Legal
Privacy Policy
Last updated: 14 October 2026. How Dexora Digital collects, uses and protects personal data.
1. Who we are
This Privacy Policy explains how Dexora Digital Oy (Business ID 3619467-9), Oulu, Finland (“Dexora Digital”, “we”, “us”) handles personal data on dexoradigital.fi and in our client communications. We are the data controller for the data described here.
You can contact us about privacy at info@dexoradigital.fi.
2. What data we collect
Enquiry and audit forms: your name, email address, website address, company details and anything you write in your message.
Communications: emails, calls and messages exchanged with us.
Technical data: basic information such as IP address, browser type and pages requested, which our hosting provider records in server logs for security and operation.
Client data: if you become a client, the business and contact details needed to deliver and invoice our services.
3. Why we use your data and our legal basis
To reply to your enquiry and prepare a requested audit, based on your request and our legitimate interest in responding to business enquiries.
To provide and invoice services under a contract, and to meet legal and accounting obligations.
To keep the website secure and working, based on our legitimate interest.
To send marketing emails only where you have agreed or where the law allows business-to-business contact, and always with an easy way to opt out.
4. Cookies and tracking
This website currently uses only cookies and similar technologies that are necessary for it to work. We do not run advertising cookies.
If we add analytics or marketing tools in future, we will ask for your consent where the law requires it and update this policy.
5. Who we share data with
We do not sell personal data. We share it only with providers that help us run our business, such as website hosting, email and communication tools, project and customer management tools, and accounting services. They may process data only on our instructions.
We may disclose data where required by law or to protect our legal rights.
6. Transfers outside the EU/EEA
Some of our team members and service providers are located outside the EU/EEA, including in Pakistan and the United States. Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards required by data protection law, such as the European Commission’s Standard Contractual Clauses.
7. How long we keep data
We keep data only as long as needed for the purpose it was collected. As a general rule, enquiries that do not lead to a project are kept for up to 24 months. Client and accounting records are kept for the periods required by Finnish law.
8. Your rights
Under the GDPR you have the right to access your data, correct it, request deletion, restrict or object to processing, receive your data in a portable format and withdraw consent at any time.
To use these rights, email us. You also have the right to complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi.
9. Security
We use reasonable technical and organisational measures to protect personal data, including access controls and secure connections. No system is completely secure, so we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.