1. Controller
ScalePoint Ventures Oy, Almavägen 26, 65610 Mustasaari, Finland. Business ID: 3620767-9. For any privacy question or request, contact hello@logonord.com.
2. What we collect
Enquiry and contact data you provide in the request form: company, VAT/Business ID, contact name, email, phone (optional), billing/delivery address (optional), target date, notes.
Configuration data: product, frame colour, lens selection, branding position and method, quantity, indicative unit price and total in your local currency, and the reference example you flagged as inspiration (if any).
Uploaded artwork or logo files you attach to your enquiry.
Technical and anti-spam data captured with each request: submission timestamp, locale, source page, referrer, UTM parameters, a hashed IP address, a hidden anti-bot honeypot value, and an idempotency key we generate.
Standard server logs (short-lived) needed to operate and protect the site.
3. Purposes and legal bases (GDPR Art. 6)
Answering your enquiry and preparing a free digital proof and quotation — legitimate interest (Art. 6(1)(f)) and pre-contractual steps at your request (Art. 6(1)(b)).
Sending you a confirmation email and any follow-up related to the enquiry — Art. 6(1)(b) and (f).
Protecting the site against spam and abuse (rate limiting, honeypot, hashed IP checks) — legitimate interest (Art. 6(1)(f)).
Complying with legal obligations, e.g. accounting once a quotation is accepted — Art. 6(1)(c).
4. Recipients and processors
ScalePoint Ventures Oy staff who handle enquiries.
Lovable Cloud (managed Supabase, EU region) — hosting the database and private artwork storage.
Resend — sending the internal notification and the customer confirmation email.
Lovable hosting platform (edge delivery, backed by Cloudflare) — serving the website itself.
We do not sell your data. We do not use it for advertising profiling.
5. International transfers
Our primary infrastructure sits in the EU. Where a processor (e.g. Resend, edge CDN) operates outside the EEA, transfers rely on the EU Standard Contractual Clauses and equivalent safeguards; a copy is available on request.
6. Retention
Incomplete or abandoned draft requests and any orphaned uploaded files are automatically deleted after 24 hours.
Enquiry records without a signed order: kept for up to 24 months from the last contact, then deleted or anonymised.
Enquiries that lead to a confirmed order: retained for the periods required by Finnish accounting and tax law (currently up to 6 years).
Server logs: kept for a short period (typically up to 30 days) and then rotated.
7. Storage and security
The database and file storage are private and access-controlled at the row and object level. Uploaded artwork is stored in a private bucket that never allows anonymous read, list, update or delete access.
Downloads for our own staff use short-lived signed URLs. Uploads use short-lived signed upload tokens. Files are never publicly rendered or executed.
Traffic is served over HTTPS. We keep secrets out of the frontend and never place personal form data into analytics.
8. Your rights
You have the right to request access, rectification, erasure, restriction, portability and to object to processing. Write to us at hello@logonord.com. We reply within one month.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, https://tietosuoja.fi).
9. Automated decision-making and marketing
We do not use automated decision-making or profiling with legal effect. Submitting the request form does not subscribe you to marketing; we only reply about the enquiry itself.
10. Cookies and tracking
The site uses only strictly necessary technical storage. No advertising, analytics or third-party marketing cookies are set. Because no consent is required for strictly necessary storage, we do not show a consent banner.