Privacy policy

Last updated 22 October 2026

At Pikuliten, we value your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR).

1. Personal data we collect

We may collect the following personal data:

• Name
• Contact details (e.g., phone number, email address, postal address)
• Bank account details for payments
• Information about submitted items and sales
• Information you provide when contacting us

2. Purpose of processing

We process personal data in order to:

• Manage item submission, sales, and payments
• Administer customer accounts
• Communicate with you about your sales or our services
• Fulfil legal obligations (e.g., accounting requirements)

3. Legal basis

We process your personal data on the basis of:

• Contract: to provide our services under an agreement with you
• Legal obligation: to comply with statutory requirements (e.g., accounting)
• Legitimate interest: to develop and improve our business
• Consent: when you have explicitly given consent (e.g., newsletters)

4. Retention period

We keep your personal data only as long as necessary for the purposes for which it was collected, or as required by law. After that, the data will be deleted or anonymized.

5. Sharing of data

We do not share your personal data with third parties, except when:

• Required by law
• Necessary for our services (e.g., payment services, accounting partners)
• You have given your consent

All our partners are required to process data in compliance with GDPR.

6. Service providers

The following service providers process data on our behalf when you sign up to sell with us:

• Vercel hosts the website and processes the booking form in the EU (Stockholm, Sweden).
• Google stores your booking, including the bank account number if you give one, in a Google Sheet that only we have access to.
• Flealover is our sales and customer account system. It stores the information you give when signing up, as well as your sales and commission payments. It is also where you log in to follow your sales.
• Resend sends the booking confirmation e-mails from the EU (Ireland). Your bank account number is never included in e-mails.
• Cloudflare protects the booking form against spam with Turnstile, which processes your IP address and information about your browser.

We measure visits with Vercel Web Analytics, which uses no cookies and does not identify individual visitors. The map on our contact page is only loaded from Google Maps if you choose to show it.

7. Your rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (in certain cases)
• Object to or restrict the processing of your data
• Receive your data in a structured format (data portability)
• Withdraw your consent when processing is based on it

To exercise your rights, please contact us using the details below.

8. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

9. Contact

If you have questions about how we process your personal data, you can contact us:

Pikuliten
Email: info (at) pikuliten.fi
Address: Palosaarentie 31 A 15, 65200 Vaasa