Privacy Policy
Last updated: September 4, 2026
This Privacy Policy explains how I, Mirime, a private trader (toiminimi) registered in Finland ("I," "me," "my"), operating the online store at mirime.eu, collect, use, share, and protect your personal data when you visit my site or purchase my digital products.
I'm based in Finland, and I process personal data in accordance with the EU General Data Protection Regulation (GDPR).
-
Data controller: Mirime (private trader / toiminimi)
Business ID (Y-tunnus): 3177385-8
VAT ID: FI31773858
Registered address: Heinijärventie 166-11 as. 2, 39100 Hämeenkyrö, Finland
Contact email for privacy questions: kateolsh@mirimeoy.com
If you have any questions about this policy or how your data is handled, please contact me using the details above or via the contact form on my FAQs & Contact page.
-
Website visitors
This website is hosted by Squarespace. When you visit mirime.eu, Squarespace collects personal information on my behalf, including:
Information about your browser, network, and device
Web pages you visited before arriving at this site
Web pages you view while on this site
Your IP address
Squarespace needs this data to run the website and to protect and improve its own platform. You can read more about how Squarespace uses this data for its own purposes in Squarespace's Privacy Policy.
Analytics
I use Squarespace's built-in analytics to understand site traffic and activity. This includes:
Information about your browser, network, and device
Pages you visited before coming to this site
Your IP address
Clicks, internal link usage, pages visited, scrolling behavior, searches, and timestamps
Cookies
This website uses cookies and similar technologies — small files or pieces of text placed on your device when you visit.
Necessary/required cookies are always used, and allow Squarespace, my hosting platform, to securely serve this website to you.
Analytics and performance cookies are used, as described above, only after you acknowledge my cookie banner.
You can find more detail on the cookies Squarespace uses here.
When you make a purchase
When you buy a digital product from me, I collect personal information to fulfill your order, including:
Your name
Your email address
Billing address
Details relating to your purchase (e.g., which product(s) you bought)
I provide this information to Squarespace, my online store and hosting provider, so they can provide website and commerce services to me.
Payments
I offer two ways to pay, and your payment details are processed by whichever option you choose at checkout:
Squarespace Payments, which relies on the following sub-processors, who will also receive and process your personal data under their own privacy policies:
Stripe (payment processing) — stripe.com/privacy
Sift (fraud monitoring and detection) — sift.com/service-privacy
PayPal (which also enables Venmo), whose privacy policy is available at paypal.com/privacy
Taxes
I use Squarespace's automated tax calculation feature, which relies on Stripe to determine applicable VAT/sales tax. This may involve processing your billing address and details about the product purchased (e.g., its tax classification).
Digital delivery
Because I sell digital products only, I do not collect a shipping address for physical delivery. For most orders, your download link is sent directly to the email address you provide at checkout. For larger files, I send a PDF containing a secure, download link hosted via Dropbox. Downloading from Dropbox does not require account. Dropbox may process your IP address and device information when you access the link. See Dropbox's Privacy Policy for details.
Customer accounts
If you create a customer account on this website, I collect personal information to improve your checkout experience and provide customer service, including your name, email address, billing address(es), phone number, and order history. Your account lets you view your past orders and re-download your purchased files. I provide this information to Squarespace so they can deliver website and account services to me.
Gift cards
When you purchase a gift card, I collect the purchaser's name, email address, and payment details (processed as described in "When you make a purchase" above), and the recipient's email address if you choose to send it directly to someone else.
Donations
When you make a voluntary donation ("Throw a Coin to the Creator"), I collect your name, email address, and payment details, processed via Squarespace's built-in Donations feature, which uses Stripe as its payment processor. You can read Stripe's privacy policy at stripe.com/privacy. Donations are non-refundable and not tax-deductible.
Mailing list and marketing emails
If you tick the "Sign up to receive news and updates" checkbox at checkout, or sign up through my mailing list form elsewhere on the site, I collect your email address (and name, if provided) to send you product announcements, promotions, and updates. This checkbox is unticked by default — signing up is always your choice. I use Squarespace Email Campaigns to send these emails. You can unsubscribe at any time using the link at the bottom of any marketing email.
Order and account emails
I may email you about your order or account activity — for example, order confirmations, shipping/delivery notices (for digital delivery), or password reset confirmations. These are transactional messages and cannot be unsubscribed from, as they're necessary to provide the service you've requested.
Contact form submissions
When you submit a message through my contact form, I collect the information you provide (such as your name, email address, and message) in order to respond to you. This is processed via Squarespace's form-block storage.
Fonts
This website may use fonts served by Google Fonts and/or Adobe Fonts. To display these fonts correctly, these providers may receive information about your browser, device, the page you're viewing, and your IP address.
Social media links
My site links to my Instagram and Etsy profiles. Clicking these links takes you to third-party platforms with their own privacy practices; I don't share your data with them just by linking, but visiting those platforms is subject to their own policies:
-
I process your personal data on the following legal bases:
Performance of a contract — to process and fulfill your order, provide digital downloads, and manage your account.
Legitimate interests — to operate, secure, and improve my website and store, prevent fraud, and communicate with you about your order.
Consent — for marketing emails and non-essential (analytics) cookies, which you can withdraw at any time.
Legal obligation — to comply with tax, accounting, and consumer protection laws (e.g., retaining invoices for the period required by Finnish/EU law).
-
Some of the third parties I use (such as Stripe, Sift, PayPal, Dropbox, and Squarespace itself) may process data outside the European Economic Area (EEA), including in the United States. Where this occurs, these providers rely on appropriate safeguards recognized under GDPR, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. You can review each provider's own policy (linked above) for details on their transfer safeguards.
-
I retain personal data only as long as necessary for the purposes described in this policy:
Order and invoice data is kept for the period required by Finnish tax and accounting law (generally 6 years).
Marketing email data is kept until you unsubscribe or request deletion.
Account data is kept while your account remains active, or until you request deletion.
Analytics data is retained per Squarespace's own retention practices.
-
As a data subject, you have the right to:
Access the personal data I hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten"), subject to legal retention obligations
Restrict or object to certain processing
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time, where processing is based on consent (e.g., marketing emails)
Lodge a complaint with a supervisory authority — in Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi
To exercise any of these rights, contact me at kateolsh@mirimeoy.com.
-
My products are intended for a general audience and are not directed at children. I do not knowingly collect personal data from children under 16. If you believe a child has provided me with personal data, please contact me so I can delete it.
-
I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. The "Last updated" date at the top of this page will reflect the most recent revision.
-
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out via:
Email: kateolsh@mirimeoy.com
Contact form: https://mirime.eu/faqs