1. What data we collect

We collect only the information reasonably needed to review order requests, perform sales, provide support and meet legal obligations. Depending on the page, order request or customer support contact, this may include:

• name, company name where applicable, email address and phone number;
• city, postal code, country, billing or delivery details where needed;
• product, quantity, channel code, order and invoice information;
• delivery, customer support, refund, warranty or product issue records; and
• photos, videos or other attachments you provide when reporting a product issue.

This website does not store full payment card details. Payments are handled by invoice unless separately agreed.

2. Why we use the data

We use personal data to:

• review order requests and contact you about them;
• confirm, perform and support the sales contract;
• issue invoices, arrange delivery and provide after-sales support;
• handle withdrawals, refunds, warranty matters, complaints and product safety issues; and
• meet accounting, tax, consumer protection and product safety obligations.

The main legal bases are pre-contract steps requested by you, performance of the contract, compliance with legal obligations and, where appropriate, legitimate interests such as preventing misuse, handling disputes and keeping basic records.

Marketing messages are sent only where allowed and, when consent is required, only after a separate voluntary choice.

3. Who may receive the data

We share data only where reasonably necessary with:

• website, hosting, email and form service providers;
• invoicing, accounting and payment-administration providers;
• delivery and logistics providers;
• customer support or product safety support providers;
• the current brand or product-quality support party where needed for fulfilment, product quality or product safety support; and
• professional advisers or competent authorities where required.

Sales guides, showroom partners or channel contacts should receive only the information reasonably needed to verify channel attribution, coordinate a delivery or support a legitimate follow-up. They must not use customer data for unrelated private marketing.

4. International access and transfers

Authorised persons or service providers outside the EEA may access limited customer data where necessary for order handling, fulfilment, website operation, email communication or product safety support.

Where such access occurs, it is protected by an appropriate legal transfer mechanism and internal access controls. Further information is available on request from
support@overhimalaya.com.

5. How long we keep data

We keep order, invoice and accounting records for the period required by applicable law.

Customer support, warranty, product issue and product safety records are kept only as long as reasonably needed for those purposes and any related legal claims or compliance duties.

Optional marketing data is deleted when consent is withdrawn or when the contact is no longer needed for the relevant purpose.

6. Your rights

Subject to applicable law, you may request access to your data, correction of inaccurate data, deletion or restriction where applicable, object to certain processing, withdraw marketing consent and request data portability where the law provides it.

If you wish to exercise your rights, please contact
support@overhimalaya.com.
You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland.

7. Essential cookies

This website is intended to use only cookies or similar technical storage that are strictly necessary for basic website operation, security, language selection, form submission and session continuity.

We do not intend to use advertising, behavioural profiling or optional analytics cookies at launch. If optional cookies are introduced later, they will not be activated before a valid user choice is made, and this notice will be updated.

8. Security and updates

Access to customer data is limited to authorised persons who need it for order handling, delivery, support, accounting or product safety work.

We use reasonable organisational and technical measures appropriate to the scope of this website operation.