Privacy policy

Privacy Policy (in accordance with the EU General Data Protection Regulation – GDPR 2016/679)
This privacy policy also includes information required by the Finnish Personal Data Act (523/1999, Section 10).

North Ray is committed to protecting the privacy of its customers and follows good data protection practices in all operations. This privacy policy explains what types of personal data we may collect from you when you order our products or contact us through our website, and for what purposes we may use such data. Customers must accept the terms of this privacy policy before placing an order from our online store.

1. Data Controller

North Ray
Business ID: 3351736-4
Kirjaskatu 3
37600 Valkeakoski, Finland
Phone: +358 40 7011159

2. Contact for Data Protection Matters

Data protection and personal data processing are managed by JLK Coaching Oy / North Ray.

Contact person: Johanna Latva-Kiskola
Email: info@northray.fi
Phone: +358 40 7011159

3. Name of the Register

North Ray Online Store Customer Register

4. Purpose of the Register

The register is used for the following purposes:

  • Customer relationship management (e.g. order processing, deliveries, warranties, invoicing)

  • Development and administration of the online store, improving user experience

  • Customer communication, marketing, and targeting of marketing

The processing of personal data is based on the customer relationship between the customer and North Ray, contract execution, website usage, the customer’s explicit consent, or legal obligations under the EU General Data Protection Regulation.

5. Data Contained in the Register

The customer register may include the following personal data provided by the user:

  • First and last name

  • Email address

  • Phone number

  • Shipping information

  • Payment/invoicing information

  • Marketing consent and opt-out preferences

  • Product reviews

In addition, the following usage-based or analytically derived data may be included:

  • Purchase history, including ordered products and pricing

  • Website usage and browsing behavior

  • Data collected through cookies (e.g. traffic source to the online store)

6. Regular Sources of Data

Most data is collected directly from the customer when they interact with our website. Information may also be gathered via forms on our website, at events, campaigns, or during customer service phone calls.

7. Disclosure of Data to Third Parties

North Ray may disclose data to third parties (e.g. payment processors, logistics partners, and in some marketing contexts) as necessary for providing the service. These third parties may include:

  • Shipping companies such as Posti

  • Payment service providers (for credit/debit card payments)

These third parties are only provided with the necessary information to perform their services and are not allowed to use the data for their own purposes. We do not sell, rent, or otherwise disclose your personal data to external parties.

In addition, North Ray may disclose personal data to authorities when legally required to do so.

8. Transfer of Data Outside the EU/EEA

North Ray uses servers located outside the EU (e.g. Canada/USA) for storing register data. Other than this, data is not transferred outside the EU/EEA unless required for the provision of services. In such cases, we ensure adequate data protection as required by applicable law.

9. Principles of Register Security

The databases related to the register are protected by firewalls, passwords, and other technical means against unauthorized access. Backups are stored in secure, locked facilities. Only authorized personnel working for North Ray or on behalf of the company can access the register with personal access rights.

10. Rights of the Data Subject

Data subjects have the following rights:

  • Right to access personal data

  • Right to rectify inaccurate or incomplete data

  • Right to restrict processing (e.g. to opt out of marketing)

  • Right to object to processing

  • Right to withdraw consent (e.g. to unsubscribe from marketing)

  • Right to lodge a complaint with the supervisory authority

Requests must be submitted in writing and signed, sent to the contact email above. A reasonable fee may be charged for repeated requests (more than once per year).

Some rights may be limited by legal obligations, such as those related to financial record-keeping.

11. Data Retention

Personal data is retained only as long as necessary to fulfill the purposes described in this privacy policy. Some information may be stored longer as required by Finnish accounting law.

12. Use of Cookies

Cookies are small text files stored on a user’s device by the browser. They contain unique identifiers and enable user recognition. We use cookies to improve user experience, ensure functionality, and analyze traffic. Users cannot be personally identified through cookies alone.

There are two types of cookies: persistent and session cookies. Persistent cookies remain on your device for up to 12 months, while session cookies are deleted once the browsing session ends. You can manage cookies through your browser settings.

Note: Disabling cookies may limit the functionality of our website.

13. Changes to This Privacy Policy

We may update this policy as services or regulations evolve. Significant changes will be communicated to registered customers when the terms are updated.

Last updated: 26 May 2023

Quality and satisfaction guarantee

All our products have a 30-day return policy and a one-year quality guarantee.

Finnish quality

Designed in Finland – a premium collection of blue light glasses that combine quality, function, and effortless style.

The best service

The most durable lenses and frames, lightning-fast delivery, and customer service that truly shines.

Fast delivery

We always ship orders within 1-3 business days from our warehouse.

Secure payments

Secure payment methods through Paytrail include online banking, credit cards, installment payments, Klarna and PayPal.