Privacy policy

Last updated: 11 August 2026

This Privacy Policy explains how Diptera processes personal data when you visit diptera.store, place an order, contact us, subscribe to marketing communications or interact with our website.

1. Data controller and contact details

Data controller: Diptera
Business ID (Y-tunnus): 3465988-2
Address: Hallituskatu 5, 45100 Kouvola, Finland
Privacy contact email: diptera.clothing.supp@gmail.com

2. Personal data we collect

Depending on how you interact with us, we may collect:

  • identity and contact data, including name, email address, telephone number, billing address and delivery address;

  • order and transaction data, including order number, ordered items, payment status, delivery details, return information and communications;

  • payment-related data. Payment credentials are generally processed by payment providers; Diptera does not intentionally store complete card details;

  • customer-service data, including messages, photos and information you provide about an order, delivery, return or complaint;

  • marketing data, including newsletter preferences, consent records, launch/pre-order-list registration and unsubscribe records;

  • device and usage data, including IP address, browser and device information, pages viewed, referral information and cookie identifiers, subject to your cookie preferences; and

  • fraud-prevention and security data where necessary to protect our customers, business and services.

If customer accounts are made available, we may also process account credentials and account activity. Customer accounts that remain inactive for two years may be deleted, subject to our legal obligations to retain order and accounting data.

3. Why we process data and our legal bases

Purpose Legal basis
Process orders, take payment, arrange delivery, provide support and manage returns Performance of a contract and steps taken at your request before entering a contract
Meet accounting, tax, consumer-protection, fraud-prevention and other legal obligations Legal obligation
Send newsletters, launch announcements, pre-order updates and other direct marketing where consent is required Your consent; you may withdraw it at any time
Send transactional emails, such as order, dispatch, delivery, return and service emails Performance of a contract and legitimate interests in customer service
Use non-essential analytics, advertising cookies or marketing pixels Your consent through our cookie banner
Improve our website, protect the service, prevent misuse and manage business records Legitimate interests, provided they do not override your rights and freedoms
Establish, exercise or defend legal claims Legitimate interests and, where applicable, legal obligation

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you.

4. Who receives personal data

We share personal data only where necessary and with appropriate safeguards. Recipients may include:

  • Shopify, which provides our e-commerce platform and may support checkout, order administration and customer communications;

  • payment providers available at checkout, including Shopify Payments, Stripe, PayPal, Klarna, Apple Pay, Google Pay, Shop Pay and payment-card providers, depending on the payment method selected;

  • delivery, shipping and tracking providers, including UPS where used and the carrier selected for the shipment;

  • AfterShip, which provides shipment tracking services;

  • Google Workspace and Google services used to administer business email and marketing communications;

  • Microsoft Clarity, but only when you consent to analytics cookies where consent is required;

  • service providers that host, secure or support our website and business systems;

  • professional advisers, insurers, authorities or other parties where required by law or necessary to protect legal rights.

Where a service provider processes data on our behalf, we use appropriate contractual safeguards, including a data-processing agreement where required.

5. International transfers

Some providers may process personal data outside the European Economic Area. When personal data is transferred outside the EEA, we use a lawful transfer mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses or another safeguard permitted by applicable data-protection law.

You may contact us at diptera.clothing.supp@gmail.com for more information about the safeguards relevant to a particular transfer.

6. Retention periods

We retain personal data only for as long as necessary for the purposes described in this policy:

  • order-related vouchers, invoices, customer correspondence relating to transactions and supporting accounting material: at least 6 years from the end of the calendar year in which the relevant financial year ended, where required by Finnish law;

  • financial statements, ledgers, chart of accounts and other accounting material subject to the longer Finnish statutory period: at least 10 years from the end of the relevant financial year;

  • customer-service requests: normally up to 24 months after the matter is closed, unless a longer period is needed for a legal claim or accounting obligation;

  • newsletter, launch-list and pre-order-list data: until you unsubscribe or we discontinue the list;

  • minimal suppression data after unsubscribe: for as long as necessary to honour your request not to receive further marketing;

  • customer-account data: up to 2 years of inactivity, subject to the retention of required order and accounting data; and

  • cookie and analytics data: for the periods shown in Cookie Settings.

7. Your rights

Subject to the conditions and limitations in data-protection law, you have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of data;

  • request restriction of processing;

  • object to processing based on legitimate interests and object at any time to direct marketing;

  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;

  • receive data you provided to us in a structured, commonly used and machine-readable format, and request transmission to another controller where applicable; and

  • lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

To exercise your rights, email diptera.clothing.supp@gmail.com. We may ask for information necessary to verify your identity before responding.

8. User-generated content

We may ask for separate permission before reposting, using or adapting customer photographs, videos, reviews or other user-generated content for Diptera marketing.

Tagging Diptera, mentioning Diptera or using a Diptera hashtag does not by itself grant Diptera a licence to use the content in advertising or other marketing.

9. Children

Our website and products are not directed at children. We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided us personal data unlawfully, contact us so that we can investigate.

10. Security

We use reasonable technical and organisational measures designed to protect personal data. No internet transmission or storage system can be guaranteed to be completely secure.

11. Changes to this policy

We may update this Privacy Policy when our practices or legal requirements change. The current version is published on this page with its revision date.