Privacy Policy
Last updated: August 2026
1. Controller
In Light and Memory
Pilkotunmäenkatu 5 D 99
15240 Lahti
Finland
Email: inlightandmemory@gmail.com
Business ID: [VERIFY AND INSERT BUSINESS ID]
In Light and Memory is the controller of personal data processed in connection with this website and our online store.
2. What Personal Data We Collect
Depending on how you use our website, we may process information such as:
name and contact details;
email address;
billing and delivery information;
order and transaction information;
information provided through our contact forms;
information relating to returns, refunds and customer service;
information necessary to maintain the security and functionality of the website.
We do not need or intentionally collect sensitive personal information through the online store.
3. Why We Process Personal Data
We process personal data for the following purposes:
processing and fulfilling orders;
arranging delivery;
processing payments and refunds;
communicating with customers about orders and customer service;
handling returns, withdrawals and complaints;
responding to enquiries submitted through our website;
fulfilling accounting and other legal obligations;
maintaining the security and functionality of our website;
developing and improving our services where permitted by law.
The legal basis for processing may include the performance of a contract, compliance with a legal obligation, our legitimate interests, or consent where consent is required.
4. Service Providers
We use selected service providers to operate our online store and fulfil customer orders.
These may include:
Squarespace – website and online store platform.
Stripe – payment processing, if Stripe is used as the payment service for the store.
WhiteWall – professional production and fulfilment of photographic prints and delivery of orders.
Service providers may process personal data only to the extent necessary to provide their services.
5. Payment Information
Payment card details are processed by the applicable payment service provider. In Light and Memory does not intentionally store customers' complete payment card details.
6. Contact Forms
When you contact us through a contact form, we process the information you provide in order to respond to your enquiry.
We may retain correspondence for as long as reasonably necessary to handle the enquiry and for legitimate business or legal purposes.
7. Marketing Communications
We only send marketing communications where we have a lawful basis to do so.
If you subscribe to marketing communications, you can withdraw your consent at any time using the unsubscribe function provided in the communication or by contacting us at inlightandmemory@gmail.com.
8. Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, taking into account legal, accounting and contractual obligations.
Order and accounting information may need to be retained for longer periods where required by applicable legislation.
9. Your Rights
Depending on the circumstances, you have the right to:
request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data where applicable;
request restriction of processing;
object to certain processing;
request data portability where applicable;
withdraw consent where processing is based on consent.
To exercise your rights, contact us at:
You also have the right to lodge a complaint with the competent data protection supervisory authority.
10. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or unlawful processing.
11. Changes to This Privacy Policy
We may update this Privacy Policy when our services, processing activities or legal requirements change.
The latest version will always be published on this page.
Cookie Information
Our website may use cookies and similar technologies to provide essential website functionality, maintain security, remember preferences and understand how visitors use the website.
Some cookies may be placed by third-party services used on the website.
Where required by law, non-essential cookies are used only with the visitor's consent.
You can manage available cookie preferences through the cookie settings provided on the website.
For more information about personal data processing, please see our Privacy Policy.