Privacy Policy

Last updated: July 27, 2026 · JTJS Europe Oy

This Privacy Policy explains how JTJS Europe Oy ("we", "us", "our") collects, uses, shares and protects your personal data when you visit or buy from tinymightvape.eu (the "Site"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection law.

1. Who we are (controller)

The controller responsible for your personal data is:

JTJS Europe Oy
Holkkitie 6, 00880 Helsinki, Finland
Business ID: FI34346368
Email: info@tinymightvape.com

For any question about this policy or your personal data, contact us at the email address above.

2. What data we collect

We collect only the data we need to run the shop and serve you:

• Account & contact data — name, email address, postal address, and phone number when you create an account or place an order.
• Order data — the products you buy, order value, order history, and billing/shipping addresses.
• Payment data — payments are processed by our payment provider (Viva Wallet). We receive confirmation of payment and limited transaction details; we do not receive or store your full card number.
• Reviews & content you submit — the display name, rating, and text of any product review you post.
• Newsletter data — your email address, if you subscribe.
• Support messages — the content of messages you send us, including through the on-site support assistant (see section 9).
• Technical data — IP address, browser/device information, and cookie data collected automatically when you use the Site (see section 4).

3. Why we use it & legal bases

Under the GDPR we must have a lawful basis for each use of your data:

Where we rely on consent, you can withdraw it at any time without affecting processing done before withdrawal.

4. Cookies & similar technologies

The Site uses cookies that are strictly necessary for it to function (for example, to keep your shopping cart and session). We use Cloudflare for content delivery and security, which sets technical cookies for these purposes. We do not sell your personal data. Where non-essential cookies are used, we ask for your consent, and you can control cookies through your browser settings.

5. Who we share data with

We share personal data only with service providers who help us operate the shop, and only as needed. These act as our processors under written agreements:

• Payment processing — Viva Wallet.
• Shipping & delivery — DHL and other carriers (name and delivery address).
• Hosting, content delivery & security — our hosting provider and Cloudflare.
• Support assistant — our AI support provider (see section 9).

We may also disclose data where required by law, or to establish, exercise or defend legal claims. We do not sell your personal data to third parties.

6. International transfers

Some of our processors (for example, Cloudflare and our AI support provider) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses, to protect your data.

7. How long we keep it

We keep personal data only as long as necessary for the purposes above. Order and invoicing data are retained for the period required by Finnish accounting law (currently six years). Account data is kept while your account is active; newsletter data until you unsubscribe; reviews for as long as they remain published. After the applicable period we delete or anonymise the data.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased ("right to be forgotten"), where applicable;
• restrict or object to certain processing;
• receive your data in a portable format (data portability);
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email info@tinymightvape.com. We will respond within one month.

9. AI support assistant

Our on-site support assistant is powered by a third-party AI provider. When you use it, your messages are processed to generate a reply. Before any message is sent to the AI provider, we automatically mask personal identifiers (such as order numbers, names and email addresses) so that they are not exposed to the model. The assistant provides information and help only — it does not make decisions that produce legal or similarly significant effects about you, and it cannot place orders or take payments on your behalf. You can always ask to be put in touch with a human.

10. Security

The Site is served over encrypted HTTPS connections, and we apply technical and organisational measures appropriate to the risk to protect your data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard your information.

11. Children

Our products are intended for adults only, and the Site is not directed to children. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes will be posted on this page.

13. Contact & complaints

For any privacy question or request, contact us at info@tinymightvape.com.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Finnish supervisory authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
tietosuoja.fi/en