Privacy Policy

Data Controller

Mallow Oy Lemuntie 3-5 B 3.krs, 00510 Helsinki, Finland Business ID: 3200030-4 Email: hello@mallow.fi

What Data We Collect

We collect the following types of data when you visit our website:

• Analytics data — anonymized usage data such as pages visited, time spent on pages, referral source, browser type, device type, and approximate geographic location.
• Contact form submissions — when you fill out our contact form, we collect your name, email address, company name, job title, and message content.

Analytics Services

We use the following analytics services to understand how visitors use our website:

Google Analytics (GA4)

Google Analytics helps us measure traffic and engagement across our website. Data is processed by Google LLC in accordance with their privacy policy.

Azure Application Insights

Application Insights is a performance monitoring service provided by Microsoft. It helps us ensure the website is performing well and identify technical issues. Data is processed by Microsoft Corporation in accordance with their privacy statement.

Cookies

Our website uses the following cookies:

Cookie	Provider	Purpose	Duration
_ga	Google Analytics	Distinguishes unique visitors	2 years
_ga_*	Google Analytics	Maintains session state	2 years
ai_session	Azure Application Insights	Tracks a user session	30 minutes
ai_user	Azure Application Insights	Identifies unique visitors for usage analytics	1 year

Purpose and Legal Basis

We process your data for the following purposes:

• Website analytics — to understand how our website is used and to improve the user experience. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
• Contact form — to respond to your inquiry. Legal basis: performance of a contract or steps prior to entering into a contract (Article 6(1)(b) GDPR).
• Cookies — where required by law, we obtain your consent before placing non-essential cookies. Legal basis: consent (Article 6(1)(a) GDPR).

Data Sharing and Transfers

We share data with the following third parties as part of the services described above:

• Google LLC (United States) — Google Analytics data. Transfers to the US are safeguarded by EU Standard Contractual Clauses (SCCs).
• Microsoft Corporation (EU/United States) — Application Insights data. Microsoft processes data within the EU where possible. Transfers to the US are safeguarded by EU Standard Contractual Clauses (SCCs).

We do not sell your personal data to third parties.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data.
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to restrict processing — request limitation of processing in certain circumstances.

To exercise any of these rights, contact us at hello@mallow.fi. We will respond within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

Data Retention

• Analytics data — retained for 14 months, after which it is automatically deleted.
• Contact form submissions — retained for as long as necessary to handle your inquiry, and no longer than 2 years after last contact.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how we handle your data, contact us at:

Email: hello@mallow.fi Mallow Oy Lemuntie 3-5 B 3.krs, 00510 Helsinki, Finland