Privacy policy

Last updated: 21 September 2026

Who is responsible for your data?

Preventti Oy, trading as Nordic Gym Parts, is the controller for our customer, order and enquiry data. Our Business ID is 2850022-6. Contact us at info@preventti.fi or Preventti Oy / Nordic Gym Parts, Kuljuntie 3, 21420 Lieto, Finland. Shopify and some other providers act independently for certain processing, as explained below.

Information we use

We receive information you provide when ordering, using an account, contacting us or requesting a return: name, email, telephone number, billing and delivery addresses, company and VAT details where relevant, order and payment status, and communications. For custom cables or part identification, this can include measurements, specifications and photographs you supply.

The store also processes device and browser information, IP addresses, cookie identifiers, consent choices and interactions with the store. Payment providers process payment credentials; we receive the transaction information needed to manage your order, rather than your complete payment-card details. We also receive payment updates and delivery or tracking updates from providers.

Purposes and legal bases

• Orders, accounts and enquiries: taking pre-contractual steps and performing our contract with you, including part identification, custom manufacturing, payment, delivery and returns. For contacts acting for a business, our legitimate interest is managing that business relationship.
• Legal duties: accounting, tax records, statutory consumer remedies and responses to lawful authority requests.
• Security and fraud prevention: our legitimate interests in protecting customers, preventing misuse and securing the store, balanced against your rights.
• Analytics and personalisation: understanding store usage and improving the shopping experience. Non-essential cookies and similar tracking are subject to your consent where required.
• Marketing and reminders: where you choose to receive marketing, we use your contact details and preferences on the basis of consent where required. Shopify/Shop reminders and personalised advertising are subject to the applicable service settings and privacy choices. You can unsubscribe or withdraw consent; order and service messages are separate from marketing.

Information needed to process payment and delivery is required to fulfil an order. If you do not provide it, we may be unable to supply the goods. Optional marketing consent is not required to buy from us.

Who receives information?

We share necessary information with Shopify for hosting, checkout and store administration; payment providers; shipping and delivery providers; service providers supporting product options, order operations, communications and IT; and professional advisers or authorities where necessary. Providers acting as processors must follow appropriate contractual instructions and safeguards. Providers acting as independent controllers are responsible for their own processing under their privacy notices.

Shopify and enhanced services

Our store uses Shopify Network Intelligence. Shopify processes information about visits and purchases, together with interactions with other merchants and Shopify, to provide enhanced services such as personalisation, advertising and service improvements. Shopify is responsible for the processing for which it acts as an independent controller. Applicable consent choices and privacy rights apply to these services.

Read the Shopify Consumer Privacy Policy. You can also use the Shopify privacy portal to learn about and exercise your rights with Shopify, including applicable rights to withdraw consent or object to processing for enhanced services.

Cookies and your choices

Essential technologies support security, checkout and other necessary store functions. Non-essential technologies used for analytics, advertising or personalisation require consent where applicable. Our Shopify cookie banner is enabled for Sweden and Denmark. You can accept, decline or manage optional categories, and revisit your choices through Cookie preferences in the store footer. Withdrawing consent does not affect processing that was lawful before withdrawal.

International processing

Shopify's EEA customer data is initially processed by Shopify International Limited in Ireland. Our store's selected data storage region is the EU, but this does not mean that all processing stays within the EEA. Shopify and other providers may process information elsewhere. Where required, transfers rely on recognised safeguards such as adequacy decisions or European Commission standard contractual clauses. Contact us for information about safeguards relevant to our processing; Shopify explains its transfers in its privacy policy.

How long we keep information

We keep data for the period needed for its purpose and any applicable legal obligations. Order and invoice records forming accounting vouchers generally must be retained for at least six years after the end of the calendar year in which the financial year ended; accounting records subject to a ten-year statutory period are retained accordingly. Longer retention may be needed for an unresolved claim or another legal duty.

Enquiries and custom specifications are retained while needed to respond, fulfil the order and handle related claims. Account, security and consent records are retained for as long as needed for the account, security issue or demonstration of consent and compliance. We assess necessity by the ongoing relationship, unresolved matters and statutory time limits, and delete or anonymise information no longer needed.

Your rights

Depending on the legal conditions, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You may object to direct marketing at any time. Send requests to info@preventti.fi. We may need proportionate information to verify your identity. You may complain to the Finnish Data Protection Ombudsman or your local authority, including IMY in Sweden or Datatilsynet in Denmark.

Security and updates

We use appropriate technical and organisational safeguards and limit access to those who need it. Please avoid sending unnecessary personal data in photographs or enquiries. We update this notice when our processing changes and show the update date above.