Privacy policy
Last updated: 30 March 2026
1. Controller
Company: Huopatehdas Johanna Alho
Business ID: 2752457-6
Address: Partalantie 131, 42100 Jämsä, Finland
Phone: +358 50 516 5475
Email: asiakaspalvelu@alhonhuopatehdas.fi
You can contact us regarding all privacy and data protection matters.
2. What data we collect
We collect the following information from customers:
– First and last name
– Email address
– Address details
– Phone number
– Company name and business ID (if applicable)
– Order details
We may also collect information when you subscribe to our newsletter or use our website.
Data is mainly collected directly from the customer when placing an order, creating a customer account, subscribing to the newsletter, or joining the loyalty program.
3. Purpose of processing
We use personal data for:
– processing and delivering orders
– customer service
– invoicing
– managing customer relationships
– sending newsletters (only with consent)
Customer data collected through in-store loyalty program registrations is stored in our e-commerce customer system for managing the customer relationship.
4. Legal basis for processing
Processing of personal data is based on:
– contract (processing orders)
– legal obligations (accounting)
– consent (newsletter)
– legitimate interest (customer relationship management and development)
5. Data disclosure
Personal data is not disclosed to third parties for marketing purposes.
Data may be shared to enable service delivery with:
– payment service providers (Paytrail, Klarna, PayPal)
– delivery companies (Posti, PostNord, GLS, UPS, DPD)
Payment service providers process personal data in accordance with their own privacy policies.
6. Data transfers outside the EU/EEA
Some of the services we use (such as analytics and marketing tools) may process data outside the EU/EEA.
In such cases, we ensure that transfers are carried out in accordance with data protection legislation and that the level of data protection meets EU data protection requirements.
7. Data retention
We retain personal data only as long as necessary:
– to manage the customer relationship
– to comply with legal obligations
8. Data protection
Personal data is processed only by persons whose job duties require it.
Systems are protected with usernames and passwords. Physical materials are stored in locked facilities.
9. Your rights
You have the right to:
– access your personal data
– request correction of your data
– request deletion of your data
– request restriction of processing
– transfer your data to another system
– object to processing
– withdraw consent (e.g. newsletter or loyalty program)
You can exercise your rights by contacting us.
10. Cookies and tracking
We use analytics and tracking tools on our website (such as Google Analytics and Tracklution) to improve website functionality and services.
11. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority if you believe your personal data is being processed unlawfully.
More information: https://edpb.europa.eu