1. Introduction
Welcome to Tillyjoypebbl.digital ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website tillyjoypebbl.digital (the "Site"), including any other media form, media channel, mobile website, or mobile application related or connected thereto.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site.
2. Information We Collect
Personal Data You Provide
We may collect personal information that you voluntarily provide to us when you:
- Fill out our contact form (name, email address, message content)
- Subscribe to our newsletter (email address)
- Communicate with us via email or other channels
Automatically Collected Information
When you visit our Site, we may automatically collect certain information about your device and your visit, including:
- Device Information: Browser type, operating system, device type, screen resolution
- Usage Data: Pages visited, time spent on pages, click patterns, referring URLs
- Location Data: General geographic location based on IP address (country/city level only)
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Site and hold certain information (see Section 5)
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and maintain our Site: Ensuring our content is delivered properly and our features function correctly
- To respond to inquiries: When you contact us through our contact form, we use your information to respond to your message
- To send newsletters: If you opt in, we send periodic emails about new café discoveries, Nordic lifestyle content, and waterfront travel guides
- To improve our Site: Understanding how visitors use our Site helps us create better content and user experiences
- To protect our Site: Monitoring for potential security issues and preventing fraud or abuse
- To comply with legal obligations: Responding to lawful requests from public authorities
4. Legal Basis for Processing (GDPR)
If you are a resident of the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it:
- Consent: You have given us permission to process your personal data for one or more specific purposes (e.g., newsletter subscription)
- Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our Site and services, provided those interests are not overridden by your rights
- Contract: Processing is necessary for the performance of a contract with you
- Legal Obligation: Processing is necessary for compliance with a legal obligation
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Site. Cookies are small data files placed on your device.
Types of Cookies We Use
- Essential Cookies: Necessary for the Site to function properly. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our Site by collecting and reporting information anonymously.
- Preference Cookies: Remember your preferences and settings to enhance your browsing experience.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our Site may not function properly.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: We may employ third-party companies and individuals to facilitate our Site (e.g., hosting providers, email service providers, analytics services). These third parties have access to your personal data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
- Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction.
7. Data Retention
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
- Contact form submissions: Retained for up to 2 years, then securely deleted
- Newsletter subscriptions: Retained until you unsubscribe
- Analytics data: Retained for up to 26 months in aggregated, anonymized form
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: You have the right to request copies of your personal data
- Right to Rectification: You have the right to request correction of inaccurate personal data
- Right to Erasure: You have the right to request deletion of your personal data under certain conditions
- Right to Restrict Processing: You have the right to request restriction of processing of your personal data
- Right to Data Portability: You have the right to request transfer of your data to another organization or directly to you
- Right to Object: You have the right to object to our processing of your personal data
- Right to Withdraw Consent: You have the right to withdraw consent at any time where we relied on consent to process your data
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
9. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our servers
- Secure hosting infrastructure with regular security updates
- Limited access to personal data on a need-to-know basis
- Regular review of our data collection, storage, and processing practices
However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
10. International Data Transfers
Our Site is operated from Finland within the European Union. If you are accessing our Site from outside the EU, please be aware that your information may be transferred to, stored, and processed in Finland and other EU countries. By using our Site, you consent to the transfer of information to Finland and other EU countries, which may have different data protection rules than those of your country.
11. Children's Privacy
Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us.
12. Third-Party Links
Our Site may contain links to third-party websites, including café websites, travel resources, and social media platforms. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policy of every website you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
For GDPR-related inquiries, you also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) or your local supervisory authority.