Privacy Policy

Last updated: 1 January 2026

1. Introduction

Coraplayterritory ("we," "our," or "us"), operating through the domain coraplayterritory.cfd, is committed to protecting the privacy and personal data of our customers and website visitors. This Privacy Policy explains how we collect, use, store, and share your personal data in accordance with the European Union General Data Protection Regulation (GDPR) and Finnish data protection legislation.

2. Data Controller

The data controller responsible for processing your personal data is:

Coraplayterritory
Helsinki, Finland
Email: [email protected]

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data: name, email address
  • Contact Data: email address, phone number (if provided), postal address
  • Transaction Data: purchase history, payment information (processed via third-party payment providers)
  • Technical Data: IP address, browser type, device information, cookies
  • Usage Data: pages visited, time spent on site, navigation patterns
  • Communication Data: messages sent via our contact forms

4. How We Use Your Data

We process your personal data for the following purposes:

  • Processing and fulfilling orders
  • Communicating about your orders and enquiries
  • Improving our products and website experience
  • Sending marketing communications (with your consent)
  • Complying with legal obligations
  • Preventing fraud and ensuring security

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases under GDPR:

  • Contract: Processing necessary to fulfil our contractual obligations
  • Consent: Where you have given explicit consent for marketing communications
  • Legitimate interest: For improving our services and website analytics
  • Legal obligation: Compliance with applicable Finnish and EU laws

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Transaction data is retained for up to 6 years for accounting and legal compliance. Marketing consent records are retained until you withdraw consent.

7. Data Sharing

We do not sell your personal data. We may share data with:

  • Payment processors (for order completion)
  • Shipping providers (for order delivery)
  • Analytics providers (anonymised data)
  • Legal authorities (when required by law)

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

9. International Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

12. Contact

For privacy-related enquiries, contact us at:
Email: [email protected]
Location: Helsinki, Finland