Controller and contact
Flairko Ltd. Oy, Finnish Business ID 2248560-0. For inquiries and privacy requests: info@flairko.com.
Information and purpose
We process the information you submit to assess and answer your business inquiry and prepare a possible quotation. This includes contact name, company, email, requested service, product category and description, and any optional registration number, batch size, schedule or budget you provide. Required fields help us understand and respond to your request; optional fields may be left blank. Please do not send sensitive personal information or confidential formulas in your initial inquiry. An inquiry does not place an order.
For business representatives, processing is based on our legitimate interest in responding to business inquiries and preparing proposals. Where you are personally the prospective contracting party, processing necessary to take steps at your request before entering into a contract may instead be based on that purpose. We also use limited technical information for our legitimate interest in keeping the form secure and preventing abuse. Inquiry information is not used to enrol you in marketing.
Access, services and international processing
The owner handles inquiry emails. Namecheap provides website hosting and email services. Messages are read through Private Email and the Gmail mobile app; no forwarding is configured. The custom form does not intentionally retain inquiry bodies in a WordPress form-entry database.
Namecheap confirms website hosting and its provider-managed hosting backups are in Amsterdam, Netherlands, and the Private Email datacenter is in Phoenix, USA. Email processing therefore involves the USA. Namecheap’s published Data Processing Addendum includes Standard Contractual Clauses for relevant international transfers. Information about these safeguards is available at https://www.namecheap.com/legal/universal/data-processing-addendum/ or from info@flairko.com.
Security data and cookies
The inquiry form uses a session cookie and signed tokens to protect submissions. Temporary counters and identifiers limit automated abuse and duplicate submissions. The custom plugin uses a salted digest of the connection IP address for rate limiting; providers may separately record IP addresses in technical logs. The cookie lasts for the browser session. Form tokens are valid for 20 minutes; confirmation markers for 10 minutes; used-request markers for 24 hours. Rate counters expire after one hour without a counted submission. Expired database entries may remain until cleanup runs. These controls do not make automated decisions with legal or similarly significant effects.
Retention and deletion
We delete inquiry emails that do not become projects 12 months after the last meaningful contact. Relevant information for an agreed project is handled as customer/project records, with retention determined by the project and applicable obligations. Information needed for legal obligations or specific legal claims may be kept as necessary.
Deletion includes relevant mailbox folders and copies under our control. Namecheap has confirmed daily Private Email backups retained for up to four weeks. Deleting an active message does not immediately erase every backup copy. Restored messages can include previously deleted mail; following a restoration, we review relevant messages and reapply deletions. Namecheap says technical logs rotate regularly but has not disclosed exact retention periods.
Your rights
Depending on the circumstances, you may request access, correction, erasure or restriction, object to processing based on legitimate interests, and request portability where applicable. Contact info@flairko.com. These rights are subject to legal conditions. You may complain to the Finnish Data Protection Ombudsman: https://tietosuoja.fi/en/home.