Privacy Policy
We explain transparently how we process your personal data securely and confidentially in line with the GDPR.
What data we collect
We only collect the information that is necessary to provide you with the best possible service and to meet our legal obligations.
Information you provide to us
We ask for basic contact and account details so that the marketplace can function:
- Identification and contact details such as your name, email address, phone number, organisation and billing address.
- Marketplace preferences, subscription choices and communication settings you actively select.
- Order history, listings you create, payment references and support messages necessary to provide the service.
Information we collect automatically
When you use Willit we collect limited technical metadata to keep the service secure and improve the experience:
- Usage analytics including pages visited, actions taken, timestamps, feature adoption and error events.
- Search queries and keywords you submit so we can refine search relevance and marketplace content.
- Technical data such as IP address, device and browser type, operating system version, language, cookie identifiers and approximate location derived from IP.
How we use your data
We use the information we collect for clearly defined purposes and never sell personal data to third parties:
- • To send launch updates, transactional emails and other important messages you have requested.
- • To develop the marketplace, resolve bugs and improve the user experience based on aggregated insights.
- • To suggest relevant categories, suppliers and content that match your profile and keyword activity.
- • To protect the service from abuse, detect fraud and ensure system integrity.
- • To meet legal, tax and regulatory obligations, including accounting and compliance reporting.
Our legal bases for processing
Willit processes personal data in accordance with Articles 6 and 13 GDPR. Each processing activity relies on one or more of the following bases:
- • Performance of a contract or steps taken at your request before entering into a contract (e.g. creating an account, fulfilling orders).
- • Your consent for optional communications, marketing updates or analytics where consent is required. You can withdraw consent at any time.
- • Willit’s legitimate interest in maintaining and developing a secure, reliable marketplace balanced against your rights and expectations.
- • Compliance with legal obligations such as bookkeeping, taxation, fraud prevention and responding to lawful authority requests.
Keeping your data safe
We apply administrative, technical and organisational safeguards to protect your information. Personal data is stored securely within the EU (primarily Finland), access is restricted to authorised staff, and all processors are bound by data-processing agreements aligned with the GDPR.
How long we keep your data
We retain personal data only for as long as it is needed for the purposes described or to comply with statutory requirements.
- • Account and marketplace data are retained while you maintain an account and deleted or anonymised within 12 months of closure unless law requires longer storage.
- • Invoicing, contract and bookkeeping records are stored for up to 6 years to meet Finnish accounting law obligations.
- • Aggregated analytics and keyword logs are truncated and anonymised within 18 months.
Trusted processors and transfers
We work with carefully selected EU and EEA-based service providers who help us operate Willit. They process personal data solely on our documented instructions.
Categories of processors
- • Cloud hosting, content delivery and security vendors that store encrypted data within the EU/EEA.
- • Analytics and product experience tools that collect aggregated usage metrics without building individual profiles.
- • Customer support and communication tools that enable timely responses to your enquiries.
If a processor is located outside the EU/EEA, we ensure adequate safeguards such as EU Standard Contractual Clauses and continuous risk assessments before any transfer.
Your rights
You can exercise the following rights under the GDPR by contacting us using the details below:
- • Access the personal data we hold about you.
- • Correct inaccurate or incomplete information.
- • Request the deletion of your data when it is no longer needed or processed unlawfully.
- • Receive your data in a structured, commonly used format and transmit it to another controller.
- • Request restriction of processing while we assess a correction request or objection.
- • Object to processing based on legitimate interests or direct marketing at any time.
- • Lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) if you believe our processing violates the GDPR.
Data controller
The following organisation is responsible for processing personal data:
Willit Oy
Business ID: 3570240-8 / FI35702408
Postal address: Oulu, Finland
Primary contact: Risto Holappa
Phone: +358 442854421
Email: risto@viher.it
All personal data is stored in Finland and within the EU.
Contact us
If you have questions about privacy or want to exercise your rights, contact our privacy lead:
We respond to verified privacy requests within 30 days and will inform you if more time is needed.
Willit Oy
Risto Holappa
044 285 4421
risto@viher.it
Supervisory authority: Office of the Data Protection Ombudsman, Ratapihantie 9, 00520 Helsinki, Finland (tietosuoja.fi).
Last updated: 1/14/2026