Privacy policy
Privacy Policy
Last updated: 23 September 2026
Stokki Oy (“Stokki”, “we”, “us” or “our”) operates this website and online store. Our online store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and services.
This Privacy Policy explains how we collect, use, store and disclose personal information when you visit our website, register as a customer, create an account, place an order, communicate with us or otherwise use our website and services.
Stokki Oy is the data controller for personal information processed for the purposes described in this Privacy Policy.
- Personal information we collect
The personal information we collect depends on how you interact with us.
When you register as a customer, create an account, contact us or place an order, we may collect information such as your name, email address, telephone number, company name, Business ID or VAT number, job title or role, billing address, delivery address and other information necessary to establish and manage your business customer account.
We may also collect account information, customer preferences, order history, products viewed or added to your cart, purchases, returns or cancellations and other transaction-related information.
When you make a payment, payment and transaction information may be processed by Shopify and/or the relevant payment service provider. Payment-card information is handled through the applicable payment provider in accordance with its own security and privacy practices.
When you communicate with us, we collect the information contained in your enquiry, email, registration request, customer-service request or other communication.
When you visit our website, certain technical information may be collected automatically, including your IP address, browser type, device information, operating system, network information and information about how you navigate and interact with the website.
We may also collect your marketing preferences and information relating to cookies and similar technologies.
- How we collect personal information
We collect information directly from you when you register, create an account, place an order, complete a form or communicate with us.
We may also collect information automatically through our website using cookies and similar technologies.
Information may also be received from service providers that help us operate our business, including Shopify, payment providers, delivery and fulfilment providers and other technical service providers.
- How we use personal information
We process personal information to operate Stokki's website and webshop, manage business customer registrations and accounts, verify customer and company information, provide access to customer pricing and ordering functions, process and fulfil orders, arrange deliveries, issue invoices, process payments and provide customer support.
We may use personal information to communicate with you regarding your account, registrations, orders, deliveries, product availability, customer-service matters and other matters relating to our business relationship.
We also use information to maintain and improve our website and services, monitor the performance and security of our systems, prevent fraud and misuse and protect our business, customers and website.
Where permitted by law, we may use contact information to communicate information about Stokki products, services and business developments. Where consent is required for electronic marketing, we will request that consent before sending such communications.
We may also process personal information where necessary to comply with accounting, tax, legal and regulatory obligations or to establish, exercise or defend legal claims.
- Legal bases for processing
Where the General Data Protection Regulation (“GDPR”) applies, we process personal information on one or more of the following legal bases.
We process information where it is necessary to enter into or perform a contract with you or the company you represent, including managing customer accounts, processing orders, arranging delivery and providing customer service.
We process information where necessary to comply with legal obligations, including applicable accounting, taxation and regulatory requirements.
We may process information based on our legitimate interests in operating and developing our business, managing our relationships with business customers, protecting our website and systems, preventing fraud, providing customer service and improving our services, provided that those interests are not overridden by the rights and interests of the individual concerned.
Where required, we rely on consent, including for certain marketing activities and the use of non-essential cookies or similar tracking technologies. You may withdraw your consent at any time.
- Business customers
Stokki primarily provides products and services to business customers.
When a company registers with us, we may process personal information relating to the company's employees, representatives, purchasing contacts, delivery contacts or other authorised users.
Although the commercial relationship may be with a company, information that identifies an individual representative of that company remains personal information and is processed in accordance with this Privacy Policy.
- How we share personal information
We may share personal information with service providers where this is necessary to operate our website, webshop and business.
These providers may include Shopify, payment-service providers, IT and hosting providers, warehouse, fulfilment and delivery providers, accounting or professional service providers, customer-service providers and other companies that process information on our behalf.
Where we use analytics, advertising or marketing services, information may be shared with the relevant providers in accordance with applicable privacy and cookie requirements.
We may disclose information where required by law or a valid request from a court, regulatory authority, law-enforcement agency or other competent public authority.
Information may also be disclosed where necessary to protect our legal rights, prevent fraud or misuse, enforce our terms or protect the rights and safety of Stokki, our customers or others.
If Stokki is involved in a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal information may be transferred as part of that transaction where permitted by law.
- Shopify
Our webshop is hosted and operated using Shopify.
Shopify processes information relating to your access to and use of our online store in order to provide its ecommerce services to us and to you.
Information submitted through the webshop may therefore be processed by Shopify and its service providers. In some circumstances, Shopify may process certain information for its own purposes and act as an independent data controller.
You can learn more about Shopify's processing of personal information in the Shopify Consumer Privacy Policy at:
https://privacy.shopify.com/en
- Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website and webshop to function, including functions relating to security, customer accounts, shopping carts and checkout.
Other cookies may be used for analytics, website improvement, personalisation or marketing.
Where required by applicable law, non-essential cookies will not be used until you have provided your consent through our cookie settings or cookie banner.
You can change your cookie preferences using the privacy or cookie controls available on our website.
Withdrawing consent does not affect processing that took place lawfully before consent was withdrawn.
- Marketing communications
Where you have subscribed to marketing communications or where we are otherwise permitted by law to contact you, we may send information about Stokki products, services, availability, promotions or business developments.
You can unsubscribe from marketing communications at any time using the unsubscribe option included in the communication or by contacting us.
Even if you unsubscribe from marketing, we may continue to send necessary service communications relating to registrations, customer accounts, orders, deliveries, payments or our existing business relationship.
- Data retention
We retain personal information only for as long as necessary for the purposes for which it was collected.
The applicable retention period depends on the type of information and the reason for processing it.
For example, we may retain customer and transaction information while a customer account or business relationship remains active and afterwards where necessary to comply with legal requirements, resolve disputes, maintain appropriate business records or establish and defend legal claims.
Accounting, invoicing and transaction records may be retained for the periods required under applicable accounting and tax legislation.
Marketing information is retained until you withdraw your consent, unsubscribe or the information is no longer necessary for the relevant marketing purpose, subject to any records that we may need to retain to demonstrate compliance with your preferences.
- International transfers
Some of our service providers, including Shopify, may process personal information outside Finland or the European Economic Area (“EEA”).
Where personal information is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used as required by applicable law.
These safeguards may include the European Commission's Standard Contractual Clauses or another legally recognised transfer mechanism.
- Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
You should therefore avoid sending sensitive or confidential information to us through unsecured communication channels.
If you have a customer account, you are responsible for keeping your login credentials confidential.
- Your rights
Where the GDPR or other applicable data-protection legislation applies, you may have the right to request access to the personal information we hold about you and receive information about how it is processed.
You may also have the right to request correction of inaccurate information, deletion of personal information, restriction of processing and, in certain circumstances, transfer of your information in a portable format.
Where processing is based on our legitimate interests, you may have the right to object to that processing.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
You also have the right to object to the processing of your personal information for direct marketing purposes.
We may need to verify your identity before responding to a request.
To exercise your rights, please contact us using the details provided below.
- Complaints
If you have concerns about the way Stokki processes your personal information, please contact us first so that we can investigate the matter.
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
- Children's privacy
Our services and webshop are intended for business customers and are not directed at children.
We do not knowingly collect personal information from children through our customer-registration or purchasing services.
- Third-party websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing the privacy policy of any external website or service that you use.
- Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technologies, business practices or applicable legal requirements.
When we update the policy, we will publish the revised version on our website and update the “Last updated” date.
- Contact information
For the purposes of applicable data-protection laws, the data controller is:
Stokki Oy
Juurakkotie 6
01510 Vantaa
Finland
Email: info@stokki.fi
Telephone: +358 45 124 5944
If you have questions about this Privacy Policy, our privacy practices or your personal information, you can contact us using the details above.
