Privacy Policy
Privacy Policy
Last Updated: 15 September 2026
This Privacy Policy explains how CraftGrowft Oy collects, uses, processes, and protects your personal data when you visit our website www.craftgrowft.fi (the "Site") or contact us through it.
We are committed to processing all personal data in strict compliance with the EU General Data Protection Regulation (GDPR - EU 2016/679) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018).
1. Data Controller
The data controller responsible for processing your personal data under this policy is:
Company Name: CraftGrowft Oy
Business ID (Y-tunnus): 3646294-4
Registered Address: Mäkikuja 3, 58900 Rantasalmi
Contact Email: info@craftgrowft.fi
2. Personal Data We Collect and Purposes of Processing
Because our Site is for informational purposes only and does not process direct payments or account registrations, we collect personal data only in limited scenarios:
A. Inquiries & Communications
Data Collected: Name, email address, phone number (if provided), company name, and any information contained within your message or inquiry.
Purpose: To respond to your business inquiries, process service requests, provide quotes, and manage prospective client relationships.
Legal Basis:
Article 6(1)(f) GDPR (Our Legitimate Interest in managing business correspondence and responding to prospective clients).
Article 6(1)(b) GDPR (Steps taken at the request of the data subject prior to entering into a contract).
B. Technical Data & Website Security
Data Collected: IP address, browser type and version, operating system, date and time of visit, referring website, and pages viewed.
Purpose: To ensure stable and secure site functionality, prevent cyber threats or unauthorised access, and optimise website performance.
Legal Basis: Article 6(1)(f) GDPR (Our Legitimate Interest in maintaining a secure, functional, and efficient online presence).
C. Cookies & Technical Infrastructure
Our Site operates on a zero non-essential cookie basis. We do not use marketing, tracking, or analytical cookies (such as Google Analytics or Meta Pixel). The Site relies solely on essential server security logs and basic infrastructure provided by our web hosting and protection providers (e.g., Framer, Cloudflare) strictly to ensure site functionality, security, and performance. Therefore, no cookie consent banner is displayed or required upon your visit.
3. Data Recipients and Third-Party Processors
We do not sell, rent, or trade your personal data. We only share data with trusted service providers (Data Processors) acting strictly under our instructions for necessary operational purposes:
Website Hosting, Network Security & Infrastructure: Cloudflare
Email & Workspace Service Providers: Google Workspace
Transfers Outside the EU/EEA: If any third-party infrastructure transfers data outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR (such as EU Standard Contractual Clauses - SCCs, or European Commission adequacy decisions).
4. Data Retention Period
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy:
Business Inquiries & Communications: Retained for the duration of the communication and up to 12 months after the last contact, unless a client relationship is established.
Client Relationship Records: If an inquiry leads to a formal engagement, relevant communication data will be retained in accordance with statutory Finnish accounting and commercial legal requirements.
Technical Logs: Server security logs are automatically deleted or anonymised within 90 days.
5. Your Rights Under the GDPR
As a data subject located in the EU, you have the following legal rights regarding your personal data:
Right of Access (Art. 15): Request confirmation and a copy of the personal data we hold about you.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data under certain conditions.
Right to Restriction of Processing (Art. 18): Request restriction of processing under specific legal grounds.
Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21): Object to data processing based on our legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting prior lawful processing.
To exercise any of these rights, please submit your request to info@craftgrowft.fi. We will respond within 30 days.
6. Right to Lodge a Complaint with a Supervisory Authority
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Address: Lintulahdenkatu 5, 00530 Helsinki, Finland
Website: https://tietosuoja.fi
Email: tietosuoja@om.fi
7. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy as necessary to reflect changes in legal mandates, technology, or operational practices. Updated versions will be published on this page with a revised "Last Updated" date.
Last Updated: 15 September 2026
This Privacy Policy explains how CraftGrowft Oy collects, uses, processes, and protects your personal data when you visit our website www.craftgrowft.fi (the "Site") or contact us through it.
We are committed to processing all personal data in strict compliance with the EU General Data Protection Regulation (GDPR - EU 2016/679) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018).
1. Data Controller
The data controller responsible for processing your personal data under this policy is:
Company Name: CraftGrowft Oy
Business ID (Y-tunnus): 3646294-4
Registered Address: Mäkikuja 3, 58900 Rantasalmi
Contact Email: info@craftgrowft.fi
2. Personal Data We Collect and Purposes of Processing
Because our Site is for informational purposes only and does not process direct payments or account registrations, we collect personal data only in limited scenarios:
A. Inquiries & Communications
Data Collected: Name, email address, phone number (if provided), company name, and any information contained within your message or inquiry.
Purpose: To respond to your business inquiries, process service requests, provide quotes, and manage prospective client relationships.
Legal Basis:
Article 6(1)(f) GDPR (Our Legitimate Interest in managing business correspondence and responding to prospective clients).
Article 6(1)(b) GDPR (Steps taken at the request of the data subject prior to entering into a contract).
B. Technical Data & Website Security
Data Collected: IP address, browser type and version, operating system, date and time of visit, referring website, and pages viewed.
Purpose: To ensure stable and secure site functionality, prevent cyber threats or unauthorised access, and optimise website performance.
Legal Basis: Article 6(1)(f) GDPR (Our Legitimate Interest in maintaining a secure, functional, and efficient online presence).
C. Cookies & Technical Infrastructure
Our Site operates on a zero non-essential cookie basis. We do not use marketing, tracking, or analytical cookies (such as Google Analytics or Meta Pixel). The Site relies solely on essential server security logs and basic infrastructure provided by our web hosting and protection providers (e.g., Framer, Cloudflare) strictly to ensure site functionality, security, and performance. Therefore, no cookie consent banner is displayed or required upon your visit.
3. Data Recipients and Third-Party Processors
We do not sell, rent, or trade your personal data. We only share data with trusted service providers (Data Processors) acting strictly under our instructions for necessary operational purposes:
Website Hosting, Network Security & Infrastructure: Cloudflare
Email & Workspace Service Providers: Google Workspace
Transfers Outside the EU/EEA: If any third-party infrastructure transfers data outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR (such as EU Standard Contractual Clauses - SCCs, or European Commission adequacy decisions).
4. Data Retention Period
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy:
Business Inquiries & Communications: Retained for the duration of the communication and up to 12 months after the last contact, unless a client relationship is established.
Client Relationship Records: If an inquiry leads to a formal engagement, relevant communication data will be retained in accordance with statutory Finnish accounting and commercial legal requirements.
Technical Logs: Server security logs are automatically deleted or anonymised within 90 days.
5. Your Rights Under the GDPR
As a data subject located in the EU, you have the following legal rights regarding your personal data:
Right of Access (Art. 15): Request confirmation and a copy of the personal data we hold about you.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data under certain conditions.
Right to Restriction of Processing (Art. 18): Request restriction of processing under specific legal grounds.
Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21): Object to data processing based on our legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting prior lawful processing.
To exercise any of these rights, please submit your request to info@craftgrowft.fi. We will respond within 30 days.
6. Right to Lodge a Complaint with a Supervisory Authority
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Address: Lintulahdenkatu 5, 00530 Helsinki, Finland
Website: https://tietosuoja.fi
Email: tietosuoja@om.fi
7. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy as necessary to reflect changes in legal mandates, technology, or operational practices. Updated versions will be published on this page with a revised "Last Updated" date.
Every bottle tells a story. Every brand carries a soul.
At CraftGrowft, we blend design vision with global trade to craft cross-border experiences.
Every bottle tells a story. Every brand carries a soul.
At CraftGrowft, we blend design vision with global trade to craft cross-border experiences.
Every bottle tells a story. Every brand carries a soul.
At CraftGrowft, we blend design vision with global trade to craft cross-border experiences.
Email :
Email :
Email :