Privacy policy

We adhere to the requirements of the EU-General Data Protection Regulation (GDPR) in the personal data processing.


PYKA OY (Business ID: 1976355-0)
Kelatie 11
90620 Oulu

Name of the register

Customer register

Which personal data items are collected by us and for what reasons

We collect personal data for customer relationship management, for the delivery of webstore orders and marketing. Personal data processing is based on a customer relationship. The submission of particular personal data items is a prerequisite for the delivery of an order and, therefore, also for placing the order.

If you leave feedback or product reviews, search, subscribe to a newsletter or file a complaint via our website, we collect the data on the forms referred to, the user’s IP address and the browser version details in order to make it easier to identify junk mail.

Regular disclosure of data

Only employees of PYKA OY shall have access to your data, and it won’t be disclosed to third parties, excluding accounting, filing, invoicing, or collection activities for the part those activities are executed. The data shall not be used for third parties’ purposes.

In addition to our web store, your personal data shall be available to the following services, to improve customer experience and service:

  • E-mail service for sending a newsletters and email marketing to those persons who have joined the list: (Klaviyo, USA)
  • SMS marketing (Yotpo)
  • Loyalty Program (Yotpo)
  • Product reviews: (Yotpo)
  • Customer service system: (Gorgias)
  • Enterprise resource planning systems: (Velox, Visma Nova)

We store data items submitted by the user him-/herself, as follows:

  • Name
  • Address, e-mail and telephone number
  • Sex and date of birth
  • Order and return history
  • Possible failed orders
  • Payment details related with an order
  • Reviews you have submitted
  • Joining the e-mail list


    Our website uses cookies. Cookies enable the functioning of the web store, for example, using a user account and a shopping basket. Our website does not function correctly without cookies; you may, however, disable them and delete them from your own browser. Cookies provide us also information for the use of Meta (Facebook & Instagram), Tiktok, Microsoft and Google marketing, to enable us to make use of the information by targeting advertisements to you. User data has been anonymized, and we won’t disclose it to third parties.

    Content embedded from other websites

    Articles on this website may contain embedded content (for example, videos, images, articles, etc.). To open embedded content exported from other websites can be compared to the visitor him-/herself visiting the third party’s website.

    Those websites may collect data on you, use cookies, embed third-party follow-up cookies and monitor the use of embedded content.

    Transfer of data outside of the EU

    We use external services which may store content outside of the EU. Such parties include for example Shopify, Google, Facebook, Hotjar, CleanTalk, Microsoft, Klaviyo Gorgias and Yotpo. 

    How can I administer and delete my data

    You’re entitled to:

    • Check data collected on you
    • Correct data
    • Limit data processing
    • Object to data processing
    • Withdraw your consent
    • File a complaint to a Supervision Authority

    If you have a user account to this website, you have made purchases on this website, have submitted product reviews, comments or filed a complaint via a complaint form or subscribed to a newsletter, you may request a compilation file of your own personal data, which contains all the personal data you have submitted to us. You may also request the deletion of your personal data. Send a request for the above measures by e-mail to the address The right to have your own data deleted does not apply to such personal data items that we shall have to keep for administrative, legal or data security related reasons.

    How long do we keep the data

    We shall keep the data until further notice.


    The data is located on protected servers, and the data is used via a protected connection.