Who is responsible
The controller of personal data processed through this site is Jon Dillemuth, a sole trader (toiminimi) in Finland, business ID 2642675-5. Contact: hello@dressyourpalette.com.
When you visit the site
The site is hosted by Netlify, Inc. To deliver pages and protect the service, Netlify’s servers process technical data about each request:
- your IP address
- your browser and device type (the user agent)
- the address of the page requested, including the choices in it (see below)
- the referring page, if your browser sends one
- the date and time of the request
We use this data only to run and secure the site, which is our legitimate interest (GDPR Article 6(1)(f)). We don’t use it to identify you, build profiles or advertise. Netlify keeps these logs for a limited time under its own retention practices. Netlify is based in the United States, so this data may be processed there under Netlify’s data processing terms.
Your season, type and filters
The season, Kibbe type, goal and filters you choose are kept in the page address (for example /?season=true-summer&type=soft-classic). They are not saved in an account, a cookie or your browser’s storage, and we don’t store them. Like any page address, they pass through the hosting logs described above. If you share the link, whoever opens it sees the same choices.
Product data
Our product catalog is stored with Supabase, a database service. The site’s server reads product data from it. No information about you is sent to it or stored in it.
Shops, affiliate networks and other sites
When product listings are live, product images load directly from the shop’s or the affiliate network’s servers. Those servers then receive your IP address and browser details, as with any image on the web. We ask browsers not to send them the address of our page.
When you follow a link to a shop, you leave this site. The shop and any affiliate network involved may set their own cookies to record that the visit came from us and to pay the commission. Their privacy policies apply there. Links to the Dress Your Palette Instagram account lead to Instagram, where Meta’s policies apply.
When you write to us
If you e-mail us or message us on Instagram, we use your address, your name if you give it, and your message to answer you. The legal basis is our legitimate interest in replying, or steps you ask us to take. We keep messages as long as needed to handle them, and delete them when they are no longer needed, unless the law requires us to keep them longer.
Children
The site is not directed at children under 16, and we don’t knowingly collect their personal data.
Your rights in the EU, EEA and UK
You have the right to access the personal data we hold about you and to have it corrected or erased. You can also restrict or object to its processing, and receive it in a portable form. To use these rights, write to hello@dressyourpalette.com.
You can also complain to a data protection authority. In Finland, that is the Office of the Data Protection Ombudsman (tietosuoja.fi).
Your rights in the United States
Depending on your state, privacy laws such as the California Consumer Privacy Act may give you rights over your personal information. In the past 12 months the site has processed these categories, only for the purposes above:
- identifiers: IP address, and your e-mail address if you write to us
- internet activity: pages requested, through the hosting logs
We do not sell or share personal information, as those terms are defined in California law, and we have not done so in the past 12 months. We don’t process sensitive personal information. Because there is no selling or sharing, there is nothing to opt out of, and a Global Privacy Control signal changes nothing here. You may ask to know, correct or delete your personal information by writing to hello@dressyourpalette.com, and we won’t treat you differently for doing so.
Changes to this policy
When the site changes how it handles data, this page changes first, and the date at the top changes with it.