Privacy policy

Last Updated: 26 February 2026

I. Introduction

Your privacy is important to us. This Privacy Policy explains how Saxdor Yachts Oy (“Saxdor”, “we”, or “us”) collects, uses, shares, and protects your personal information when you use the SaxdorShop.com online store. We are committed to processing personal data in a transparent and lawful manner in compliance with the EU General Data Protection Regulation (GDPR). Please read this policy to understand what information we collect, how we use it, the rights you have, and how you can exercise those rights.

II. Data Controller – Who We Are

SaxdorShop.com is operated by Saxdor Yachts Oy, the data controller responsible for your personal data. Saxdor Yachts Oy is a Finnish company (Business ID: 3090528-1) with its registered address at Tammasaarenkatu 1, 00180 Helsinki, Finland. If you have any questions or requests regarding your personal data, you can contact us at privacy@saxdor.com or by mail at the address above (please mark the correspondence “Attn: Privacy”).

III. Personal Data We Collect

We collect various types of personal information from you when you use our online shop. This includes information you provide directly, as well as data collected automatically about your use of the site. The categories of data we process include:

1. Account and Contact Information: Creating an account is optional. If you choose to register an account or sign in, we will collect your email address and other profile details you choose to provide, and we will authenticate you. If you sign in using third party sign-in options, we receive the information necessary to link that sign-in to your SaxdorShop profile and any additional information you choose to share. If you have an account, we may also associate your order history/transaction history with that account to provide account features. When you make a purchase, we collect your name, billing and shipping address, phone number and email address to process your order and communicate with you.

2. Order and Transaction Data: When you purchase products, we record details of the items ordered, order date and time, delivery method, payment method, and transaction amount.

We also maintain records of communications about your order. If you place an order as a business customer, we may also collect business and invoicing details and verification information where necessary for invoicing, tax compliance, or fraud prevention.

3. Payment Information: We use external payment processors to handle payments securely. Depending on the options available at checkout, this may include card payments, Shop Pay and/or Digital Wallets. In most cases, payment details are entered and processed in the payment provider’s and/or digital wallet provider’s environment. SaxdorShop.com receives only limited payment-related information necessary to confirm and reconcile the transaction and, where applicable, limited fraud-screening signals. We do not store your full card number or CVV code on our servers. Please note that payment providers and digital wallet providers typically act as independent controllers of your payment data and process it under their own privacy policies and terms.

4. Delivery and Logistics Data: For shipping your orders, we collect the delivery address and phone/email. We may also collect preferences like delivery instructions. This information is used to ensure your products reach you and may be shared with our shipping partners for fulfilment.

5. Newsletter Subscription Data: If you sign up for our newsletter, we collect your email address to send you news, product updates, and promotions. We will only add you to our mailing list with your explicit consent, and you can unsubscribe at any time.

6. Customer Support Communications: If you contact us – for example, via our website’s contact form, by email, or by post – with a question, request, complaint, or feedback, we will collect the information you provide. This may include your contact details and the contents of your inquiry or complaint. We use this data to assist you, address your issues, and improve our customer service. We may keep records of support requests for training and quality assurance, and to document how we resolved your issue.

7. Technical and Usage Data: When you use our website, we automatically collect certain information about your device and browsing actions through cookies and similar technologies. This includes your IP address, browser type, device identifiers, pages and products viewed, how you navigate the site, and timestamps. We collect this to understand how the site is used, to resolve technical issues, and to personalize your experience.

8. Cookies and Tracking Data: Cookies are small files stored on your device that allow us and our partners to recognise your browser and remember information. We use both essential cookies and optional cookies for analytics and advertising. These may collect personal data or identifiers as you use the site. You can control these via our cookie consent banner and settings, as described below.

We do not collect any sensitive personal data such as racial or ethnic origin, health information, or creditworthiness information through SaxdorShop.com. We ask that you refrain from providing such details in any free-text fields.

IV. How We Use Your Personal Data

We use your personal information for the following purposes, in line with GDPR principles of lawfulness, fairness, and transparency. We always ensure we have a valid legal basis for each use of your data, as explained below:

1. To Process Orders and Deliver Products: We use your personal details to process transactions and fulfil your purchases. This includes using your name, address and contact information to deliver your order and to send service-related emails. Payments are processed by our payment processor and/or digital wallet provider; we receive confirmation of payment and limited payment-related details to complete the transaction and handle refunds/returns if needed. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)). We also retain certain transaction records where required to comply with legal obligations (GDPR Art. 6(1)(c)).

2. To Manage Your Account: Creating an account is optional and not required to make purchases. If you do register an account, we will process your data to maintain your account and provide related features. This includes authenticating you, linking your account to optional third-party sign-in providers if you choose to use them, storing your login information, order history, and saved preferences. Legal basis: Account data is processed as part of our contractual obligation to provide you with the account service you requested.

3. To Communicate with You: We use your email and/or phone number to contact you regarding your orders. We may also respond to your inquiries or support requests using your contact information. Legal basis: Communicating with you about your orders and requests is part of contract performance. In other cases, it may be in our legitimate interest to ensure good customer service and clarify issues, which we balance against your privacy rights.

4. To Provide Customer Support: When you reach out for help, information, or to report an issue, we use the data you’ve provided to assist you and resolve the problem. For example, if you have a question about a product, need help with a return or size exchange, or report a defective item, we will use your contact and order information to address it. This could include processing a refund, repair, or replacement. Legal basis: When we are handling issues related to a purchase, this processing is necessary for the performance of our contract with you and to comply with our legal obligations under consumer protection laws.

In other support cases, we rely on our legitimate interest in ensuring customer satisfaction and resolving your requests.

5. To Send Newsletters and Marketing Communications: With your consent, we use your email address to send you our newsletter and promotional updates about new products, special offers, or events. You will only receive these emails if you have actively subscribed.

You can unsubscribe at any time by clicking the “unsubscribe” link in any newsletter email or by contacting us at customersupport@saxdorshop.com. Unsubscribing from marketing messages does not affect our ability to send you non-marketing, service-related messages necessary to perform and manage your orders and account. Legal basis: Consent. We will always honor your opt-out choices.

6. To Improve Our Website and Services (Analytics): We want to offer the best shopping experience, so we analyze how our site is used in order to improve its functionality and design. We may use tools like analytics software to track usage patterns, identify popular products or pages, and spot issues. This helps us make informed decisions on improving our services and user interface. Wherever possible, we use aggregated or anonymized data for these purposes. Legal basis: Our legitimate interest in understanding and improving our products and user experience. We ensure that any analytics are not intrusive and respect your privacy.

7. To Personalize Your Experience: We may use information about your interactions to personalize the website for you. This could include showing you product recommendations, tailoring content to your account, or remembering your preferences like language or currency. Legal basis: Legitimate interests in providing a relevant, user-friendly experience. We only do this personalization within our own site environment.

8. To Facilitate Advertising and Retargeting: We use marketing tools to show you relevant ads for Saxdor products or services on other platforms you might visit. For example, we might use the Facebook Pixel and Microsoft Advertising tags on our site to inform our advertising campaigns. These tools allow us to retarget you with ads on Facebook/Instagram or in search results, based on the fact that you visited our site or looked at a specific product. We also measure the effectiveness of our ads. Legal basis:

Consent – these advertising trackers are only activated if you consent via our cookie banner. If you consent, the data collected is used to create targeted advertising audiences.

You can withdraw your consent at any time by adjusting your cookie settings or ad preferences.

9. For Security and Fraud Prevention: We process personal data to protect our website, business, and customers from fraud, unauthorized activities, and other security risks. This includes using certain data to verify user identity when necessary, monitor for suspicious transactions, and ensure the integrity of our systems. For example, we may use your IP address to detect potential malicious access, or use order information to flag unusual purchasing patterns that might indicate fraud. Legal basis: Our legitimate interest in maintaining the security of our services and preventing fraud or abuse, and in some cases, legal obligations.

10. To Comply with Legal Requirements (and to Handle Legal Claims): We use and retain personal data as needed to comply with applicable laws and regulations. We may also process and retain data to establish, exercise or defend legal claims and to enforce our Terms. We will disclose personal data where required by valid legal process or where otherwise permitted by law. Legal basis: legal obligation (GDPR Art. 6(1)(c)) for statutory compliance; and legitimate interests (GDPR Art. 6(1)(f)) for establishing, exercising or defending legal claims and enforcing our rights.

We will not use your personal data for purposes that are incompatible with the above, unless we obtain your permission or are required or allowed by law to do so. If we plan to process your data for a new purpose, we will update this Privacy Policy and notify you as required, so you remain informed.

V. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on SaxdorShop.com to provide core functionalities and to enhance your experience. When you first visit, you will be presented with a cookie consent banner that allows you to choose which optional cookies to accept. You can update your preferences at any time via our Cookie Settings link or your browser settings.

For a detailed list of all cookies and tracking technologies in use, and to manage your preferences, please see our Cookie Policy and the cookie consent management tool on our website. You can also control cookies through your browser settings. Keep in mind that blocking certain cookies may impact the functionality of our online shop.

VI. How We Share Your Personal Data

We treat your personal data with care and confidentiality. We do not sell your information to third parties for their own marketing purposes. However, we do need to share data with certain trusted third parties in order to run our business and fulfill our services to you. The main categories of recipients are as follows:

1. Shipping and Delivery Partners: We work with external courier and logistics companies to deliver your orders. We will share the minimum necessary information with these partners so they can deliver the products to you – typically, your name, delivery address, contact phone number and/or email, and package details. These partners are contractually obligated to use your information only for the purpose of delivering your order.

2. Payment Processors and Financial Institutions: We use third-party payment processors to handle payment transactions, including Shop Pay and Digital Wallets such as Apple Pay or Google Pay. Payment details are typically processed in the payment provider’s and/or wallet provider’s environment. The payment provider processes your payment and confirms the result to us; we may share with them limited order identifiers and, where necessary, fraud-prevention signals, and they may share back limited information. Payment providers and digital wallet providers generally act as independent controllers of your payment data and process it under their own privacy policies and terms.

We recommend reviewing the applicable provider policies, which are typically linked or displayed at checkout and/or in the wallet flow.

3. Service Providers (Processors): We rely on several IT and service providers to support our website and operations. This includes, for example, our e-commerce platform and hosting provider, cloud storage or IT infrastructure providers, email service providers, analytics and marketing service providers, and IT support or developers who may occasionally need access to ensure the site works properly. These entities process personal data on our behalf only for the purposes we specify – for instance, our email service sends out the messages we instruct it to, or our analytics tools process data to show us website usage statistics. We have contracts in place with these providers requiring them to protect your data and use it only for our authorised purposes, in line with this Privacy Policy.

4. Saxdor Dealers and Partners: Saxdor is a global company with authorised dealers and subsidiaries in various regions. While orders placed on SaxdorShop.com are generally handled directly by Saxdor Yachts Oy, in some cases we may collaborate with a local authorized dealer or distribution partner to fulfill your order or provide customer service in your region. For example, if you order a product for delivery in a country where a Saxdor partner handles local distribution, we might share your order details with that partner so they can complete the delivery or assist you. Similarly, if you request a service that is provided by a local Saxdor representative, we will pass them the necessary information. In all such cases, the partner is bound to use your data solely for fulfilling the Saxdor service and must treat it in accordance with applicable data protection law. We remain responsible for the handling of your data in these scenarios.

5. Marketing and Advertising Partners: We may share limited personal data with marketing agencies or advertising platforms that assist us in our promotional efforts. For instance, we might use an email marketing platform to send newsletters, or we might upload a list of customer emails to a secure advertising system to exclude existing customers from certain advertising or to include them in a loyalty offer. Any such sharing is done lawfully and with appropriate safeguards. We do not allow these partners to use your data for their own independent purposes unrelated to Saxdor.

6. Analytics Providers: As described in the Cookies preferences, third-party analytics services will receive usage data from your browser if you consent. This means those providers are technically “receiving” personal data when their scripts run on our site. They process that data to provide us with analytics results. We ensure any such providers are reputable companies with robust privacy practices, and we have agreements or terms in place to protect data.

7. Law Enforcement or Legal Requirements: If we are under a legal obligation to disclose personal data, or if a valid law enforcement request is made, we may share information as required by law. We will carefully review each request to ensure it has a proper legal basis.

Additionally, if necessary to enforce our Terms of Service or to protect our rights, property, or safety, we may disclose information to our legal advisors or in court proceedings.

8. Business Transfers: In the unlikely event that Saxdor Yachts Oy undergoes a major business transaction, such as a merger, acquisition, restructuring, or sale of the SaxdorShop business, personal data about our customers may be transferred to the succeeding entity as part of the business assets. If this happens, we will ensure your data remains subject to confidentiality obligations and will provide notice before any data is transferred or becomes subject to a different privacy policy.

In all cases of sharing, we share only the data that is necessary for the third party to perform their specific function. We also require all external recipients to handle your personal data securely and lawfully. Where needed, we have contracts in place to ensure your data is protected. If you would like more details about the third parties we use, you can contact us for a full list of current service providers.

VII. International Data Transfers

Saxdor Yachts Oy is based in Finland, and we primarily store and process your personal data within the European Economic Area (EEA). However, some of the third parties we work with are located outside of the EEA or may process data outside of Europe, including on servers in the United States or other countries. Similarly, if you are located outside the EU and we need to ship products to you internationally, your name and address will obviously be used in the destination country’s shipping process.

Whenever we transfer your personal data to a country that does not have an adequacy decision from the European Commission, we will ensure that appropriate safeguards are in place to protect your information. These safeguards may include:

1. Standard Contractual Clauses (SCCs): We sign the European Commission’s approved standard data protection clauses with the recipient, which legally require them to protect your data to EU standards. This is a common and robust mechanism to ensure your rights travel with your data.

2. Additional Technical and Organizational Measures: We may implement encryption, pseudonymization, or other security measures for data that is transferred, to add extra protection. We also carefully vet our partners’ security practices.

You have the right to obtain a copy of or access to the safeguards we use for transfers outside the EEA. If you wish to know more, please contact us at privacy@saxdor.com. Despite the cross-border nature of the internet and our global operations, we remain committed to ensuring continuous protection of your personal data no matter where it is processed.

VIII. Data Retention – How Long We Keep Your Data

We will not retain your personal data for longer than is necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Different categories of data may be kept for different durations, based on the nature of the data and the reasons for keeping it. Below is a general overview of our retention practices:

1. Account Information: If you have a SaxdorShop account, we retain your account profile data while the account is active. You may delete your account or request its deletion at any time. Upon account deletion, we will remove or anonymise account profile data that is not needed for other lawful purposes. Please note that deleting an account does not automatically delete information that we must retain for legal obligations or that we need to keep to establish, exercise or defend legal claims, handle warranty/returns, enforce our Terms, or maintain security/fraud-prevention records. Where we retain data for such purposes, we will restrict access and retain it only for as long as necessary under applicable law. If your account has not been used for a prolonged period, we may contact you to confirm whether you wish to keep it; we will provide notice before deleting an inactive account.

2. Order and Transaction Records: We retain records of purchases and transactions as needed to complete transactions, provide customer support, handle returns/warranty claims, and chargebacks, and meet regulatory requirements. In practice, this means financial and invoicing information is retained for the period required by applicable tax and accounting laws. We may also retain relevant order details for the duration of applicable limitation periods to establish, exercise or defend legal claims and to enforce our rights. If you delete your account, order/transaction records may still be retained where required for these purposes; we will restrict access and will not use past order data for new marketing after fulfilment, except where you have separately consented to marketing communications or have an ongoing relationship with us consistent with applicable law.

3. Customer Service Communications: Communications you have with us are retained as long as necessary to address your issue and for us to maintain records of our correspondence. We might keep support emails for a certain period in case you have follow-up issues or for training our staff to improve service. If these communications contain sensitive data, we treat them confidentially and delete when no longer needed.

4. Newsletter Subscription Data: We retain your email address and related information for sending newsletters until you unsubscribe or withdraw your consent. If you unsubscribe, we will immediately remove you from our active mailing list, and we will only keep your email on a suppression list or as required to demonstrate that we honored your opt-out and consent choices.

5. Analytics Data: Data collected via analytics tools or other cookies is typically stored in aggregate form. Raw analytics data that may be tied to an identifier is retained only as long as necessary for analysis.

6. Legal and Security Records: We may need to retain certain data for legal compliance or security purposes. For instance, if we record that you gave consent for something, we’ll keep that record as proof. If we ban an account or block an IP for security reasons, we may keep that information indefinitely to prevent abuse. Also, if a law enforcement or regulatory request requires us to preserve data, we will do so as instructed.

In summary, we keep your personal data only for as long as it is needed. Once the retention periodexpires or the purpose of processing has been fulfilled, we will either securely delete your personal data or irreversibly anonymize it so it can no longer be associated with you. For example, we may anonymize order data for statistical purposes. If you have specific questions about our retention practices for a certain type of data, feel free to contact us.

IX. Your Rights Under GDPR

As a user of our website and as a data subject under the GDPR, you have a number of important rights regarding your personal data. We strive to make it easy for you to exercise these rights.

They include the right to:

1. Access Your Data: You have the right to request a copy of the personal data we hold about you, as well as information on how we use it. This is often called a “data subject access request.” Upon verification of your identity, we will provide you with a summary of your data in a commonly used format.

2. Rectification: If any of your personal information is incorrect or incomplete, you have the right to have it corrected or updated. For example, if you change email addresses or discover an error in our records, please let us know and we will fix it. If you have an account, you can also update some information by logging in and editing your profile.

3. Erasure (Right to be Forgotten): You may request that we delete your personal data in certain circumstances. For instance, if you no longer want us to have your information, and we have no lawful reason to keep it, you can ask us to remove it. We will honor such requests provided that the data is no longer necessary for the purpose it was collected, and we have no other legal obligation or overriding legitimate interest to retain it. Please note that some data cannot be deleted immediately – for example, we might need to keep certain transaction records for tax compliance, or we may retain a record that you opted out of emails to ensure we don’t email you again. We will inform you of what data can and cannot be erased at the time of your request.

4. Restriction of Processing: You have the right to ask us to limit or “pause” the processing of your data in certain situations. This could apply if you contest the accuracy of the data, or if you object to our processing and we are considering that objection. During such a restriction period, we can store the data but will not use it for anything not agreed to.

5. Data Portability: For the data you have provided to us and which we process by automated means based on your consent or for a contract, you have the right to obtain it in a structured, commonly used, machine-readable format and have it transferred to another service provider if technically feasible. In simpler terms, you can ask for an electronic copy of the data you gave us and we will provide it in a format like CSV or JSON which you could import into another service.

6. Object to Processing: You have the right to object to certain types of processing of your personal data. Direct marketing: You can always object to your data being used for direct marketing purposes. If you object, we will stop using your data for that purpose immediately – this includes profiling related to direct marketing. Legitimate interests: If we are processing your data based on our legitimate interests, you may object to that processing if you feel it impacts your rights. In such cases, we will reconsider our justifications. If your rights outweigh our interests, we will stop the processing.

7. Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing done before you withdrew consent, but it means we will stop the specific activities going forward. For example, you can unsubscribe from marketing emails and we will cease sending them. Or you can change your cookie settings to withdraw consent from analytics/advertising cookies, and we will stop using those tools for your browser.

8. Not be Subject to Automated Decisions: You have the right not to be subject to a decision based solely on automated processing, including profiling, if it produces legal effects or similarly significant effects on you. Note: SaxdorShop.com does not engage in any such fully automated decision-making without human involvement that would have a significant effect on you. We may use automated tools to, for example, filter transactions for fraud screening or to recommend products, but these do not produce irreversible decisions about you without human review.

9. Lodge a Complaint with a Supervisory Authority: If you believe your data has been handled improperly or your rights have not been respected, you have the right to file a complaint with a data protection supervisory authority. Saxdor Yachts Oy’s lead supervisory authority is the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). You can contact the Ombudsman’s office at: Lintulahdenkuja 4, 00530 Helsinki, Finland. Phone: +358 29 566 6700. Email: tietosuoja@om.fi. If you reside in another EU country, you may also contact your local Data Protection Authority. We would, however, appreciate the chance to address your concerns directly before you approach a regulator – so please feel free to contact us with any issue, and we will do our best to resolve it.

To exercise any of your rights, please contact us at privacy@saxdor.com with your request. For security, we may need to verify your identity before executing your request. We will respond to all valid requests as soon as possible, and at least within the legally required timeframes. Exercising your rights is free of charge. However, if a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it – but we will explain our reasons in such cases.

X. Data Security Measures

We take the security of your personal data very seriously. Saxdor employs industry-standard security measures and continually works to protect your information from unauthorized access, disclosure, alteration, or destruction. Some of the key measures we implement include:

1. Encryption: Our website uses HTTPS/TLS encryption to secure data in transit. This means that information you enter is encrypted before being transmitted over the internet. We also encrypt sensitive data at rest where applicable.

2. Access Controls: We limit access to personal data to only those employees and service providers who need it to perform their duties. Access to administrative interfaces and databases is protected by strong authentication and is logged and monitored. Each authorized person is bound by confidentiality obligations.

3. Firewalls and Network Security: We protect our IT systems with firewalls and intrusion detection systems to prevent unauthorized access. Our servers are kept in secure facilities, and we maintain up-to-date security software to guard against viruses and malware.

4. Security Testing and Updates: We regularly update our software and platforms to address security vulnerabilities. Our e-commerce platform and related systems are kept current with patches. We also perform periodic security assessments and tests.

5. Organizational Policies: Saxdor has internal policies and training for staff on data protection and security best practices. We ensure that any subcontractors or partners who process data adhere to strict data protection standards as well.

While we strive to protect your data, please note that no method of transmission or storage is 100% secure. We cannot guarantee absolute security of information. However, in the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant authorities as required by law. We also encourage you to play a part in security: keep your sign-in credentials for any third-party accounts you use and any one-time verification codes confidential, and notify us immediately if you suspect any unauthorized access to your account.

XI. Children’s Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you are under 16, please do not create an account, make purchases, or provide us with any personal information. Parents or guardians should supervise children’s online activities. If we discover that we have inadvertently collected personal information from a child under 16 without proper consent, we will take steps to delete that information promptly.

If you believe a minor has provided us with personal data, please contact us so we can investigate and remove the data as necessary.

XII. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make significant changes, we will notify you by posting a prominent notice on our website or by other appropriate means. The “Last Updated” date at the end of this policy indicates when the latest changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. If you continue to use SaxdorShop.com after an update, it will signify your acceptance of the revised policy.

XIII. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please do not hesitate to contact us. The primary point of contact for data protection matters at Saxdor is:

Saxdor Yachts Oy (Privacy Team)

Tammasaarenkatu 1, 00180 Helsinki, Finland

Email: privacy@saxdor.com

Telephone: +358 9 42450198 (Head Office) – Please ask for data privacy inquiries.

We will gladly assist with any requests or issues you may have. Your trust is important to us, and we welcome feedback on any privacy-related matters.