Privacy Policy

GUGGUU'S CUSTOMER DATA PRIVACY POLICY

Updated 16.01.2026

In this policy, we explain the purposes for which we process personal data and what rights you have regarding the processing of your personal data. This privacy policy covers all information collected through our website or related services, as well as information collected when you contact our customer service by email or through the website.

By continuing to use the Website and our services, you accept this Privacy Policy.

 

1. Data Controller

Gugguu Oy ("Gugguu" or "we")

Business ID: 2508855-5

Pikkaraisentie 8, 90230 Oulu

customer@gugguu.com

www.gugguu.com

Phone: +358444101736

 2. Contact Information for Registry Matters

Gugguu Customer Service

customer@gugguu.com

Phone: +358444101736

Address: Muuraintie 5 A 22, 33950 Pirkkala 

3. Purpose and Legal Basis of Personal Data Processing

The processing of personal data is based on the data controller's legitimate interest (described in more detail in section 4), contractual relationship, and/or compliance with the data controller's legal obligation. Processing of personal data may also be based on the data subject's consent, which then forms the legal basis for processing as applicable. The data controller has a legitimate interest in conducting proper, justified, and lawful sales and marketing activities, including related customer profiling.

4. Description of Collected Data

Gugguu's processes personal data within the limits allowed by law to manage and develop customer relationships. Primarily, we collect personal data in our online store.

Personal data processed in the register may be used for the following purposes:

 

Orders

We need personal data to process orders for delivery and for customer communication related to orders (such as order and delivery confirmations). Additionally, data may be used for billing and collection actions as well as handling possible complaints. We do not store payment details other than the payment method and prices for possible refunds.

 

Offering and Marketing Products

 We may process personal and shopping cart data as well as purchase history for customer profiling to target offers, benefits, marketing activities, and customer communications to what interests the customer. Personal data is also processed when sending newsletters/SMS, participating in competitions and giveaways, or other marketing activities.

 

Customer Account

If you have created a customer account on our website, we use your personal data to manage the account so that you can view your order history, create wish lists, and save your shopping cart. Address information is also saved for future orders, and address details can be changed or deleted either by the customer or Gugguu's.

 

Loyalty program

If you have created when you create a customer account on our website, you automatically become a loyalty program member. We use your personal data to manage the account so that you can collect marshmallows, track your order history and reward history as well as manage your personal settings, such as marketing consent. We also use your personal data to identify you as a loyalty program member in stores and to track your purchases and earned loyalty benefits.

 

 Product and service development and anonymized reporting

We process personal data to improve our current products and services and to develop new ones. In this context, we may link the feedback provided and messages left to our customer service to the user account.

 

We use responses from consumer research and consumer surveys to analyze our customers' preferences, expectations, and opinions about our products, websites, and services.

 

We use anonymized data for reporting purposes. Anonymized data cannot be used to identify individuals; instead, we use this data to analyze the achievement of commercial objectives. Such data includes, for example, total visitor numbers on our website and the duration of visits.

 

Customer service

 

Our customer service processes your personal data when you contact it through any channel. We may combine the data collected by customer service with other personal data, such as purchase history. This allows us to provide the most personalized and efficient service possible.

 

Detection and prevention of illegal activity

 

In some cases, we may be required to disclose your information, including personal data, under law or regulations, such as in connection with legal proceedings. We may also disclose your information in response to a subpoena, court order, or other legal process, or during a police investigation or at the request of an authority.

 

 

 5. Automatically collected personal data

When you place an order or visit our website, we automatically collect information about your visit. Some of this information may be classified as personal data. Such information includes:

-       browser used, operating system, device model, IP address, connection time and connection duration

-       logged-in customer's user account identification details and registration date

-       location data (including Wi-Fi access point information)

-       websites through which gugguu.com was accessed

-       data related to online behavior on our website (for example clicks and navigation on the page, search terms used)

- cookies and other identifiers

- language

- marketing information: benefits and campaigns and their usage

- purchase history at the individual product level and shopping cart data

- additionally, data of customers subscribing to electronic newsletters/SMS is collected for managing newsletter subscriptions and other customer communication-related matters.

- other information collected based on your consent

 6. Directly collected personal data

Directly collected data refers to information you provide to us yourself as a customer, for example, when placing an order or contacting our customer service. Directly collected data includes:

- Purchaser's contact details (name, email address, phone number, postal address, and possibly other voluntarily provided personal data such as company or date of birth)

- If the order recipient is different from the purchaser, the recipient's name and postal address

- Information on marketing consents and prohibitions

- Message history with our customer service via chat, Facebook, website contact form, or email

- Contact details provided when participating in various raffles and competitions

7. Disclosure of personal data to others

Your personal data may be disclosed to Gugguu's partners within the limits permitted by law, to the extent necessary to provide our services. Third parties include data processors and only those third parties approved by Gugguu's, through whom we offer our services and further improve the customer experience. When using subcontractors or third parties, we ensure that they process personal data in compliance with data protection regulations.

To deliver an excellent customer experience and provide our services, we may need to transfer personal data to a third-party service provider's server or resources located outside the EU or its economic area. In these cases, we ensure that appropriate contractual measures apply to the transfer of personal data (for example, commitment to the European Commission's standard contractual clauses), that the transfer has a proper legal basis, and that the processing meets the confidentiality requirements imposed by law.

 

Third parties to whom it is necessary for us to disclose information for order processing are listed below. Additionally, third parties we use for marketing, website development, and analysis are listed below. This privacy statement covers the use of your data solely by Gugguu's; please also review the privacy statements of our partners.

 

-       Shipping companies: Posti, Matkahuolto, GLS, DHL and EMS.

 

-       Payment service providers: Checkout Finland, PayPal, Klarna

 

-       E-commerce system and order processing: Shopify, Storia

 

-       Customer service system and chat service provider: Gorgias

 

-       Marketing and newsletter: Klaviyo

 

-       SMS Marketing and loyalty program: Yotpo

 

-       Others: Facebook, Instagram, Google, Adtraction, 

 8. Cookies

A cookie is a short piece of text or a file that a website sends to your browser. It helps the site remember your visit details, such as your chosen language and other settings. Cookies make your next visit easier and make the site smoother for you. Cookies play an important role regarding the site's content.

Gugguu uses Shopify as the technical platform for its online store, which utilizes cookies. Cookies are used, for example, to count page visitors, enhance, and develop the site's functionality.

You can read more about the use of cookies on the Shopify e-commerce platform here.

9. Personal data on social media

Gugguu's social media sites such as Facebook, Instagram, Pinterest, Twitter, and YouTube are public, and the registers formed on these sites contain information the registered user has publicly disclosed, such as name, reviews, page likes and shares, and comments. We are in no way responsible for the personal data of users registered on social media sites or for their protection.

When you interact with us via social media, we may collect, store, and retain automatically collected data about your use of these channels. For example, if you press the Like button on our social media pages or tag your friend in our post, we record this information. This data is most likely non-identifiable, but there may be information linked to a person depending on your browser settings on the respective channel.

Content you publish on social media is data you have disclosed yourself, which may be linked to you depending on the content. We collect, store, and use this content and other information you disclose on our social media channels. We may also use information you have allowed the social media channel to share with us or that is shareable according to your user settings on these sites.

10. Retention & retention period of personal data

The register is stored electronically and properly protected from outsiders with firewalls, passwords, and other technically accepted security measures commonly used in the data security industry. Only employees of the data controller and companies acting on its behalf or account with individualized access rights granted by the data controller can access the personal data contained in the register. All employees with access to personal data are bound by confidentiality.

Gugguu retains your personal data as long as necessary to fulfill the purposes outlined in section 4 of the privacy policy. Gugguu may retain some personal data longer than mentioned above to the extent that retention is required by law, for example, to fulfill obligations related to accounting or consumer trade and to demonstrate their proper implementation.

11. Rights of Website Users Regarding Personal Data

The customer has the right to check what information about them is stored in the register. The inspection request must be sent in writing to the data controller using the contact details in section 2 of the privacy policy. The inspection request can also be made in person at the address mentioned above. When making the inspection request in person, the customer must have an identity document with them. Gugguu responds to inspection requests in writing.

If there are errors in the customer's data, the customer can submit a correction request to the data controller to fix the error. The customer has the right at any time to prohibit the use of their data for direct marketing or market and opinion research by notifying the data controller. Direct marketing prohibition can also be done from the customer's own account or by following the removal instructions in the marketing message.

The customer has the right to delete personal data processed by Gugguu at any time, except in the following situations: the customer has an open case with customer service; the customer has an open order that has not yet been fully delivered; the customer is suspected of abusing our services or has misused our services within the last four years; the customer has an unpaid debt to Gugguu regardless of the payment method; if the customer has made purchases in the online store, we must retain the personal data related to the purchase based on accounting regulations.

The customer has the right to file a complaint with the competent supervisory authority if they believe that Gugguu's operations have not complied with applicable data protection regulations. The competent supervisory authority for matters related to the processing of the customer's personal data is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).

12. Children's Personal Data

Through the online store, we only accept orders from persons who are at least 18 years old, so we do not knowingly collect children's personal data through our website.

13. Changes to the Privacy Policy

Gugguu's reserves the right to change this privacy policy. The latest version of the privacy policy is always available on this page with the publication date. If the changes in the updated policy are significant, we will notify them visibly at the beginning of the policy and on the Gugguu.com homepage.