Skip to content
Moi Store

Privacy Policy

Moi Store privacy policy and company details.

Moi Store respects your privacy and personal information. In the processing of your personal data, Moi Store complies with the European data protection principles and the applicable personal data legislation.

Controller and contact information

The data controller is Name Company Oy, which operates under the secondary business name Moi Store (later "we" or "Moi Store").

  • Address: Uutiskuja 3 A9, 01770 Vantaa, Finland
  • Business ID: 2673679-6
  • Phone: +358 50 562 4575, +358 50 394 8000
  • Contact person for data protection: Murat Işgel, tietosuoja@moistore.fi

The purpose of personal data processing is communication with customers, sales and marketing, customer service and support, and the investigation of incorrect or failed purchase transactions reported to us.

The legal basis for the processing of personal data is the implementation of the legitimate interests of the controller. The legitimate interests of Moi Store are the sale and marketing of services and products, managing customer relations and providing services to customers. Where a report concerns a purchase transaction, the processing is also necessary in order to respond to the matter raised.

Personal data to be processed

  • First and last name
  • Email address
  • Phone number, where provided
  • Company or organisation, where provided
  • Additional information provided by the person themselves
  • Information related to the customer relationship, such as communication history, feedback, service time and the topic the person wants to get advice on
  • For reports concerning a purchase: the cabinet location, the date and time of the transaction, and where provided the product, the amount charged and the payment method. We do not collect or request card numbers.
  • Form notification time
  • IP address

Transfers of personal data

Moi Store uses service providers who process your personal data on behalf of Moi Store in accordance with the contract and Moi Store’s instructions.

Moi Store processes your personal data in the EU/EEA area. Some of the service providers used by Moi Store also process data outside the EU/EEA area. In these cases, standard contract clauses approved by the EU Commission or other protective measures required by data protection legislation are followed.

Service providers we use

The following service providers process personal data on our behalf, under contract and on our instructions:

  • Vercel Inc. — hosting of this website. The server functions of this site are configured to run in the EU (Stockholm region). Vercel is a US company, so the transfer is covered by the standard contractual clauses approved by the EU Commission.
  • Our email service providers (servers in the EU) — delivery and storage of messages sent through the contact form and the chat box.
  • Google Ireland Limited — the map on the contact page, only if you choose to show it. Loading the map transmits your IP address to Google.
  • Selfly Store Oy (Finland) — the supplier of our vending cabinets. When you report a problem with a purchase, we check the cabinet’s transaction record in Selfly’s system.

How long we keep your data

  • Messages sent through the contact form or the chat box: for as long as needed to handle the matter and any customer relationship that follows. If no customer relationship arises, the message is deleted within 12 months.
  • Accounting material, such as invoices: six years from the end of the calendar year, as required by the Finnish Accounting Act (1336/1997, chapter 2, section 10).
  • Technical server logs: kept by our hosting provider for a short period for security and troubleshooting purposes.

Cookies and website technologies

This website does not use cookies, browser storage or similar tracking technologies, and it does not profile visitors. For that reason we do not ask you to accept cookies.

The chat box on the site searches the content of these pages in your own browser; no external service is involved in producing the answer. The question you type is sent to us by email so that we can see what visitors ask and improve these pages. Please do not enter confidential information or other people’s personal data into the chat box.

The contact page can show a map from Google. The map is not loaded until you click to show it; loading it transmits your IP address to Google and Google may set its own cookies.

Moi Store app (app.moistore.fi)

If you use the Moi Store app to open cabinets and pay, we process the data listed below. The legal bases are the performance of the contract between you and Moi Store (GDPR Article 6(1)(b)), our legal obligation to keep accounting records (Article 6(1)(c)) and, for preventing fraud and unpaid purchases and for evidence in payment disputes, our legitimate interest (Article 6(1)(f)).

  • Email address (sign-in with a one-time code) and, if you provide it, your name
  • Your declaration, given when you add a card, that you are at least 16 years old
  • Purchases: cabinet, date and time, products, amounts, pre-authorisations, refunds and any outstanding amount
  • For each purchase, the IP address and browser user agent used, to prevent fraud and as evidence if a payment is disputed
  • Payment card type, last four digits and expiry date, the customer identifier assigned by our payment provider and the card's Stripe fingerprint (an identifier Stripe derives from the card number that does not reveal the number). We never receive or store full card numbers.
  • Evidence of your consent to save a card: time, version and language of the consent text, IP address and user agent
  • A log of sign-in IP addresses, to prevent abuse of the sign-in

Preventing fraud and unpaid purchases

To prevent fraud and unpaid purchases, the app compares a card's Stripe fingerprint across accounts. A card that has an unpaid purchase on another account cannot be added, and prepaid cards are not accepted. If a charge fails, we email you and the unpaid amount is carried over: the next time you open a cabinet, the hold is €10 plus the unpaid amount (your bank may ask you to confirm it with 3-D Secure), and the unpaid amount is charged together with that purchase. Amounts under €0.50, Stripe's minimum charge, are carried over in the same way. Only an unpaid amount over €50 prevents opening cabinets; in that case, contact info@moistore.fi. The legal basis is our legitimate interest in preventing fraud and payment defaults (Article 6(1)(f)). These checks are automated decisions; see “Automated decision-making and profiling” below.

Recipients and processors for the app

  • Stripe Payments Europe, Limited (Ireland) — processes app payments. Stripe is an independent controller for certain processing, such as fraud prevention: https://stripe.com/privacy
  • Selfly Store Oy (Finland) — operates the cabinets. Selfly receives only the session identifier and an anonymous customer reference needed to open the door and record the purchase.
  • Vercel Inc. — hosting of the app in the EU (Frankfurt region, fra1). Vercel is a US company; transfers are based on the EU-US Data Privacy Framework and the standard contractual clauses approved by the EU Commission.
  • Neon — the app's database, located in the EU.
  • Resend (Resend, Inc., USA) — sends sign-in codes and payment notices, such as a failed charge, by email. Transfers are based on the EU-US Data Privacy Framework and standard contractual clauses.

Cookies and browser storage in the app

The app does not use tracking cookies. It uses one strictly necessary cookie to keep you signed in, and stores the following in your browser's local storage: your language choice, the last cabinet you used, that cabinet's product list and your chosen payment method. These are strictly necessary to provide the service you request, so no consent is asked for them. The payment form is provided by Stripe.js, which may set its own cookies for fraud prevention; see Stripe's privacy policy at https://stripe.com/privacy.

How long app data is kept

  • IP address and user agent stored with a purchase: at most 13 months, after which they are deleted.
  • Evidence of consent to save a card: as long as the card is saved, plus 13 months.
  • Sign-in IP log: 2 days.
  • Purchase and payment records needed for accounting: six years from the end of the year in which the financial year ended (Accounting Act 1336/1997, chapter 2, section 10). Only purchase and accounting data are kept for this period.
  • Account data (email address, name, age declaration and saved card details): while your account is active. We delete it on request; the purchase rows the Accounting Act requires us to keep are then retained in anonymised form, so they can no longer be linked to you.

Automated decision-making and profiling

Using our website does not involve automated decision-making or profiling.

In the Moi Store app, the checks described above are automated decisions: the app automatically refuses a card that has an unpaid purchase on another account and prepaid cards,, adds an unpaid amount to the hold and charge of the next purchase, and prevents opening cabinets if the unpaid amount exceeds €50. No other profiling takes place. You have the right to have such a decision reviewed by a person, to express your point of view and to contest the decision. Send your request to info@moistore.fi.

Rights of registrants

If you have questions, concerns or requests related to Moi Store’s processing operations, you can contact Moi Store’s data protection contact person by email at tietosuoja@moistore.fi.

You have the right to access the personal data we process about you, to have incorrect or incomplete data rectified and to have your data erased. You also have the right to receive the data you have given us in a commonly used, machine-readable format (data portability).

You can ask us to restrict the processing of your data. You can also object, on grounds relating to your particular situation, to processing based on our legitimate interest, such as fraud prevention. You also have the right to lodge a complaint with the supervisory authority, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, www.tietosuoja.fi).

Version updated on 17.10.2026