Home
GDPR

Privacy policy

Last updated 24.7.2026

1. Data controller and contact details

3D Pop-up Card Finland
Business ID: 2925769-4
Domicile: Helsinki
info@paperitaika.fi
Postal address available on request.

2. Data collected

We collect the information you provide when placing an order: name, email, phone number (optional), delivery address and any additional order-related details. If you use the “we write & post” service, we also collect the name and postal address of each recipient and the message to be hand-written in the card. From newsletter subscribers we collect the email address and an optional name.

3. Purpose of data use

We use the data to process and deliver orders, for customer service and – with separate consent – to send the newsletter. We do not sell or disclose data to third parties for marketing purposes.

4. Payment data

Payments are processed securely through SumUp. We do not process or store your card details at any stage – the payment transaction is handled directly in the payment provider's secure environment.

5. Newsletter and consent

The newsletter is based on voluntary consent: we only send it to subscribers who have signed up themselves and accepted the consent at sign-up. You can unsubscribe at any time via the link at the end of every message or by contacting us.

6. Data processors and recipients

To provide the service we use external service providers who process personal data only on our behalf and in accordance with our instructions:
  • SumUp: payment processing. Handles the payment transaction; we do not process or store card details ourselves (see section 4).
  • Sender.net: technical sending of the newsletter. Processes the subscriber's email address and an optional name (see section 5).
  • Hosting / server service: order and contact details are stored on the servers of the online store's service provider.
  • Cloudflare Web Analytics: cookieless visitor statistics. Processes technical request data (such as page address, referrer and browser type) in aggregate form; sets no cookies and is not used to profile or identify individual visitors (Cloudflare does not store your IP address for analytics; see section 7).
We do not disclose data to other parties unless required by law. The payment and newsletter services have their own privacy policies.

7. Cookies

The site uses only cookies that are necessary for its operation. We do not use analytics, tracking or marketing cookies. For visitor statistics we use Cloudflare Web Analytics, a privacy-friendly, cookieless tool that sets no cookies, does not track you across sites and does not profile or identify individual visitors (Cloudflare does not store your IP address for analytics) — so the site still does not require a separate cookie consent (the cookies below are necessary to provide a service requested by the user within the meaning of Section 205 of the Finnish Act on Electronic Communications Services).
Cookie Purpose Duration
popsessLogin, form protection (CSRF) and order progressSession
pop_cartShopping cart contents~30 days
pop_shipSelected delivery method~30 days
pop_trackTracked vs. light-letter choice~30 days
pop_codeDiscount code used~30 days
pop_wheelLucky-wheel popup already shown~120 days
pop_wheelbarLucky-wheel banner closed~120 days
The site's fonts are served from our own server, so opening a page does not transmit your data (such as your IP address) to external font services. You can block or delete cookies in your browser settings, but then, for example, the shopping cart and checkout may not work.

8. Data retention and deletion

The data of paid orders constitutes an accounting record within the meaning of the Finnish Accounting Act, so we retain it for six years from the end of the calendar year during which the order was placed. We cannot delete this data before the retention period expires, even if requested. After the retention period we permanently remove the personal data (name, contact details, delivery address, and any “write & post” recipient names, addresses and messages) from paid and refunded orders and keep only the record data required for accounting (order number, amounts, dates). Unpaid or cancelled orders are deleted entirely. Newsletter subscriber data is retained only as long as the subscription is active. You can request access to or deletion of your data at info@paperitaika.fi.