Privacy Policy

Effective Date: December 5, 2024
Last Updated: February 27, 2025

  • This Privacy Policy describes how Fexd (Finlandia Express Delivery, “FEXD”) collects, uses, stores, and shares your personal data when you interact with our platform. We adhere to the General Data Protection Regulation (“GDPR”) and Finnish privacy laws, ensuring transparency and protection for your data. We also aim to comply with the requirements set by the Apple App Store and Google Play Store.

    1. Who We Are

    We are Finlandia Express Delivery (FEXD), a company registered in Finland under the number 3260739-2.

    • Company Name: Finlandia Express Delivery (FEXD)

    • Registered Address: Telkantie 3, Loimaa 32210, Finland

    • Contact Email: info@fexd.fi

    As a data controller, we determine the purposes and means of processing your personal data in accordance with GDPR and Finnish privacy laws.

    2. Data We Collect

    We collect different types of personal data to provide and improve our services:

    2.1 Account Data

    • Name

    • Email address

    • Password

    • Phone number

    2.2 Order Data

    • Items purchased

    • Order history

    • Delivery address and time

    2.3 Payment Data

    We use Stripe to securely process payments. We do not store your credit card or banking details on our servers. All payment information is handled by Stripe in compliance with PCI-DSS standards.

    2.4 Location Data

    • GPS-based location data is used only to display the user’s location on a map within the application to facilitate deliveries and provide location-based features.

    • Location data collection is optional and subject to the user’s permission. Users can disable location access in their device settings at any time.

    2.5 Device & Usage Data

    • We do not actively collect IP addresses, device IDs, browser types and versions, or crash logs.

    • However, certain third-party services (e.g., analytics or crash reporting) may automatically collect this data to help us improve app performance and fix bugs.

    2.6 Customer Support Data

    • Messages, queries, and feedback sent to our support team

3. Why We Collect Your Data

  • We collect and process your personal data for the following purposes:

    1. To Provide Our Services

      • Creating and managing user accounts

      • Processing and delivering orders

    2. To Improve User Experience

      • Enhancing app functionality and user interface

      • Analyzing usage patterns (if using analytics services)

    3. To Prevent Fraud and Security Risks

      • Detecting and preventing fraudulent activities

      • Ensuring the safety and security of our services

    4. Legal Basis for Processing (GDPR Compliance)

    We process personal data based on the following legal grounds:

    • Performance of a contract (GDPR Art. 6(1)(b))
      Providing delivery and related services.

    • Legal obligations (GDPR Art. 6(1)(c))
      Tax and compliance requirements.

    • Consent (GDPR Art. 6(1)(a))

      • Location tracking

      • Marketing preferences (if applicable—e.g., push notifications or newsletters)

    • Legitimate interests (GDPR Art. 6(1)(f))

      • Fraud prevention

    5. Data Retention

    We retain personal data only as long as necessary for the purposes outlined above or as required by law:

    • Account Data: Deleted after 3 years of inactivity unless required for ongoing legal or contractual obligations.

    • Payment Data: Stored for 7 years for tax compliance.

    • Customer Support Data: Retained for 6 years to address any legal claims or support issues.

    6. Data Sharing & Third Parties

    We may share your data with the following entities:

    1. Drivers and Sellers

      • Limited to the details necessary to fulfill your order (e.g., delivery address, contact phone number).

    2. Payment Processors

      • Stripe for secure transactions. We do not store your payment details.

    3. Cloud Hosting & Analytics Providers

      • If we use cloud hosting or analytics services to improve our service, they may process minimal information (e.g., user activity, crash logs, etc.).

    4. Authorities

      • For legal compliance, such as tax or law enforcement requests.

    We do not sell your personal data to third parties.

    7. Security Measures

    We implement encryption, secure servers, and strict access controls to protect your data. However, no system is 100% secure. We encourage you to use a strong password and keep your credentials confidential.

    8. Your Rights (Under GDPR & Finnish Law)

    You have the right to:

    1. Access & Rectify Data

      • Request a copy of your personal data.

      • Request corrections to inaccurate or incomplete data.

    2. Delete Data

      • Request deletion of your personal data when it’s no longer needed or if processing is unlawful.

    3. Object to Processing

      • Restrict or object to certain processing activities, including direct marketing.

    4. Data Portability

      • Receive a machine-readable copy of your data.

    5. Lodge a Complaint

      • You have the right to lodge a complaint with a supervisory authority if you believe your data is processed unlawfully. In Finland, this is the Data Protection Ombudsman.

    To exercise your rights, contact us at info@fexd.fi.

    9. Children’s Privacy

    Our services are not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

    10. Data Deletion Request Process

    Users can delete their accounts or request data deletion by:

    1. Using the “Delete Account” option within the app’s settings.

    2. Contacting us at info@fexd.fi.

    Once your account is deleted, we will remove or anonymize your personal data, unless we are legally required to retain certain information.

    11. International Data Transfers

    Your data may be transferred outside the EU/EEA. Whenever we transfer data internationally, we ensure an adequate level of protection by using safeguards such as Standard Contractual Clauses (SCCs) or by transferring to countries recognized by the European Commission as having adequate data protection.

    12. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. When we do, we will notify users via:

    • Email notifications (if you have provided an email address)

    • App notifications

    • Posting the updated policy on our website

    We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

    13. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us: