Last updated: 18 June 2026
Privacy policy
This policy explains what personal data we collect, why we collect it, and what your rights are. The data controller is Unattended Oy (business ID 3622216-6), Hiomotie 10, 00380 Helsinki, Finland. We process personal data under the EU General Data Protection Regulation (GDPR).
1. What we collect
We collect: your name and email when you create an account; your delivery address so we can ship books; your chosen themes and subscription history; the list of books we've sent you (so we never send the same one twice); technical logs of how the service is used. Payment card details are handled by Stripe - we never see them.
2. How we use it
To deliver and bill your subscription, pick books for you, provide customer support, meet legal obligations (e.g. accounting), and improve the service. With your consent we may also send a newsletter, which you can cancel at any time.
3. Legal basis
Performance of a contract (delivering your subscription), legal obligation (accounting and consumer law), legitimate interest (improving the service and preventing abuse), and consent (newsletter, optional analytics).
4. Retention
Account data is kept while your account is active and for 24 months after closure. Accounting records are kept for 6 years as required by Finnish accounting law. Your book history is kept while your account is active so we can honour the no-duplicates promise.
5. Recipients and subprocessors
We use trusted providers that process data on our behalf: Stripe (payments), Posti (delivery within Finland), Google (Google sign-in, if you use it), Meta (Facebook sign-in, if you use it), Vercel (hosting), and Supabase (database). We do not sell your personal data.
6. International transfers
Some subprocessors (e.g. Stripe, Google, Meta) may process data outside the EU/EEA. When they do, we rely on the European Commission's Standard Contractual Clauses or other appropriate safeguards.
7. Cookies and analytics
We use strictly necessary cookies for login and checkout. We also use pseudonymous analytics to measure usage. We do not use advertising or retargeting cookies.
8. Your rights
You have the right to access, correct and delete your data, restrict or object to processing, port your data to another service, and withdraw any consent. Requests: asiakaspalvelu@kirjaviisas.fi. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
9. Security
We keep your data behind encrypted connections (TLS) and restrict access to staff who need it. If a personal data breach is likely to result in a high risk to your rights, we will notify you without undue delay.
10. Changes and contact
We may update this policy. We'll email you about material changes. For privacy questions: asiakaspalvelu@kirjaviisas.fi, Unattended Oy, Hiomotie 10, 00380 Helsinki.