Last updated: 4 October 2026
This notice explains how Finlandic Care handles personal data when you visit finlandiccare.com, book a session, message us or ask for a proposal. We collect as little as we can, protect it carefully and never sell it.
Who is responsible for your data
- Finlandic Care Ltd (Egypt), the operating company of Finlandic Care.
- AvunAvain Oy (Finland), our parent company, Business ID 3013511-7, Evästie 5A 9, 01360 Vantaa, Finland. AvunAvain Oy acts as the merchant of record for online payments and is the controller for data about bookings it contracts.
Questions or requests: privacy@finlandiccare.com. You can also contact AvunAvain Oy at info@avunavain.fi.
What we collect and why
When you book a session
- Your name, email address and mobile number, so we can confirm the booking, send reminders and contact you about it (contract).
- Who the support is for, and that person's first name and age range. We never ask for a date of birth (contract).
- An optional short note. Please do not share medical details here. Notes are encrypted (contract).
- Your address, only for home visits. Addresses are encrypted (contract).
- Your country, preferred language and format, and the time you chose (contract).
- Your consents: terms, privacy notice, guardian confirmation where relevant, optional WhatsApp reminders, and for EU customers your request to start within the withdrawal period. We store the version, the time and a one-way hash of your IP address as a record (legal obligation, contract).
When you pay
Payments are processed by Stripe. We never see or store your card details. We receive a payment reference and status so we can confirm your booking (contract, legal obligation for accounting).
When you message us or ask for a proposal
The details you give us (name, organization, job title, email, phone, message and the programmes you are interested in), so we can reply (legitimate interests, or steps before a contract). When you click a WhatsApp button we record that the button was used, the page and the programme, but not your phone number or the conversation.
When you browse
We use Plausible Analytics, which is cookieless and does not build a personal profile. We use only strictly necessary cookies, such as remembering your language. See our cookie policy.
Who we share data with
Only the service providers we need to run Finlandic Care, under data-processing agreements:
- Stripe (payments)
- Vercel (website hosting, EU region)
- Our database host (EU region)
- Resend (email delivery)
- Cloudflare (spam protection on forms)
- Plausible (cookieless analytics)
- The Finlandic Care professional who delivers your sessions
We share information with authorities only where the law requires it, or where someone's safety is at serious risk.
International transfers
Our systems are hosted in the European Union. Because we work in Finland, Egypt, Saudi Arabia and the UAE, your data may be accessed from those countries by the people who support you. We protect these transfers with appropriate safeguards, such as the European Commission's standard contractual clauses, and follow the transfer rules of each country's data-protection law.
How long we keep it
- Unpaid booking holds: 30 days
- Bookings and invoices: as long as accounting law requires (in Finland, 6 to 10 years)
- Session notes: deleted 12 months after your last session, unless the law requires longer
- Enquiries and proposal requests: 24 months
- Technical logs of payment events: 90 days
Your rights
Depending on where you live, the EU General Data Protection Regulation, Egypt's Personal Data Protection Law (No. 151 of 2020), Saudi Arabia's Personal Data Protection Law and the UAE's Federal Decree-Law No. 45 of 2021 give you rights over your data, including to:
- access the data we hold about you, and receive a copy
- correct inaccurate data
- ask us to delete data we no longer need
- object to or restrict some processing
- withdraw consent at any time, without affecting earlier processing
Write to privacy@finlandiccare.com. We reply within one month. You can also complain to your data-protection authority; in Finland this is the Data Protection Ombudsman (tietosuoja.fi).
Children
Bookings for children and teens are made by a parent or legal guardian, who confirms this when booking. We collect only a first name and age range for the child.
Security
We use encryption in transit and at rest, encrypt sensitive booking fields at the application level, limit staff access to what each person needs, and review access regularly.
Changes
If we change this notice we will update the date above, and tell you directly if the change matters for an existing booking.