PRIVACY POLICY
CELESTIC® PRIVACY POLICY
Last updated: April 30, 2026
DATA CONTROLLER
CELESTIC®, Trading Wrld Oy
Business ID (Y-tunnus): 3424047-5
Address: Leväsentie 52, 70780 Kuopio, Finland
Email: info@wrldcelestic.store
If you have questions about how we handle your personal data, please contact us at info@wrldcelestic.store.
INTRODUCTION
CELESTIC® operates this store and website to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, disclose, and retain your personal information when you visit, use, make purchases, or communicate with us through our Services.
Please read this Privacy Policy carefully. By using our Services, you confirm that you understand the collection and use of your data as described in this Privacy Policy.
- PERSONAL INFORMATION WE COLLECT AND PROCESS
Depending on how you interact with our Services, we may collect or process the following categories of personal data:
Contact Information: Name, billing address, shipping address, phone number, and email address. Financial Information: Payment transaction details and confirmation details. Payment card data is processed securely by our payment providers and is never stored by CELESTIC® directly. Account Information: Username, password, preferences, and settings. Transaction Information: Products you view, add to your cart, purchase, return, or exchange. Communication: Information you provide when contacting our customer service. Device and Usage Information: IP address, browser type, network connection details, and information about how you navigate and interact with our online store. Marketing Preferences: Your consent status for email and SMS marketing.
- SOURCES OF PERSONAL INFORMATION
Directly from you: When you create an account, place an order, subscribe to marketing, or contact us. Automatically: From your device via cookies and similar technologies when you browse our site. From our Service Providers: For example, from payment processors and logistics partners.
- HOW WE USE YOUR PERSONAL INFORMATION AND LEGAL BASIS
We process your personal data only where we have a lawful basis to do so under GDPR Article 6.
Processing orders and payments — Contact, financial, transaction data — Art. 6(1)(b) Contract performance — Retention: 7 years (accounting law) Delivering orders and handling returns — Contact, transaction data — Art. 6(1)(b) Contract performance — Retention: 7 years (accounting law) Customer service and communications — Contact, communication data — Art. 6(1)(b) Contract performance — Retention: 3 years after last contact Email and SMS marketing — Email, phone, marketing preferences — Art. 6(1)(a) Consent — Retention: Until consent is withdrawn Fraud prevention and security — Device, usage, transaction data — Art. 6(1)(f) Legitimate interest — Retention: Duration of investigation Analytics and site improvement — Device, usage data — Art. 6(1)(f) Legitimate interest — Retention: As configured per tool Compliance with legal obligations — Contact, financial, transaction data — Art. 6(1)(c) Legal obligation — Retention: 7 years (accounting law) Affiliate and referral tracking — Device, usage, transaction data — Art. 6(1)(f) Legitimate interest — Retention: Duration of affiliate program
Where we rely on legitimate interest (Art. 6(1)(f)), we have assessed that our interests do not override your fundamental rights and freedoms.
- COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies to operate and improve our Services.
Cookies may be used for the following purposes:
Strictly necessary: Required for the website to function (e.g. shopping cart, session management). Analytics and performance: To understand how visitors use our site (e.g. Microsoft Clarity, wetracked.io).
Marketing and advertising: To show relevant ads and track conversions (e.g. Google Shopping, Meta Ads). Personalisation: To remember your preferences and tailor content.
You can manage your cookie preferences through the cookie banner displayed when you first visit our site, or through your browser settings. Withdrawing consent for non-essential cookies will not affect the functionality required to complete a purchase.
- HOW WE DISCLOSE YOUR PERSONAL INFORMATION
We may share your personal data with the following categories of third parties:
E-commerce Platform Shopify Inc. — our e-commerce platform provider. Data is processed in accordance with Shopify's Data Processing Agreement. Learn more: shopify.com/legal/privacy
Logistics and Delivery Matkahuolto — delivery to Finland, Estonia, and Sweden. UPS — delivery to the rest of Europe. Shipit — delivery management and fulfilment.
Email and SMS Marketing Omnisend — email marketing and SMS campaigns.
Analytics and Tracking Microsoft Clarity — behavioural analytics, heatmaps, and session recordings. Data is anonymised where possible. Learn more: privacy.microsoft.com
wetracked.io — conversion tracking.
Simprosys Google Shopping Feed — product feed for Google Shopping and advertising.
Customer Experience and Upsell Rokt Aftersell — post-purchase marketing. Upsell.com (ReConvert) — upsell and cross-sell functionality. Upcart — cart functionality.
Trustpilot — customer review platform.
Reviews you submit are governed by Trustpilot's own privacy policy.
Automation and Integrations Make (formerly Integromat) — workflow automation between platforms. GOAFFPRO — affiliate marketing program management.
Authorities We may disclose your data to competent authorities where required by law or to defend our legal rights.
All third-party processors are bound by data processing agreements and are required to handle your data in accordance with GDPR.
- INTERNATIONAL DATA TRANSFERS
Some of our service providers (including Shopify, Google, Microsoft, Omnisend, and others) may process your personal data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as:
Standard Contractual Clauses (SCCs) approved by the European Commission. Adequacy decisions by the European Commission. Binding Corporate Rules or other approved transfer mechanisms.
You may request further information about these safeguards by contacting us at info@wrldcelestic.store.
- DATA SECURITY AND RETENTION
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
We retain your personal data only for as long as necessary for the purposes described in this Policy, or as required by law. Key retention periods:
Order and transaction data: 7 years (Finnish Accounting Act). Customer service communications: 3 years after last contact. Marketing data: Until you withdraw your consent. Analytics data: As configured per individual tool (typically 13–26 months). Fraud prevention data: For the duration of any investigation or legal proceedings.
- YOUR RIGHTS
In accordance with GDPR, you have the following rights regarding your personal data:
Right of Access (Art. 15): You can request a copy of the personal data we hold about you. Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete data. Right to Erasure (Art. 17): You can request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations. Right to Restriction (Art. 18): You can request that we restrict the processing of your data in certain circumstances. Right to Data Portability (Art. 20): You can request your data in a structured, machine-readable format. Right to Object (Art. 21): You can object to processing based on legitimate interest, including profiling for direct marketing. Withdrawal of Consent (Art. 7): Where processing is based on consent (e.g. marketing), you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@wrldcelestic.store. We will respond within 30 days. We may request identity verification before fulfilling your request.
We will not discriminate against you for exercising any of these rights.
- RIGHT TO LODGE A COMPLAINT
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the competent supervisory authority:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Website: tietosuoja.fi
Email: tietosuoja@om.fi
Address: PO Box 800, 00531 Helsinki, Finland
We encourage you to contact us first so we can try to resolve your concern directly.
- CHANGES TO THIS PRIVACY POLICY
We reserve the right to update this Privacy Policy due to operational or legal changes. We will publish the updated version on this page and update the "Last updated" date at the top of this document. For significant changes, we will notify you by email where we hold your contact details.
- CONTACT US
If you have any questions about our privacy practices, wish to exercise your rights, or want to make a complaint, please contact us:
CELESTIC®, Trading Wrld Oy
Email: info@wrldcelestic.store
Address: Leväsentie 52, 70780 Kuopio, Finland
(Added 01.01.2025)
Last updated: April 30, 2026
