L◆ISTE
Privacy & Order Terms
Last updated 31 October 2026
Privacy Policy
LOISTE makes handmade beadwork in Finland. This notice explains what personal data the site collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is Yuliia Fediakina, trading as LOISTE, Finland. Contact: Bu44i3333@gmail.com or Instagram @loiste.jewelry.
What we collect, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Your name, email address and the message you write in the order form; the pieces, look and shop items you chose; the site language | To answer your request, sketch your piece and agree on it with you | Steps at your request before a contract (Art. 6(1)(b)) |
| Your IP address, briefly, when you send the form | To stop spam: at most a few requests an hour from one address | Legitimate interest in keeping the form usable (Art. 6(1)(f)) |
| A "not a robot" check by Cloudflare Turnstile when you send the form | To tell people from automated spam, without puzzles | Legitimate interest (Art. 6(1)(f)) |
| A visit count: that a page was opened or a button pressed, the site you came from, your country, the type of device and the site language. You are counted through a one-way code made from your IP address and browser that changes every day; the IP address itself is not stored | To know how many people visit and what they look at, so we can improve the shop | Legitimate interest (Art. 6(1)(f)) |
| Standard server logs (IP address, time, page) | Security and keeping the site running | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for advertising, we do not sell it, and we do not build profiles. The visit count above uses no cookies, can't tell you apart from one day to the next, and is kept by us alone; there is no third-party analytics or tracking on this site.
Who processes it for us
- Cloudflare, Inc. hosts the site, stores order requests, runs the robot check and keeps server logs. Data may be processed in the US under the EU–US Data Privacy Framework and Standard Contractual Clauses.
- Telegram delivers a copy of your request to the maker's phone, so she sees it at once.
- Your own email: we reply from our mailbox; our email provider processes that correspondence.
- Instagram (Meta Platforms Ireland Ltd.) only if you choose to play a video preview or follow a link to Instagram; see Cookies.
How long we keep it
- Order requests: up to 12 months after our last contact, then deleted, unless you place an order, in which case accounting law requires keeping the order record for 6 years (Finnish Accounting Act).
- The spam-check IP record: about one hour.
- The visit count: 90 days.
- Server logs: as kept by Cloudflare, typically a few days.
Your rights
You may ask to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable form. Write to us at the contact above; we answer within one month. You may also complain to the Finnish Data Protection Ombudsman, tietosuoja.fi.
Cookies
This site sets no advertising or analytics cookies, so it does not ask for cookie consent. The visit count (see above) works without cookies and stores nothing in your browser.
- Your chosen language is remembered in your browser's local storage. It never leaves your device.
- Cloudflare may set strictly necessary cookies for security and the robot check.
- Fonts are served from this site, not from a third party.
- Instagram video previews load nothing until you press play. When you do, the video plays in Instagram's own player, and Instagram (Meta) may set its cookies and receive your IP address under its own privacy policy. Pressing play is your choice to load it.
Order Terms
Requests are not orders
Sending the form is a request, not a purchase. Nothing is paid through this site. We reply by email to agree the design, colours, size, price and delivery; an order exists only once you confirm it in writing and pay as agreed.
In-stock pieces
Pieces marked "in stock" are ready to send. As a consumer in the EU you may withdraw from a distance purchase within 14 days of receiving it, without giving a reason. Tell us within that time, then send the piece back unworn within 14 days; we refund the price and the standard delivery cost within 14 days of getting it back. You pay the return postage.
Made-to-order pieces
A piece made to your design, colours or measurements is made specially for you. Under EU consumer law (Directive 2011/83/EU, Art. 16(c)) the 14-day right of withdrawal does not apply to goods made to the consumer's specifications. Before we start, you approve a sketch of the pattern; once you approve it and pay, the order can't be cancelled, but we will gladly talk about any change before work begins.
Faults
Every piece is checked before it is sent. If something arrives faulty, tell us; your statutory rights for faulty goods apply to all pieces, made-to-order included.
Handmade
Each piece is woven by hand, so small differences from photos, in colour or bead size, are part of the work and not a fault.
Contact
Yuliia Fediakina, LOISTE, Finland. Bu44i3333@gmail.com · Instagram @loiste.jewelry