Privacy policy

Last updated: 18 February 2026

Ruffy (“we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and ePrivacy requirements.

By visiting our website or using our services, you agree to this Privacy Policy.

1. Data Controller

Ruffy
Puolalankatu 6
20100 Turku, Finland
Email: contact [at] ruffy.fi

2. What personal data we collect

We only collect information that is necessary to run our store, process your orders, and improve our services.

Categories of data:

  • Identification details: name, address, email, phone number
  • Payment data: payment method, transaction details (we never store full card numbers)
  • Account data: username, settings, order history
  • Order & delivery data: purchased products, returns, exchanges
  • Technical data: IP address, browser type, device information
  • Cookie & tracking data: clicks, viewed products, pages visited

We do not collect special category (sensitive) data.

3. Cookies & marketing (Google & Meta)

We use cookies to ensure the proper functioning of our website, to improve analytics, and for targeted marketing.

Cookie categories:

Essential cookies
Shopping cart, login, checkout functionality

Analytics cookies (e.g. Google Analytics)
Website improvement and error monitoring

Marketing cookies
Targeted advertising on Google and Meta platforms

For marketing purposes, we use technologies including:

  • Meta Pixel
  • Advanced Matching
  • Conversions API

These technologies help us measure advertising effectiveness, optimize campaigns, and display more relevant ads on Meta services (Facebook & Instagram).

The technologies may collect data such as:

  • page visits
  • viewed products
  • purchase events
  • device and browser information
  • IP address

Processing of this data is based on user consent via the cookie banner.

You can manage your cookie preferences at any time using our cookie consent tool.

5. Third Parties within the EU and EEA

We only share data with partners necessary for operating our online store:

Shopify (e-commerce platform)
Payment service providers (Shopify Payments)
Delivery and logistics partners
Google (Read how Google uses cookies)
Meta (Read how Meta uses cookies)

Meta may receive data about website usage through the Meta Pixel and Conversions API for advertising measurement and optimization purposes.

All partners process data in accordance with GDPR.

We never sell personal data to third parties.

6. International Data Transfers

Some partners (e.g. Google, Meta) may process data outside the EU/EEA.

In such cases, personal data transfers are safeguarded using:

  • Standard Contractual Clauses (SCC) approved by the European Commission
  • Other GDPR-compliant protection mechanisms

7. Data retention

We only keep data for as long as necessary:

  • Orders: 6 years (legal bookkeeping requirement)
  • Customer accounts: active period only
  • Cookie data: 12–24 months
  • Marketing consent: until withdrawn

You can request data deletion at any time.

8. Your rights (under GDPR)

You have the right to:

  • access your personal data
  • request correction of inaccurate data
  • request deletion (“right to be forgotten”)
  • restrict processing
  • request data portability
  • withdraw consent at any time
  • object to direct marketing

To exercise these rights, contact us at: contact@ruffy.fi

We respond within 30 days.

9. Opting out of marketing

You can opt out of:

  • Email marketing: click “unsubscribe” in any email

  • Analytics/marketing cookies: via the cookie banner

  • Personalized ads:

Google: https://adssettings.google.com
Meta: https://www.facebook.com/ads/preferences

10. Security

  • HTTPS encryption
  • No storage of card information
  • Access to personal data is limited

However, no system is 100% secure. Please avoid sending sensitive data over unsecured channels.

We do not collect sensitive personal data through marketing technologies.
Data used for marketing purposes is limited to technical and behavioral information.

11. Changes to this policy

We may update this Privacy Policy from time to time.
When we do, we will update the “Last updated” date and post the revised version on this page.

12. Contact us

We’re always happy to answer questions about privacy.

Email: contact [at] ruffy.fi