Privacy Policy

Last updated: —

This Privacy Policy explains how FixNow ("we", "our", "us") collects, uses, and protects your personal data when you use our repair services or visit our website. We are committed to handling your data transparently and in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.

1. Data controller

Contact
FixNow
Y-tunnus: 3616697-7
Vaasa, Finland
Email: —

2. What we collect

When you request a repair or fill out our intake form, we collect:

  • Identification: your name, phone number, and (optionally) email address
  • Device details: device type, brand, model, IMEI/serial number, colour, condition
  • Repair details: description of the fault, photos of the device, signed acknowledgements
  • Repair history: the work performed, parts used, payment, and invoice

We do not collect special-category data (health, religion, etc.) and we never ask for passwords or access to data stored on your device.

3. Why we collect it & legal basis

We process your data only to provide the repair service you requested and to comply with Finnish accounting law.

  • Contract performance (GDPR Art. 6(1)(b)): to diagnose, repair, contact you about the work, and issue a warranty.
  • Legal obligation (GDPR Art. 6(1)(c)): to keep invoices and accounting records as required by the Finnish Accounting Act (Kirjanpitolaki).

4. How long we keep it

  • Operational repair data (intake details, photos, signature, internal notes): kept for the duration of the repair plus the warranty period, then deleted within ~12 months.
  • Invoices and accounting records: retained for 6 years from the end of the financial year, as required by Finnish law.
  • Marketing communications: we do not send marketing. If we ever do, you'll be asked to opt in explicitly.

5. Who else sees your data

Your personal data is not sold or shared with third parties for marketing. Limited access is granted only to:

  • Google Firebase (Ireland / EU): hosts our database. Acts as a data processor only — does not use your data for any other purpose.
  • Finnish tax and accounting authorities: only when legally required (e.g. an audit).

6. Your rights under GDPR

You have the right to:

  • Request a copy of the personal data we hold about you
  • Have inaccurate data corrected
  • Request deletion of your data (subject to legal retention requirements above)
  • Receive your data in a portable format
  • Object to processing or restrict it
  • Withdraw consent for any voluntary processing
  • Lodge a complaint with the Finnish Data Protection Ombudsman: tietosuoja.fi

To exercise any right, email us using the contact above. We respond within 30 days.

7. Security

Data is stored on Google Firebase infrastructure with industry-standard encryption in transit (HTTPS) and at rest. Access to your records is restricted to the business owner; customer-facing forms use anonymous authentication that never carries identifying information across sessions.

8. Cookies, analytics & error monitoring

Our website does not use tracking cookies. We use Cloudflare Web Analytics to count page views and understand which pages are most useful. It is cookie-less, does not fingerprint visitors, does not track individuals across sites, and does not share data with advertisers. No personal data is collected by analytics.

If something breaks in the app, we use Sentry (hosted in the EU) to receive an automatic crash report. These reports contain technical information (browser type, error stack trace, page URL) needed to fix bugs. Customer names, phone numbers, email addresses, and other identifying form data are scrubbed from the report before it leaves your browser. Legal basis: legitimate interest in maintaining a working service (GDPR Art. 6(1)(f)).

Browser storage is used only to remember your language preference and to keep your session active while filling out the intake form.

9. Changes to this policy

If we update this policy, we'll revise the "Last updated" date at the top. Material changes will be highlighted on the website.

10. Contact

Data requests & questions
Email: —
Or post: Vaasa, Finland

11. Language versions

This Privacy Policy is provided in English, Finnish, Swedish, Arabic, Persian, and Russian. The English version is the authoritative legal text. Other language versions are provided for your convenience and may contain translation inaccuracies. In case of any conflict between the English version and any other language version, the English version prevails. We will provide the English version on request.