Privacy Policy
Leafhill Solutions Oy / Leafhill Solutions Ltd
Last Updated: 31.08.2026 (previous register description dated 25.05.2018)
Leafhill Solutions Oy (also referred to as Leafhill Solutions Ltd)
Business ID: 2377664-5
Address: Suonpääntie 29, 32700 Huittinen, Finland
Phone: +358 207 351 040
Email: info@leafhill.fi
Managing Director: Janne Lehtimäki
Phone: +358 207 351 041
Email: janne.lehtimaki@leafhill.fi
This Privacy Policy explains how Leafhill Solutions Oy ("we," "us," "our," or the "Company") collects, uses, discloses, and safeguards personal data when you use our mobile application MyLeafhill (the "App"), available on Google Play and the Apple App Store, our website, and any related services (collectively, the "Service"), as well as how we maintain our customer and stakeholder register.
This Privacy Policy is designed to comply with:
●The EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679)
●The Finnish Data Protection Act (Tietosuojalaki)
●Google Play's Developer Program Policies (User Data policy)
●Apple App Store Review Guidelines (Privacy)
●The California Consumer Privacy Act (CCPA/CPRA), where applicable
By using the App or otherwise interacting with us, you agree to the collection and use of information as described in this Privacy Policy.
Customer and Stakeholder Register of Leafhill Solutions Oy, and App user data processed in connection with MyLeafhill.
Personal data is processed to:
●Provide, operate, and maintain the App and the Service
●Support the marketing of the Company's products and services
●Manage potential user rights and requests
●Maintain customer and stakeholder relationships
●Facilitate communication with customers, partners, and stakeholders
●Improve and personalize the Service, including analytics and diagnostics
●Ensure security and prevent fraud or misuse
●Comply with legal obligations
The data is not used for automated decision-making or profiling with legal or similarly significant effects on individuals.
Legal basis (GDPR): consent, contractual necessity, legitimate interest, and legal obligation, as applicable to each processing activity — see Section 11 for details.
|
Purpose |
Examples |
|
Provide and maintain the Service |
Account creation, core app functionality |
|
Improve and personalize the Service |
Feature recommendations, UX improvements |
|
Communicate with you |
Service updates, security alerts, support responses |
|
Marketing (with consent, where required) |
Newsletters, promotional offers |
|
Analytics |
Understanding usage patterns, app performance |
|
Security and fraud prevention |
Detecting and preventing abuse |
|
Legal compliance |
Responding to lawful requests, enforcing our Terms |
Depending on your relationship with us (customer, stakeholder, or App user), we may process:
Customer / stakeholder data (individuals employed by partner or client organizations):
●Name
●Position or title
●Contact details (phone number, email address, postal address)
●Direct marketing consents and prohibitions
●Other information related to customer relationship management
App user data (if you use MyLeafhill):
●Account information (name, email, username, password)
●Device information (device model, OS version, unique device identifiers such as IDFA/GAID)
●Usage and diagnostic data (feature usage, crash logs, session data)
●Location data (only if permission is granted)
●Any content you submit within the App (messages, files, support requests)
●Payment information, processed via third-party payment providers (we do not store full card details)
Retention:
●Stakeholder/customer data is generally retained for as long as the individual is employed by the relevant organization, or until they withdraw consent to marketing.
●App account data is retained until account deletion, plus 30 days for backup purposes.
●Usage/analytics/diagnostic data is retained for 14 months.
Data is collected from:
●Public sources
●Information obtained in connection with business activities
●Data provided directly by the individual
●Event registrations, trade fairs, campaigns, and similar interactions
●Stakeholder organizations, agreements, and meetings
●Cookies and similar technologies used on our website and, where applicable, within the App
●App account registration and in-app forms
●Third-party sign-in providers (e.g., Google or Apple Sign-In), if used
As a general rule, personal data is not disclosed to third parties, except:
●Where required by Finnish or other competent authorities
●To subcontractors and service providers (data processors) acting on our behalf, in accordance with applicable data protection legislation and under data processing agreements, and only to the extent necessary
Regarding international transfers: our default policy is not to transfer personal data outside the EU/EEA. However, if the App uses services provided by companies such as Google or Apple (e.g., Google Play Billing, Firebase Analytics, push notification services, App Store services) or other third-party SDKs, some data may be processed on servers located outside the EU/EEA, in particular the United States. Where this occurs, we ensure appropriate safeguards are used, such as the European Commission's Standard Contractual Clauses (SCCs) or an equivalent adequacy mechanism.
The register and all personal data are handled with due care. Data processed in our information systems is appropriately protected, and the security of servers storing the data is ensured in accordance with best practices, including:
●Encryption of data in transit (TLS)
●Access controls limiting data access to employees whose duties require it
●Confidential handling of stored data, access rights, and other information critical to personal data security
●Regular review of security practices
No method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.
The App may request the following device permissions, manageable at any time in your device settings:
|
Permission |
Purpose |
|
Internet |
To communicate with Leafhill 247 servers for issue management and authentication |
|
Camera |
To take photos to attach on issue updates. |
|
Storage / Photos |
To pick photos to attach on issue updates. |
This Privacy Policy supports the completion of:
●Google Play Data Safety section — disclosing what data is collected, whether it is shared, and for what purposes, per Google Play's User Data policy.
●Apple App Privacy details ("Nutrition Labels") — disclosing data types collected and whether they are linked to your identity or used for tracking, per Apple's App Store Review Guidelines Section 5.1.
●App Tracking Transparency (ATT) — if the App tracks users across other companies' apps or websites for advertising purposes, we will request permission via Apple's ATT framework before doing so. You may change this at any time in Settings > Privacy > Tracking.
Keep the data disclosures shown in the Google Play Store and Apple App Store listings consistent with this Privacy Policy.
Each individual in the register, and each App user, has the right to:
●Access their personal data
●Rectify inaccurate or incomplete information
●Erasure — request deletion of personal data ("right to be forgotten")
●Restriction of processing in certain situations
●Data portability — receive data in a structured, machine-readable format
●Object to processing based on legitimate interests or for direct marketing
●Withdraw consent at any time, where processing is based on consent
●Lodge a complaint with a supervisory authority (in Finland: the Office of the Data Protection Ombudsman, tietosuoja.fi)
Requests must be submitted in writing to the data controller (see Section 1/2 contact details). The data controller may request verification of identity before processing requests and will respond within the timeframes defined by GDPR, generally within one month.
For California Residents (CCPA/CPRA)
You have the right to know what personal information is collected, request its deletion, and opt out of the "sale" or "sharing" of personal information (we do not sell personal information), without discrimination for exercising these rights.
The App is not directed to children under the age of 13 (or the minimum age required by local law, e.g., 16 in some EU jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@leafhill.fi so we can delete it.
Cookies and similar technologies are used on our website and may be used within the App (e.g., via linked web views or third-party SDKs) for functionality, analytics, and — where consented to — marketing purposes. You can manage cookie preferences through your browser or device settings, and through any in-app consent tools provided.
The Company reserves the right to amend this Privacy Policy. Material changes will be communicated on our website and/or within the App, and the "Last Updated" date above will be revised accordingly. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Leafhill Solutions Oy
Suonpääntie 29, 32700 Huittinen, Finland
Phone: +358 207 351 040
Email: info@leafhill.fi
Data protection contact: Janne Lehtimäki, janne.lehtimaki@leafhill.fi, +358 207 351 041