Privacy Policy

Last updated: July 31, 2026

1. Data Controller

Lastenhoito Ilo-Nallet Oy

Business ID: 3249183-6

mia@ilo-nallet.fi

2. Purpose and Legal Basis for Processing

We process your personal data to manage customer relationships, provide our services, and handle inquiries. The legal bases for processing are the performance of a contract (for service bookings) and our legitimate interest (for customer service and handling inquiries).

3. Personal Data Collected

We collect the following personal data:

• Name and contact details (email, phone number, postal code)

• Message content provided through our contact form

• Information provided when booking a service

4. Data Retention

We only store personal data for as long as necessary. Contact form data is stored for 12 months to ensure proper inquiry processing. Booking and accounting data are retained as required by Finnish accounting laws.

5. Contact Form

When you contact us, the form data is stored in the Ilo-Nallet owner application on Cloudflare infrastructure and also forwarded to Formbold for notification delivery. The data is used solely for responding to your inquiry.

6. Cookies and Browser Storage

Our website does not set analytics or marketing cookies, nor does it use browser storage for tracking purposes. Any cookies or storage entries created prior to the removal of analytics are unused and will expire according to your browser settings.

7. Data Sharing

We do not sell or rent your personal data. Data is only shared with trusted processors necessary to run our website: Cloudflare (form protection and storage), Google (Google Maps embed, USA), and Formbold (form notifications). Spam protection on our forms uses Cloudflare Turnstile; see Cloudflare's Turnstile Privacy Policy for details: https://www.cloudflare.com/turnstile-privacy-policy/. Any international data transfers outside the EU/EEA are legally protected by GDPR Article 46 Standard Contractual Clauses.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access your data

• Right to request correction of inaccurate data

• Right to request deletion of your data ('right to be forgotten')

• Right to restrict processing

• Right to object to processing or marketing

• Right to data portability

• Right to withdraw consent at any time where processing is based on consent

9. Changes to this Privacy Policy

We reserve the right to update this privacy policy.