1. Data controller
SSKLead (Severi Kangasvieri, sole trader, Business ID 3670222-3)
Espoo, Finland
Contact for privacy matters: [email protected]
2. What data we collect and why
We process personal data in the following situations:
- Free audit form on this site: your name, email address, store URL, ecommerce platform and, if you choose to give it, a monthly revenue range. We use these details to prepare and send the audit you requested and to reply to your enquiry. The legal basis is the steps taken at your request before entering into a contract (GDPR Article 6(1)(b)) and, for the optional revenue range, your consent.
- Email correspondence: if you email us directly, we keep the correspondence so we can reply and follow up. The legal basis is our legitimate interest in handling enquiries.
- Customer email lists we manage on a client's behalf: when a store engages us, we work inside the store's own Klaviyo account. In that case the store is the data controller and SSKLead acts as a processor under the service agreement. We never use client lists for our own marketing.
- Website analytics: usage data collected by Google Analytics, only if you accept analytics cookies in the cookie banner. IP addresses are anonymised. The legal basis is your consent, which you can withdraw at any time via the cookie settings.
3. How long we keep data
Audit requests and related correspondence are kept for 12 months from the request, after which they are deleted, unless you become a client. If you become a client, your details are kept for the duration of the engagement and afterwards for as long as Finnish accounting law requires invoices and contracts to be retained.
Analytics data in Google Analytics is retained according to the retention period set in our Google Analytics account.
4. Service providers that process data
We do not sell personal data and we do not share it with third parties for their own marketing. The following service providers process data on our behalf as part of running this site and our service:
- Formspree (Formspree, Inc., USA): receives and forwards submissions from the free audit form.
- Zoho Mail (Zoho Corporation): hosts our email, including form submissions forwarded to us and any correspondence with you.
- Cloudflare (Cloudflare, Inc., USA): hosts and serves this website.
- Google Analytics (Google Ireland Limited / Google LLC): website analytics, only after you have given consent.
- Klaviyo (Klaviyo, Inc., USA): the email platform used for client work, inside each client's own account.
Some of these providers are based in or transfer data to the United States. Where that happens, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses, as made available by each provider.
5. Cookies
This site uses cookies and similar storage. The cookies used, what they are for and how you can manage them are described in our cookie policy.
6. Security
We protect personal data against unauthorised access with technical and organisational measures, including restricted access, strong authentication on the accounts involved and encrypted connections. Access to personal data is limited to what is needed to provide the service. As a one-person business, in practice only the founder has access.
7. Your rights
You have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted where there is no longer a reason to keep it
- object to processing, or ask for it to be restricted
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal
- lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman, tietosuoja.fi
To exercise any of these rights, email the address given in section 1. We will respond within one month.
8. Changes to this policy
We may update this policy when the law or our services change. Changes are announced by updating the date at the top of this page.