Privacy Policy
Last updated: 1 August 2026
Data controller
RiRi Crafts Oy operates the Rójhu brand and acts as the data controller.
Business ID: 3631889-7
Location: Rovaniemi, Finland
Email: sales@rojhu.com
2. Personal data we collect
When you contact us through our website form or by email, we may collect:
• your name
• your email address
• your company name, if provided
• the type of enquiry
• the content of your message
• information generated through subsequent communication
• limited technical information processed by our website provider for the operation and security of the website
The company field is optional. Please do not include sensitive personal information in your message.
3. Purposes and legal basis for processing
We process personal data to:
• respond to product, wholesale, custom product and laser engraving enquiries
• provide information, prepare quotations and take steps before entering into a contract
• manage customer and business communications
• maintain the security and proper functioning of our website and prevent misuse or spam
• comply with applicable legal obligations
The legal bases for processing are:
• taking steps at the request of the data subject before entering into a contract or performing a contract
• our legitimate interest in responding to enquiries, managing business communications and protecting our website
• compliance with legal obligations where applicable
Information submitted through the contact form is not used for email marketing without separate consent.
4. Sources of personal data
We primarily receive personal data directly from you when you:
• submit the contact form
• send us an email
• otherwise communicate with us regarding our products or services
5. Service providers and recipients
Personal data is accessible only to persons who need it to handle enquiries and operate the business.
We use service providers that may process personal data on our behalf, including:
• Squarespace, for website hosting and contact-form processing or storage
• Google, for email services
We may also disclose information to professional advisers, public authorities or other parties where required by law or necessary to establish, exercise or defend legal claims.
We do not sell personal data.
6. International transfers
Some of our service providers may process personal data outside Finland or the European Economic Area.
Where personal data is transferred outside the European Economic Area, the transfer is protected through an adequacy decision, Standard Contractual Clauses or another safeguard permitted under applicable data protection law.
7. Retention period
Contact-form and enquiry information is retained for no longer than 24 months after the last communication.
Information may be retained for a longer period where necessary for an existing customer relationship, contractual obligations, accounting requirements, legal claims or another legal obligation.
When personal data is no longer needed, it is deleted or anonymised where appropriate.
8. Your rights
Subject to the conditions of applicable data protection law, you may have the right to:
• request access to your personal data
• request correction of inaccurate or incomplete information
• request deletion of your personal data
• request restriction of processing
• object to processing based on legitimate interests
• receive personal data in a portable format where applicable
• withdraw consent at any time where processing is based on consent
You can exercise these rights by contacting sales@rojhu.com. We may need to verify your identity before fulfilling a request.
You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland:
9. Required information
Name, email address, enquiry type and message are required so that we can identify and respond to your enquiry. If this information is not provided, we may be unable to process or respond to the enquiry.
Providing a company name is optional.
10. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.
However, no website or electronic communication system can be guaranteed to be completely secure.
11. Automated decision-making
We do not use personal data submitted through the contact form for automated decision-making or profiling.
12. Changes to this Privacy Policy
We may update this Privacy Policy when our services, systems or legal obligations change. The latest version is published on this page with the date of the most recent update.
13. Contact
For questions about this Privacy Policy or the processing of your personal data, contact:
RiRi Crafts Oy
sales@rojhu.com