Privacy notice
This notice explains how we process personal data from the website, email and SMS marketing, contacts, and orders.

Controller
LoCaLoCo OÜ is responsible for processing personal data related to the localoco.fi website, email and SMS marketing, contact forms, and consumer online store.
Privacy contact: info@localoco.fi.
Data we process
For email and SMS marketing, we process an email address and/or phone number, selected channels and market, consent text, source and timestamps, and opt-out, suppression, and delivery data.
For retailer and contact forms we process company, contact person, email, phone, city, business ID and message details.
For the online store we process data needed for orders, payments, delivery and customer communications.
Purposes and legal bases
Data is used to deliver orders, process payments, provide customer support, follow up retailer sales, and send consented email and SMS messages about products, availability, launches, and offers.
Marketing is based on separate consent for each channel. You can withdraw email consent through the unsubscribe link and SMS consent by replying STOP. Withdrawal does not affect the lawfulness of processing before it.
Depending on context, processing is based on contract, consent, legitimate interest or statutory obligations.
Retention and sharing
We keep data only as long as the purpose, accounting, complaints or legal obligations require.
We retain evidence of consent and withdrawal, and necessary suppression data, so that we respect your channel choices and do not send marketing after an opt-out.
Data may be processed in technical services such as hosting, email, payments, analytics and order systems. We do not sell personal data.
SMS messages are delivered through Twilio. Twilio processes phone numbers, message content, and sending, delivery, and reply data on our behalf to provide the SMS service.
Twilio and its subprocessors may process data outside the EEA. International transfers use applicable safeguards under data protection law, such as binding corporate rules or EU standard contractual clauses.
Your rights
You can request access, correction, deletion, restriction, objection or withdrawal of consent.
You may lodge a complaint with a supervisory authority if you believe data is processed unlawfully.