported payment methods
• Fraud prevention, security, and payment authentication providers

B) Delivery, Fulfillment, and Logistics Providers

• Shipping carriers and logistics partners used to deliver orders and process returns
• Customs, import, and delivery-related authorities where required for international orders

C) Marketing, Analytics, and Communication Providers

• Email marketing and newsletter tools used to send campaigns and manage subscribers
• Analytics tools used to understand website performance and customer behavior
• Advertising and social media platforms, where cookies or tracking tools are enabled and permitted by law
• Customer support and chat tools used to respond to your messages

D) Professional Advisors and Legal Authorities

• Accountants, legal advisors, auditors, IT service providers, and other professional service providers
• Public authorities, courts, regulators, tax authorities, or law enforcement where required by law or necessary to protect our rights

E) Social Media and Third-Party Websites

Our website may contain links to social media platforms such as Instagram, TikTok, Facebook, YouTube, X/Twitter, or other third-party websites. If you click those links or interact with us on those platforms, your data is also processed according to the privacy policies of those third parties.

 

6. International Data Transfers

Celvian is based in Finland, but some of our service providers may process personal data outside Finland, the European Union, or the European Economic Area. For example, Shopify and other technology, payment, analytics, logistics, and marketing providers may process data in countries such as Canada, the United States, or other locations where they or their subprocessors operate.

Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards where required, such as adequacy decisions, Standard Contractual Clauses, contractual commitments, or other lawful transfer mechanisms.

 

7. Data Retention – How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Order, invoice, payment, accounting, and tax records: retained as required by Finnish accounting, tax, consumer protection, and legal rules, normally for 6–10 years depending on the type of record.
• Customer account data: retained for as long as your account is active or as long as needed to provide services, handle orders, comply with law, resolve disputes, or protect our rights.
• Customer support messages: retained for as long as necessary to handle your request and maintain service records, usually up to 2 years unless a longer period is needed for legal, accounting, refund, fraud prevention, or dispute reasons.
• Return and refund records: retained for as long as necessary to process the request and comply with accounting, consumer protection, and legal obligations.
• Marketing data: retained until you unsubscribe, withdraw consent, or ask us to delete it, unless we need to keep limited records to respect your opt-out.
• Cookie and analytics data: retained according to the settings of the relevant cookie or analytics tool, and only as long as necessary for the stated purpose.
• Creator, model, ambassador, or collaboration applications: retained for as long as necessary to review the application and communicate with you, unless a longer period is agreed or legally required.

 

8. Your Privacy Rights

If you are located in the EU/EEA or another region with privacy rights, you may have the right to:

• Access your personal data and receive a copy of it.
• Correct inaccurate or incomplete personal data.
• Delete your personal data, where legally possible.
• Restrict the processing of your personal data in certain cases.
• Object to processing based on legitimate interests or direct marketing.
• Withdraw consent at any time, where processing is based on consent.
• Data portability, where legally applicable.
• Lodge a complaint with a data protection authority.

To exercise your rights, contact Support@celvian.com with the subject line “Privacy Request”. To protect your privacy, we may need to verify your identity before completing your request.

If you are in Finland or the EU/EEA, you may also contact the Finnish Data Protection Ombudsman if you believe your privacy rights have been violated.

 

9. Marketing, Newsletter, and SMS/Email Consent

If you sign up for our newsletter or marketing communications, we may send you emails about product drops, restocks, offers, brand updates, community news, and related Celvian content.

You can unsubscribe at any time by clicking the unsubscribe link in the email footer or by contacting Support@celvian.com. Withdrawing marketing consent does not affect transactional messages related to your orders, delivery, returns, refunds, account, or customer support.

 

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our store, remember your cart and preferences, improve website performance, analyze traffic, support security, and, where permitted, provide marketing or personalized content.

Types of cookies we may use:

• Essential cookies: needed for website functionality, cart, checkout, security, and account features.
• Analytics cookies: help us understand how visitors use our website and how we can improve it.
• Marketing cookies: may be used to measure marketing performance and show relevant content or ads where permitted.
• Preference cookies: remember choices such as language, region, currency, or other settings.

You can manage cookies through your browser settings and, where available, through the cookie banner or cookie preference tools on our website. Some cookies are necessary for the website and checkout to work properly.

 

11. Payment Providers, Klarna, MobilePay, and Flexible Payments

When you choose a payment method at checkout, your payment data is processed by the relevant payment provider. This may include Shopify Payments, card networks, Klarna, MobilePay, Shop Pay, Apple Pay, Google Pay, or other payment options shown at checkout.

For Klarna payments, Klarna may process your personal data to assess eligibility, provide flexible payment options, manage payment terms, prevent fraud, and comply with legal requirements. Klarna’s own privacy terms may also apply to your use of Klarna services.

For MobilePay and digital wallet payments, you may be redirected to the relevant app or payment flow to confirm the payment. The relevant payment provider’s own privacy terms may also apply.

 

12. Fraud Prevention and Security

We may process technical, order, payment, and account data to detect and prevent fraud, unauthorized transactions, chargebacks, abuse, spam, security threats, and other harmful activity. This processing is necessary to protect Celvian, our customers, our payment providers, and our website.

Some fraud prevention and payment checks may be automated by Shopify, payment providers, Klarna, card networks, or other security providers. Celvian does not make solely automated decisions that produce legal effects concerning you, except where automated checks by payment or fraud prevention providers are necessary to approve, decline, or protect transactions.

 

13. Data Security

We use technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include secure checkout, encrypted connections, access controls, platform security features, and limiting access to personal data to those who need it for business purposes.

No online service can be guaranteed to be completely secure. You are responsible for keeping your account access details safe and for contacting us immediately if you believe your account or order information has been misused.

 

14. Children’s Privacy

Our website and products are not directed to children. We do not knowingly collect personal data from children without appropriate consent. If you believe a child has provided us personal data, please contact us at Support@celvian.com so we can review and take appropriate action.

 

15. Third-Party Links

Our website may contain links to third-party websites, payment providers, courier tracking pages, social media platforms, or other external services. We are not responsible for the privacy practices, content, or security of third-party websites. Please review their privacy policies before providing personal data to them.

 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, apps, payment methods, legal requirements, or business operations. The latest version will always be published on this page with the updated date shown above.

 

17. Contact Us

For privacy-related questions, requests, or concerns, please contact:

Celvian Oy
Vuorikummuntie 6b A, 00390 Helsinki, Finland
Email: Support@celvian.com
Subject line: Privacy Request

Thank you for trusting Celvian.