GDPR

Data controller

Kelvo Brook Media, Linnukkatie 4 91900 Liminka, Finland
Privacy matters: [email protected]

What we process

• Account data: name, email address and password hash.
• Subscription data: Premium plan type, validity and billing history.
• Payment data: the payment provider's transaction ID and the last four card digits for receipts. We never see or store full card numbers.
• Technical data: the cookie choice saved in your browser and security logs.

We do not collect location data, profile users or use advertising tracking.

Legal bases

• Contract (Art. 6(1)(b)) – user account, Premium delivery and billing.
• Legal obligation (Art. 6(1)(c)) – retaining accounting records.
• Consent (Art. 6(1)(a)) – the newsletter.
• Legitimate interest (Art. 6(1)(f)) – service security and abuse prevention.

Retention

Account data is kept until you ask us to delete your account. Accounting records are kept for six years from the end of the financial year, and security logs for 90 days.

Your rights

• Access your data and receive a copy of it.
• Have inaccurate data corrected or your data erased.
• Object to processing or ask for it to be restricted.
• Receive your data in a machine-readable format.
• Withdraw your consent at any time.

Send your request to [email protected]. We will reply within 30 days at the latest.

Transfers

Data is stored within the EU/EEA. If a provider ever processes data outside the area, the transfer relies on Standard Contractual Clauses approved by the European Commission.

Supervisory authority

If you believe your data has been processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland.

Last updated 21 October 2026