Privacy Policy

This policy explains what personal data Optishake collects, why, and the rights you have over it. We’ve aimed to keep it plain and readable — if anything is unclear, just email us.

Who we are (data controller)

Who this applies to

This policy covers people who:

• contact us by email or through this website;
• work for, or apply to work at, Optishake;
• have agreed to receive marketing from us;
• use an Optishake machine or service.

What we collect

• Contact details — name, email, phone and address where relevant (e.g. when you submit a form);
• Technical data — device type, browser, IP address and similar, collected via cookies and analytics;
• Payment data — handled entirely by Stripe. Optishake does not see or store your card details;
• Anything you choose to send us — e.g. feedback or messages.

For people who simply use a machine, the data is normally limited to technical usage and transaction data. No registration is required, and there is no audio or video monitoring.

Why we process it

• to provide customer service and improve the experience;
• to run and maintain the service, including the machines;
• for analytics and statistics;
• to process payments via Stripe;
• to manage our relationship with you and send necessary, service-related messages.

Legal basis

We process personal data on the basis of your consent, and on our legitimate interest in providing and improving the service — except where your rights and interests override that interest.

Where the data comes from

• information you give us directly (forms, email, sign-up);
• your interaction with an Optishake machine;
• cookies and similar technologies (see our Cookie Policy).

Website forms are processed through our messaging platform, Customer.io.

How long we keep it

We keep personal data only as long as it’s needed for the purpose it was collected for, then delete it securely. We review this regularly. Specifically:

• Job applicants: up to six (6) months after the recruitment process, with consent;
• User account data: up to five (5) years from the last time the account was used.

Who we share it with

We may share personal data with:

• our business partners (e.g. partner gyms) where relevant;
• cloud and infrastructure providers that run the service;
• marketing, audit and accounting service providers;
• third parties who help us meet legal obligations.

We do not sell your personal data.

Transfers outside the EU/EEA

Some of our service providers may process data outside the EU or EEA. Where that happens, we rely on safeguards required by applicable data protection law (such as EU Standard Contractual Clauses).

Your rights

You have the right to access your data and to request that we correct or delete it. You can also restrict or object to processing, ask for your data to be ported, and withdraw consent at any time. To exercise any of these, email joonas.kiminki@optishake.fi.

You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman — in the country where you live or work, or where you believe an issue occurred.

Business transfers

If Optishake’s business is merged, sold or transferred in whole or part, personal data may pass to the new owner and its partners, who would be bound by confidentiality obligations covering any such transfer.

How we protect your data

We use reasonable physical, technical and administrative measures to protect personal data from unauthorised access and misuse. Access is limited to the people who need it for their work. Please note that no method of transmission over the internet is completely secure.