Privacy Policy

How we collect, use, and protect personal data.

Version 1.0 · Last updated 10 July 2026

Data controller

GRANSKA
Finland
Email: rickymknowles@gmail.com

Company registration (osakeyhtiö) is in progress with the Finnish Trade Register; this page will be updated with the registered legal name and Business ID (Y-tunnus) upon completion.

What we collect

Contact form

When you use the contact form we collect your name, email address, company (optional), and the message you write. Nothing else.

Email and phone

If you contact us directly, we process the contact details and content you choose to share.

Client engagements

For contracted work we process business contact details, engagement records, and the documents you submit for review — which may themselves contain personal data (for example, names on test certificates).

What we do not collect

This website sets no cookies, runs no analytics, and does no tracking or profiling. See our Cookie Policy.

Why we process it (legal basis)

PurposeLegal basis (GDPR Article 6)
Responding to enquiriesLegitimate interest
Conflict-of-interest screening before engagementsLegitimate interest
Delivering contracted servicesContract performance
Invoicing and accounting recordsLegal obligation (Finnish Accounting Act)

We do not use personal data for automated decision-making or profiling, and we do not send marketing communications without your consent.

Who processes it on our behalf

ProviderPurposeLocation
Web3FormsContact form delivery to our inboxUnited States — transfers safeguarded under GDPR Chapter V mechanisms
HostingerEmail hosting (rickymknowles@gmail.com)EU
NetlifyWebsite hosting (server logs incl. IP addresses, retained briefly for security)EU/US — transfers safeguarded under GDPR Chapter V mechanisms

We do not sell, rent, or trade personal data. Providers act under data processing terms and process data only for the purposes above.

How long we keep it

DataRetention
Contact form submissions and enquiry emails12 months after last contact
Client engagement records6 years (Finnish Accounting Act)
Documents submitted for reviewDeleted 90 days after engagement completion, unless agreed otherwise

Your rights

Under the GDPR you may request access to, rectification or erasure of your data, restriction of processing, data portability, or object to processing (Articles 15–21), and withdraw any consent at any time. Email rickymknowles@gmail.com — we respond within 30 days.

You may also lodge a complaint with the Finnish supervisory authority: Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman), Lintulahdenkuja 4, 00530 Helsinki — tietosuoja.fi.

Client documents

Documents submitted for review may contain personal data. We process such data solely to deliver the contracted services; the client remains the data controller and we act as data processor where applicable (GDPR Article 28). Data processing terms are included in our engagement documentation.

Security

The site is served over HTTPS. Client documents are stored with access controls and are not shared with third parties. No internet transmission is completely secure, but we take reasonable and proportionate precautions.

Changes

We may update this policy; material changes are communicated on this page. Check the version date above.


Questions about this policy or our data handling: rickymknowles@gmail.com. See also our Terms and Cookie Policy.