Privacy notice

Who is responsible for your data?

The controller is Verhoomo Kytö (Maija Kytö, business ID 3276932-4), Kuninkaantie 43, 02940 Espoo, Finland.

For privacy questions, contact Maija: maija@verhoomokyto.fi or 050 302 6346 .

What information do we collect?

We receive information from you when you contact us, for example by email or phone, request an estimate or arrange upholstery work. Reviews shown on the site come from public Google reviews.

• Contact details: name, email address, phone number and, when needed, a collection or return address.
• Upholstery details: furniture description and photos, quantity, fabric and schedule preferences, and other details needed for the work.
• Progress of the work: messages, work plans, quotations, agreed schedules, and collection, delivery and invoicing details.
• Finished work and feedback: photos, story and any permission to publish, as well as public Google reviews displayed on the site.
• Technical data: essential cookies and server logs, such as IP address, browser details and visit time.

We do not ask for a personal identity number or payment card details for upholstery work.

How do we use information?

We do not sell your information, share it with others for marketing or use it for automated decision-making.

• To prepare an estimate, work plan and quotation, carry out and deliver the upholstery work, and communicate with you. Basis: a contract or steps taken before entering one.
• For invoicing and accounting. Basis: legal obligation.
• To request feedback, improve our service and secure the site. Basis: legitimate interest.
• To publish finished-work photos and stories as agreed, only with your permission. You can withdraw it at any time. Basis: consent.

Who can access your information?

Verhoomo Kytö handles enquiries and order details. Published photos, stories and Google reviews are visible to site visitors. The site and its storage use the following services:

• Hetzner: the site and PostgreSQL database run on servers in Helsinki, Finland.
• MinIO: images are stored within the same Hetzner environment.
• Resend: email sent by the site.
• Invoicing service: invoices are prepared in a separate invoicing service.

Resend is a US-based provider, so email information sent through it may also be processed outside the EU. Information is disclosed to authorities only when required by law.

How long do we keep information?

Order details and photos are kept for as long as they are needed to complete the work and handle follow-up questions or complaints. You may request the deletion of information no longer needed once the work is complete and paid for.

Invoices and other accounting records are kept for the period required by law. Published stories and photos remain on the site until you withdraw publication permission or ask us to remove them.

Does the site use cookies?

The site does not use analytics or advertising cookies or track visitors for marketing. It uses a session cookie needed for its operation. Staff sign-in may also use a remember-me cookie.

Your appearance preference is stored in your browser's local storage, and pages may be cached for offline use. Fonts and images are served from this site's own server. The server may retain technical logs for security and troubleshooting.

Links to Instagram, Facebook, WhatsApp and Google lead to services with their own privacy policies.

Where do the reviews come from?

The site displays public Google reviews of Verhoomo Kytö with the reviewer's public Google name. Contact us if you would like your review removed from this site.

What are your rights?

You can ask to access, correct or erase your information, restrict its use or object to processing. Where applicable, you may also request data portability and withdraw your consent.

Send your request to maija@verhoomokyto.fi . We will respond within one month. If you believe your information is being handled unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman .

How is information protected?

Connections to the site are encrypted (HTTPS). The database and original images are not directly public; private images are shown through restricted links when needed. Staff sign in with individual credentials, and access is limited to authorised users.