PRIVACY POLICY

Last updated: 27.10.2026

INTRODUCTION

This Privacy Policy explains how Juoksut ry (“Juoksut”, “we”, “our”, or “us”) processes personal data when you use juoksut.run, buy from our webshop, or register for an event through a service linked from the site.

WHO IS RESPONSIBLE FOR YOUR DATA

Juoksut ry (business ID 3386352-3, Helsinki) is the controller for the personal data we use to run the club, webshop, and registrations. You can contact us at [email protected].

WHAT WE PROCESS

  • Website use: Cloudflare hosts and protects the site and may process technical request data, such as IP address, device/browser information, and security logs, to deliver and secure the service. Cloudflare Web Analytics counts page views without cookies and without following you across other sites.
  • Shopping cart: The cart stores selected products, sizes, and quantities in your browser’s LocalStorage. When you start checkout, those selections are sent to our checkout endpoint so we can create the payment session.
  • Webshop purchases and first-party registrations: Stripe Checkout collects your name, email address, phone number, payment and billing information where required, the purchased items, and any information you provide in an optional order note or required registration field (for example, camp shirt size). Stripe also creates a Stripe Customer for the purchase.
  • Order fulfilment: Juoksut can access the order, registration, name, email address, and phone number in the Stripe Dashboard to arrange registrations, deliveries, pickups, refunds, and customer support. Our own D1 database stores product, stock, and technical webhook records only; it is not used as a customer database.
  • Checkout confirmation: After checkout, the site retrieves a limited order summary from Stripe to show the confirmation page. This includes the name, email address, items, amount, currency, and payment status for that checkout session.
  • Free event signups: When you sign up for a free event on this site, Lightspeed HQ, our event system, stores your name, email address and signup status and emails you about your signup. Only Juoksut crew can see the signup list, and signups are deleted a week after the event. We use this only to run that event. A Cloudflare Turnstile check stops automated signups (see Cloudflare's Turnstile Privacy Addendum).
  • Third-party forms: Some pages link to Google Forms. Information you submit there is processed by that provider and according to the form. We may receive the information needed to run the event or respond to the form.

WHY WE USE THIS DATA

We use the data described above to provide the website, process purchases and registrations, communicate about them, prevent abuse, resolve support requests, and meet legal obligations such as accounting. Depending on the situation, the legal basis is performance of a contract or steps taken at your request, our legitimate interests in operating and securing the service, or a legal obligation.

SERVICE PROVIDERS

We use service providers to operate the site and payments. Their processing is governed by their own terms and privacy information:

  • Stripe for payment processing, Checkout, and customer/order records.
  • Cloudflare for hosting, security, delivery of the website and public media, the signup database, and the Turnstile bot check.
  • Google (Google Workspace) for sending event signup emails from our club email address.
  • Google Forms where you choose to use a form we link to.
  • Instagram/Meta: the videos on the home page and in the archive, and this month's schedule on the join page, load from Instagram's servers, which see your IP address and browser details.

These providers may process data outside Finland or the European Economic Area. Where required, they use the transfer mechanisms and safeguards described in their own privacy documentation.

RETENTION

Apart from free event signups, we do not keep customer records in the website database. Event signups are deleted automatically a week after the event; copies of the emails we sent you stay in the club's email account until we clear them, which we do regularly. Stripe retains payment and customer records under its service and retention settings; Juoksut keeps access to information only for as long as needed to manage the purchase or registration, provide support, and meet legal obligations. Third-party form providers retain submissions under their own settings.

COOKIES AND LOCALSTORAGE

  • We do not use analytics, advertising or tracking cookies. Our page view counts come from Cloudflare Web Analytics, which uses no cookies.
  • Our shopping cart uses LocalStorage as described above.
  • Cloudflare and third-party forms, payment, or social-media services may use cookies or similar technology necessary for their own services. Their policies explain those technologies.

YOUR RIGHTS

Subject to applicable law, you can ask for access to, correction of, deletion of, or restriction of the personal data we control. You may also object to certain processing and request portability where applicable. To make a request, email [email protected]. You may also lodge a complaint with the Finnish Data Protection Ombudsman.

WHAT WE DO NOT DO

We do not sell personal data, use it for behavioural advertising, or make automated decisions with legal or similarly significant effects.

CHANGES TO THIS POLICY

We may update this policy, with changes posted on this page.

CONTACT US

If you have questions or concerns about this policy, contact us at [email protected].