Privacy Policy
Sam Finn Reports is committed to protecting personal information and handling customer data responsibly.
This Privacy Policy explains how personal data is processed when you visit our website, purchase research reports, use your account, or contact us.
1. Data Controller
Sam Finn Reports operates from Finland and processes personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
Data controller: available in our Legal Information section.
Registered address: available in our Legal Information section.
Contact: contact@samfinnreports.com
2. Information We Process
Depending on your use of our services, we may process:
- Email address and contact information.
- Purchase history, transaction identifiers, and payment confirmation status.
- Information about purchased reports and account access.
- Report delivery and download records.
- Customer support communications.
- Technical information necessary for website functionality, security, and troubleshooting.
Payment card information is handled by Paddle and its payment service providers.
We do not require customers to disclose their personal investment portfolios or financial circumstances to purchase standard research reports.
3. Purposes and Legal Bases
We process personal information for the following purposes:
Contractual necessity
- Providing access to purchased reports.
- Managing customer accounts and report delivery.
- Responding to requests relating to purchased products.
Legal obligations
- Meeting applicable legal and recordkeeping requirements.
Legitimate interests
- Maintaining website security and preventing unauthorized access.
- Investigating suspected fraud, payment abuse, and misuse of purchased content.
- Troubleshooting technical problems and maintaining service reliability.
Consent
- Processing that requires consent, such as optional analytics or marketing cookies, where applicable.
Where we rely on legitimate interests, we consider the rights and freedoms of the individuals concerned.
4. Payments and Paddle
Purchases are processed by Paddle, our online reseller and Merchant of Record.
Paddle handles payments, applicable taxes, receipts, refunds, and payment-related customer service.
Sam Finn Reports receives the transaction information necessary to identify purchases, deliver reports, maintain account access, and provide customer support.
Paddle processes personal data for its own purposes in accordance with its applicable privacy policy.
Paddle Privacy Policy:
5. Report Delivery and Accounts
Purchased reports become available for download on our website once payment has been completed. All purchased reports can be found in My Account.
We use relevant purchase and account information to provide and maintain access to purchased reports.
We may send transactional communications relating to orders, report delivery, account security, and customer support.
Transactional communications are separate from optional marketing communications.
6. Fraud Prevention and Security
We may process relevant transaction records, access records, and support communications where reasonably necessary to investigate suspected fraud, unauthorized report distribution, or deliberate abuse of refund procedures.
Such processing is limited to legitimate purposes and carried out in accordance with applicable data protection law.
We do not automatically treat legitimate refund requests or complaints as fraudulent activity.
7. Service Providers
We use third-party providers where necessary for website hosting, account management, data storage, payment processing, and transactional email communications.
Personal data may be shared with these providers only as necessary for the relevant services and subject to applicable legal safeguards.
Our service is hosted on a cloud platform located within the European Union.
8. Cookies and Storage Technologies
We do not use advertising, tracking, or marketing cookies. Our website uses only essential local storage technologies strictly necessary to operate core features (such as retaining your shopping cart and maintaining account authentication), as well as essential cookies utilized by our payment processor (Paddle) to securely process transactions and prevent fraud.
9. International Data Transfers
Our primary database and report storage are located within the European Union. However, certain service providers—such as our payment processor (Paddle, United Kingdom) and authentication providers (Google, Apple)—may process data outside the European Economic Area.
Where data is transferred outside the EEA, we rely on legally recognized transfer mechanisms, including European Commission adequacy decisions and Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.
10. Data Retention
We retain personal information only for as long as reasonably necessary to provide purchased reports, maintain account access, address customer inquiries, prevent misuse, and meet applicable legal obligations.
Retention periods depend on the category of information and the purpose of processing.
Specifically, we apply the following retention criteria:
- Customer accounts and purchased report access: Retained for as long as you maintain an active account, enabling you to access and re-download your purchased reports in My Account, or until you request account deletion.
- Purchase and transaction records: Retained for 6 years following the end of the relevant accounting year to comply with statutory bookkeeping, tax, and accounting obligations (under the Finnish Accounting Act).
- Customer support communications: Retained for up to 3 years from the resolution of the matter to address follow-up inquiries, refund requests, and potential legal claims.
- Technical access and security logs: Retained for 30 to 90 days for troubleshooting, fraud prevention, and security monitoring, after which they are automatically deleted or aggregated.
Data is deleted or anonymized when it is no longer required, subject to applicable legal obligations.
11. Your Rights
Where applicable under data protection law, you may have the right to:
- Access personal data concerning you.
- Request correction of inaccurate information.
- Request deletion of personal data.
- Restrict or object to certain processing.
- Request data portability.
- Withdraw consent where processing is based on consent.
Some rights are subject to legal conditions and exceptions.
To exercise your rights, contact:
You also have the right to lodge a complaint with a competent data protection supervisory authority, including the Finnish Data Protection Ombudsman where applicable.
12. Data Security
We take reasonable technical and organizational measures to protect personal information from unauthorized access, loss, alteration, or misuse.
No online service can guarantee absolute security.
If you suspect a security or privacy issue, please contact us.
13. Children's Privacy
Our services are intended for customers legally capable of purchasing digital research products.
We do not knowingly collect children's personal data for targeted marketing purposes.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, data processing activities, or legal obligations.
The latest version will be published on our website with its effective date.
15. Contact
For privacy-related questions or requests: