Usedkit › Privacy
Privacy
Usedkit is run by Pyry Savela, a private person in Finland. Questions: [email protected].
This website
No cookies, no analytics, no tracking scripts. The server keeps ordinary access logs (address, time, page) for up to 14 days to keep the service secure.
Shops that sign up
The shop's name and address, and the owner's email address, used to run the account: the key, service messages, and the weekly summary (which can be turned off from any of them). The basis is the contract with the shop (terms).
Shops' customers
When a customer asks a shop to tell them when a model comes in, Usedkit processes their email address, the model, an optional maximum price, the language, the time they confirmed, and which emails it sent them and which they opened. The shop is the controller of that data and Usedkit its processor, acting on the shop's instructions under the data processing agreement; the shop's own privacy policy applies. Nothing is sent before the customer confirms by email. Every email has a one-click unsubscribe. Unconfirmed sign-ups are deleted after 7 days and watches end after a year. A shop can have a customer's data erased at any time.
Offers, reservations, trade-in requests and the purchase register that the plugin keeps stay in the shop's own WordPress and never reach Usedkit.
Where, and who else
On a server in Finland, with backups kept 14 days. These providers help run it:
- Brevo (Sendinblue SAS) (France, EU): Delivers the emails: confirmation, arrival and service emails.
- Cloudflare, Inc. (United States, with EU data centres; EU Standard Contractual Clauses and the EU-US Data Privacy Framework): Carries traffic to the service (network, TLS) and forwards replies to Usedkit's own addresses.
Your rights
You can ask for access to, correction or erasure of your data, and complain to your data protection authority (in Finland, the Data Protection Ombudsman, tietosuoja.fi). For data held for a shop, the shop answers such requests; Usedkit helps it do so.
Updated 13 October 2026.