Privacy policy

1. Who is responsible

Lounge & Lenses Oy, Helsinki, trading as Lounge & Lenses, runs this storefront. For anything to do with your data — a copy, a correction, a deletion — write to hello@loungeandlenses.com.

2. The short version

This storefront keeps your basket, your saved frames, any discount code you have typed and your cookie choice in your own browser’s local storage. None of that is sent to us; we cannot read it, and clearing your site data removes it. The only personal data that reaches us is what you type into the order form when you place an order, or into an email when you write to us.

3. What we hold and why

Data	Purpose	Basis	Retention
Name, address, email, phone	Fulfilling and delivering your order	Contract	6 years (Finnish Accounting Act)
What you ordered and paid	Order handling, returns, the guarantee	Contract	6 years, then anonymised
Payment confirmation, never card numbers	Knowing the order is paid	Contract	6 years
Email address on its own	The newsletter, if you signed up	Consent	Until you leave
Basket, saved frames, discount code, cookie choice	Keeping your basket between visits	Strictly necessary	In your browser only, never sent to us
Aggregate page and frame views	Seeing what people look at	Consent	13 months, aggregated

Card details go straight to the payment provider. We never see them and never store them.

4. Cookies and the cookie bar

• Necessary. Your cookie choice and the local storage that holds your basket. Set regardless, because the shop does not function without them.
• Measurement. Aggregate counts of page and frame views. Set only if you choose “Accept both” on the cookie bar, and not set if you choose “Basket only”. You can change your mind by clearing site data, which brings the bar back.

No advertising cookies, no cross-site tracking, no data brokers, no pixels from social networks.

5. Who else sees it

Only the processors needed to run the shop, each under a data processing agreement and each receiving only what it needs:

• The payment provider — name, email, amount
• The carrier — name, address, phone, for delivery only
• The email service — email address, for order mail and the newsletter
• The hosting provider — server logs including IP addresses, kept 30 days

We do not sell personal data and we do not share it for anyone else’s marketing.

6. Outside the EEA

Our processors are inside the EEA where we can arrange it. Where one is not, the transfer is covered by the European Commission’s Standard Contractual Clauses.

7. Your rights

Under the GDPR you can ask for a copy of your data, have it corrected or deleted, restrict how it is used, or have it passed to another provider. You can object to processing based on legitimate interests and withdraw consent at any time. Email hello@loungeandlenses.com; we answer within 30 days and usually within a few.

Where accounting law obliges us to keep something, we will say so rather than delete it, and delete it when the period ends.

8. Complaints

You can complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). We would rather hear from you first so we can put it right.

9. Changes

If this policy changes in a way that matters, the date at the top changes and we note what moved. Earlier versions are available on request.

Terms & conditions