Privacy Policy
How we handle your personal data under the GDPR
1. Controller
Elira Living (owner: Zeerak Ata), Lapinrinne 1b, 00180 Helsinki, Finland · support@eliraliving.com · Business ID 3526013-6.
2. What we collect
- Order & payment data — name, address, email, order contents. Card details go directly to Stripe and are never stored on our servers.
- Newsletter — your email, if you subscribe.
- Technical data — IP, browser, pages visited (hosting/checkout providers).
- Local storage — cart & language, stored in your browser only.
3. Legal bases (Art. 6 GDPR)
- Art. 6(1)(b) — performance of the purchase contract.
- Art. 6(1)(c) — legal obligations (tax/accounting).
- Art. 6(1)(a) — consent (newsletter, analytics & marketing).
- Art. 6(1)(f) — legitimate interests (secure shop).
4. Recipients & processors
- Stripe Payments Europe, Ltd. (Dublin) — payments.
- Fulfilment partner in Latvia (EU) — name & delivery address.
- Hosting — GitHub Pages + a Cloudflare Worker. SCCs apply to any EEA transfer.
- Analytics & advertising (with consent): Google (Analytics 4, Ads), Meta Platforms, TikTok — see §5.
- Email marketing — Klaviyo (Klaviyo, Inc., USA) processes your email address to send the newsletter (with your consent) and order-related emails. Standard Contractual Clauses cover the US transfer.
5. Cookies, analytics & advertising
We use essential local storage (cart & language), which needs no consent. With your consent we also use Google Analytics 4, Google Ads, the Meta (Facebook/Instagram) Pixel the TikTok Pixel and Klaviyo (onsite cart tracking for reminder emails) to measure traffic, show relevant ads and send cart reminders. These load only after you accept via our cookie banner (Google Consent Mode v2; default denied) and may set cookies and transfer data to Google, Meta, TikTok and Klaviyo, including outside the EEA under appropriate safeguards. Change or withdraw your choice anytime via "Cookie settings" in the footer.
6. Retention
Order/accounting data for the statutory periods under Finnish bookkeeping law (generally 6 years). Newsletter until you unsubscribe.
7. Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — email support@eliraliving.com. Lead authority: Finnish Data Protection Ombudsman (tietosuoja.fi). DE/NL customers may also contact their national authority.
This notice reflects the information provided by the business. Please have it reviewed by a qualified adviser. Last updated: June 2026.