Who is responsible for your data?
The Resting Mimic is operated by Miniatrium, Business ID 3322120-5, Kirvestie 15b, 33710 Tampere, Finland. Miniatrium is the controller of personal data collected for this shop. Contact info@miniatrium.com about privacy or to exercise your rights.
Information we process and why
- Orders and delivery: name, email, billing and delivery addresses, telephone number when provided or needed for delivery, purchased products, order history and payment status. We use this to fulfil the purchase contract, communicate about orders and handle returns and complaints.
- Customer accounts: account details, stored addresses and order history are used to provide the account service you request.
- Messages: information you submit through our contact form or email is used to answer your request and, where relevant, administer your purchase. The legal basis is performance of a contract or steps at your request before a contract, or our legitimate interest in responding to other enquiries.
- Accounting and legal records: transaction and related records are retained to comply with legal obligations and establish, exercise or defend legal claims.
- Security and technical operation: IP addresses, browser/device information, request logs and related technical data may be processed to operate, secure and troubleshoot the shop and prevent abuse. Our legal basis is our legitimate interest in a secure and reliable service.
- Newsletter: if you subscribe, we use your email address and subscription information to send the newsletter on the basis of your consent. You can unsubscribe using the link in the email or by contacting us. Withdrawing consent does not affect earlier lawful processing.
Payments, fulfilment and other service providers
Payment details are processed by Stripe when you choose a Stripe-powered payment method. We receive payment status and transaction references; do not send full card details through our contact form or email. Stripe also processes information under its own Privacy Policy, including for fraud prevention and legal compliance.
We share order information needed for production and delivery with Printful, our print-on-demand fulfilment provider, and relevant delivery carriers. This can include your name, delivery address, contact details and ordered products. Printful’s Privacy Policy and Data Processing Terms describe its processing.
Hostinger provides hosting and website services. Website, order, account and contact-form data is processed through our WordPress/WooCommerce installation and the service providers supporting it. If you subscribe to our newsletter, subscription data is processed through Hostinger Reach. Relevant data may also be provided to professional advisers and public authorities where required by law or necessary to handle legal claims. We do not sell customer personal data.
International processing
Some providers and their subprocessors may process information outside the European Economic Area. Where GDPR requires safeguards for such transfers, the applicable arrangements must rely on an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Provider privacy notices and processing terms explain their arrangements. Contact us for information about safeguards relevant to your data.
Cookies and similar technologies
WordPress, WooCommerce and payment services use cookies and similar technologies for functions such as login, cart contents, checkout sessions, security and payment processing. Blocking necessary cookies may prevent these functions from working. Any optional analytics or advertising technologies requiring consent must not be activated before that consent. You can manage browser cookies through your browser settings. Newsletter services may process delivery and engagement information, such as link interactions, under their service settings; contact us about this or unsubscribe if you do not wish to receive newsletters.
Retention
We keep data for the period needed for its purpose. Order, payment and related accounting records are retained for applicable statutory accounting and legal periods; closing an account does not erase records we are legally required to retain. Account data is held while needed to provide the account service. Enquiries are retained as needed to resolve the request and any related claim. Newsletter data is held while your subscription is active, with limited suppression or consent records retained where needed to respect your preferences or demonstrate compliance. Technical logs and backups follow the operational retention arrangements of the relevant services. Contact us for more specific information about the retention period applicable to your records.
Your rights
Subject to GDPR conditions, you can request access, correction, erasure, restriction or portability of your data. You can object to processing based on legitimate interests, and object to direct marketing at any time. You can withdraw consent without affecting earlier lawful processing. Some information must be retained for legal obligations or legal claims. We may need to verify your identity before responding.
You may complain to the Office of the Data Protection Ombudsman in Finland or another competent supervisory authority. Contacting us first does not limit that right.
Providing information and updates
Information necessary for payment and delivery is required to fulfil an order; without it we may be unable to complete your purchase. Newsletter subscription is optional. We update this notice when our processing changes. Contact info@miniatrium.com with any questions.