Privacy Policy

Last updated: 2026-06-16

This privacy policy explains how Sarva Siddhi Lth Oy (“we”, “us”, “our”) collects and uses personal data when you visit our website, place an order, contact us, or sign up for our newsletter.

If you have any questions about this policy or how we handle your personal data, you can contact us here.

1. What personal data we collect

When you place an order in our webshop, we may collect the following information:

• First and last name
• Billing address
• Shipping address, if different from the billing address
• Country/region
• Street address
• Apartment, suite or unit information, if provided
• Postcode/ZIP
• Town/city
• Email address
• Phone number, if provided
• Order notes, if provided
• Product/order details
• Order value, VAT, shipping and payment status
• Technical information needed to process the order, such as IP address and browser/session information

When you sign up for our newsletter, we collect:

• Email address
• Consent information, such as when and how you signed up

When you contact us, we may collect:

• Name
• Email address
• Message content
• Any other information you choose to send us

2. Why we use your personal data

We use your personal data for the following purposes:

To process and deliver orders

We use your name, address, email address, order details and payment status to process your purchase, send order confirmations, arrange shipping, handle delivery, and provide customer service.

Legal basis: Performance of a contract.

To handle payments

Payments are processed through our payment provider. We do not store your full card details ourselves. Payment information is handled by the payment provider in order to complete and confirm the transaction.

Legal basis: Performance of a contract and legitimate interest in receiving payment.

To provide customer support

We use your contact details, order details and any message you send us to answer questions, handle complaints, returns, refunds, delivery issues and other support matters.

Legal basis: Performance of a contract and legitimate interest.

To meet accounting and legal obligations

We retain certain order, invoice, payment and VAT information where required by bookkeeping, tax and consumer law.

Legal basis: Legal obligation.

To send newsletters

If you sign up for our newsletter, we use your email address to send updates, news and marketing from Sarva Siddhi. You can unsubscribe at any time using the unsubscribe link in the email or by contacting us.

Legal basis: Consent.

To maintain website security and functionality

We may process technical data such as IP address, browser information and website activity logs to keep the website secure, prevent fraud, troubleshoot technical issues and maintain the webshop.

Legal basis: Legitimate interest.

3. Who we share personal data with

We only share personal data when necessary to run our webshop, process orders, deliver products, meet legal requirements or provide services you have requested.

We may share data with:

• Payment providers
• Shipping and delivery providers
• Website hosting provider
• Email service provider
• Accounting/bookkeeping provider
• IT support, security and backup providers
• Authorities, if required by law

We do not sell your personal data.

4. Payments

Card payments are processed by our payment provider. When you pay by card, payment details are handled securely by the payment provider. We may receive payment status, transaction reference, card type and similar payment confirmation details, but we do not store your full card number or CVV code.

Please also read the payment provider’s privacy information for details about how they process payment data.

5. Newsletter

If you sign up for our newsletter, we use your email address to send updates and marketing messages.

You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us.

We do not add you to our newsletter automatically when you place an order. Newsletter signup is separate from purchasing.

6. Cookies and similar technologies

Our website may use cookies and similar technologies to make the webshop work, remember your cart, process checkout, improve the website, measure traffic or support marketing.

Necessary cookies are used to make the website and checkout function properly.

Non-essential cookies, such as analytics or marketing cookies, are only used where required consent has been given.

7. How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this policy.

Our general retention periods are:

• Orders in the webshop: up to 24 months after the order date
• Customer service messages: up to [12–24 months] after the matter is resolved
• Newsletter data: until you unsubscribe or withdraw consent
• Accounting records, invoices, receipts and payment documentation: for the period required by applicable bookkeeping and tax law

After the webshop retention period, unnecessary personal data is deleted or anonymized. Accounting records may be retained separately where required by law.

8. International transfers

Some of our service providers may process personal data outside the EU/EEA. If this happens, we ensure that appropriate safeguards are used, such as adequacy decisions, standard contractual clauses or other legally approved transfer mechanisms.

9. Your rights

Under data protection law, you may have the right to:

• Request access to the personal data we hold about you
• Request correction of incorrect data
• Request deletion of personal data
• Object to certain processing
• Request restriction of processing
• Request data portability
• Withdraw consent, where processing is based on consent
• Lodge a complaint with a data protection authority

Some data may need to be retained even after a deletion request if we are legally required to keep it, for example for bookkeeping, tax, dispute or legal purposes.

To exercise your rights, contact us.

10. Security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse or disclosure. This includes using secure hosting, access control, updates, backups and secure payment processing.

11. Changes to this policy

We may update this privacy policy from time to time. The latest version will always be available on our website.