Privacy Policy

This Privacy Policy governs the manner in which the School collects, uses, maintains and discloses information collected from users (each, a “Student”) of the School. This Privacy Policy applies to the School and all Courses offered by the School.

In accordance with the General Data Protection Regulation (GDPR, 2016/679) of the European Union and the Finnish Personal Data Act (523/1999, Section 10), this privacy policy also serves as the data file description required by law.

Witches’ North (Härkin Creative) is committed to protecting the privacy of its users and adheres to good data protection practices in all operations. This privacy policy explains what types of personal data we may collect from you when you order our products or contact us through our website, and for what purposes this data may be used. Users must accept the terms of this privacy policy before making a purchase or subscribing to the newsletter.

1. Data Controller

Witches’ North / Härkin Creative FI3281011-2

Jenni “Ninni” Härkin
Pellavapolku 5B4
80710 Kontiolahti, Finland

2. Contact for Privacy Matters

For any questions related to data protection and personal data processing, please contact:
ninni (at) witchesnorth.com

3. Name of the Register

Witches’ North Customer Register

4. Purpose of the Register

The School may collect and use Students’ personal identification information for the following purposes:

  • To improve customer service
    Information you provide helps us respond to your customer service requests and support needs more efficiently.
  • To personalize user experience
    We may use information in the aggregate to understand how our Students as a group use the services and resources provided in our School.
  • To send periodic emails
    We may use Student email addresses to send Students information and updates pertaining to their order. Student email addresses may also be used to respond to Student inquiries, questions, or other requests.


  • Customer relationship management (order processing, delivery, warranty issues, billing)
  • Development, administration, and improvement of the webshop, business and services
  • Customer communication, marketing, and targeted marketing

The processing of personal data complies with the GDPR, and data is processed based on the customer relationship, contractual obligations, website usage, explicit consent of the customer, or legal obligations.

5. Data Included in the Register

Th witchesnorth.com user register may contain the following information provided by users:

  • First and last name
  • Email address
  • Phone number
  • Postal address
  • Payment and billing details
  • Information on marketing permissions and restrictions
  • Product reviews

Additionally, data derived from service usage or analytics may include:

  • Purchase history (ordered products and their prices)
  • Device identifiers (e.g., IP address)
  • Website usage and browsing data
  • Information collected via cookies (e.g., referral sources)
  • Any messages or content the user has uploaded to the website’s community.

Personal identification information

We may collect personal identification information from Students in a variety of ways, including, but not limited to, when Students enroll in the School or a Course within the School, subscribe to a newsletter, and in connection with other activities, services, features, or resources we make available in our School. Students may visit the School anonymously. We will collect personal identification information from Students only if they voluntarily submit such information to us. Students can refuse to supply personal identification information but doing so may prevent them from engaging in certain School related activities.


Sharing your personal information

We do not sell, trade, or rent Student personal identification information to others.

6. Regular Sources of Data

Data is primarily collected from the customer themselves via the website, forms on the site, at events (online or live), during campaigns, or via customer service phone calls.


7. Data Transfers to Third Parties

Student may find advertising or other content in our School that link to the websites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these websites and are not responsible for the practices employed by websites linked to or from our School. In addition, these websites or services, including their content and links, may be constantly changing. These websites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Student, is subject to that website's own terms and policies.

Witches' north may transfer data to third parties (e.g., for payment processing, delivery, or marketing purposes). These parties include:

  • Payment processors (Stripe, Paypal)
  • Email marketing partners (e.g., Kit, Manychat)

These third parties are only provided with information necessary to fulfill their services and are not allowed to use the data for their own purposes. We do not sell, rent, or disclose your information to third parties.

We may also disclose data to authorities when legally required.

8. Data Security Principles

All databases are protected against unauthorized access with firewalls, passwords, and other technical safeguards.

9. Rights of the Data Subject

You have the right to:

  • Access your personal data
  • Correct your data
  • Restrict processing (e.g., opt out of marketing)
  • Object to processing
  • Withdraw consent (e.g., withdraw from marketing)
  • File a complaint with a supervisory authority

Requests must be sent in writing and signed to the contact email provided above. A reasonable fee may be charged if data access is requested more than once per year.

Some rights may be limited by legal obligations, such as accounting requirements.

---

Changes to this Privacy Policy

The School has the discretion to update this Privacy Policy at any time. We encourage Students to frequently check this page for any changes. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications.

Your acceptance of these terms

By enrolling in the School, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not enroll in the School. Your continued enrollment in the School following the posting of changes to this Privacy Policy will be deemed your acceptance of those changes.