This privacy policy explains what personal data the Blackstar Halo website and web shop collect, why, and what rights you have. The website and web shop are run by 24h Entertainment Oy, which is the controller of your personal data. It follows the EU General Data Protection Regulation (GDPR).
Controller and contact
24h Entertainment Oy (Business ID 2982048-3)
Nirvankatu 57, 33820 Tampere, Finland
Email: info@blackstarhalo.fi
Email us with any question about your data or to use your rights.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Orders: name, postal address, email, phone number, ordered products, payment status | To deliver your order, send order emails, handle returns and keep accounts | Contract; legal obligation (bookkeeping) |
| Customer account, if you create one: login, saved addresses, order history | So you can see your orders and check out faster | Contract |
| Messages you send us by email | To answer you | Legitimate interest |
| Comments: name, email, IP address, comment text | To publish comments and prevent spam | Legitimate interest |
| Technical data: IP address, browser, pages visited | To run the site securely and block abuse | Legitimate interest |
We don’t sell your data, and we don’t use it for automated decisions or profiling that affects you.
How long we keep it
- Order data and receipts: 6 years from the end of the year of the order, as Finnish bookkeeping law requires.
- Customer accounts: until you ask us to delete the account. Orders inside the account are kept as above.
- Email messages: as long as needed to deal with the matter.
- Comments: until you ask us to remove them.
Who we share it with
We share only what each service needs to do its job:
- Posti (Finland): name, address and contact details to deliver your parcel.
- PayPal and Trustly: payment details. They process payments as independent controllers under their own privacy policies; we never see your card or bank login details.
- Zoho (EU data centre): sends our order and contact emails.
- Our hosting provider (servers in the EU): stores the website and shop data.
- Google: reCAPTCHA protects the checkout and login forms from bots, and Google Fonts delivers the site’s fonts. Our product information (not your data) is shared with Google Merchant Center so our products can appear in Google.
- Meta (Facebook, Instagram): our product information (not your data) is shared with Meta for our product catalogue.
- Spotify and YouTube: the music player and videos on the site are loaded from these services. When you play them, Spotify or YouTube may set their own cookies.
- Authorities, when the law requires it.
Some of these companies, such as Google, PayPal and Spotify, may process data outside the EU, for example in the United States. Such transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Cookies
- Necessary: WooCommerce cookies keep your shopping cart and login working. The site can’t work without them.
- Embedded content: Spotify and YouTube set their own cookies when their players load or play.
We don’t use advertising or tracking cookies. You can delete cookies and block them in your browser settings.
Your rights
- See what data we have about you and get a copy of it.
- Have wrong data corrected.
- Have your data deleted, unless we must keep it by law (such as receipts).
- Restrict or object to processing based on legitimate interest.
- Get the data you gave us in a machine-readable format.
To use these rights, email info@blackstarhalo.fi. We answer within one month.
You also have the right to complain to the Finnish data protection authority, the Office of the Data Protection Ombudsman (tietosuoja.fi).
Changes
We update this policy when our services change. Last updated: 23 October 2026.