Legal
Privacy Policy
Last updated 23 July 2026
Privacy Policy
Last updated: 23.07.2026
Noses Club ("we," "us," "our") is a platform connecting independent perfumers, fragrance brands, scent professionals, and suppliers. This policy explains what personal data we collect, why, and what rights you have over it.
This policy applies to noses.club, works.noses.club, and any related services (together, the "Platform").
1. Who we are
Noses Club is operated by:
Helsinki Perfume Club (trading as "Noses Club")
Business ID (Y-tunnus): 3289940-1
Registered address: Koronakatu 5, 02210 Espoo, Finland
Contact for privacy matters: info@helsinkiperfumeclub.com
We are the "data controller" for the personal data described in this policy — meaning we decide why and how it's processed.
2. What data we collect
We collect only what's needed to run the Platform. Depending on how you use it, this may include:
Account data Name, email address, role (Nose, brand, professional, supplier), company/studio name. We don't store passwords — sign-in works through one-time links sent to your email, so there's no password for us (or anyone else) to leak or crack.
Profile data Anything you choose to add to your public profile — bio, portfolio information, professional background, links. For Noses, this never includes formula or composition details; those stay private by design.
Communications data Messages sent through the Platform's inbox, support requests, and any correspondence with us.
Transaction data For Works licensing activity: deal value, parties involved, and payment status. Payment card details are handled entirely by our payment processor, Stripe — we never see or store full card numbers. See Section 6.
Technical data IP address, browser type, device information, and basic usage logs, collected automatically when you use the Platform.
Cookies Strictly necessary cookies for login and security, plus Google Analytics to understand how the Platform is used. See our Cookie Policy for details and how to opt out.
3. Why we process your data (and our legal basis)
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Enabling Works transactions between Noses and brands | Performance of a contract |
| Platform security, fraud prevention, abuse detection | Legitimate interest |
| Responding to support requests | Performance of a contract / legitimate interest |
| Sending essential service communications (e.g. transaction confirmations) | Performance of a contract |
| Sending optional product updates or newsletters | Consent (you can withdraw anytime) |
| Complying with legal or tax obligations | Legal obligation |
We do not sell personal data, and we do not use your data to train third-party AI models.
4. Who we share data with
We share data only where necessary to run the Platform:
- Stripe (payment processing for Works transactions) — Stripe processes payment data under its own privacy policy as an independent controller for payment compliance purposes.
- Hetzner Online GmbH — hosts our infrastructure and databases, within the EU.
- Google Analytics (Google Ireland Ltd. / Google LLC) — helps us understand how the Platform is used, e.g. which pages are visited and how. Google acts as our data processor for this purpose.
- Professional advisors (legal, accounting) where necessary, under confidentiality obligations.
- Authorities, where required by law.
We do not share your data with other users beyond what you choose to make visible on your profile, and beyond what's necessary to complete a Works transaction you've entered into.
5. International data transfers
Our hosting (Hetzner, Germany) and Stripe's EU processing entities keep the bulk of your data within the EU/EEA. Google Analytics is the one exception: it may involve transfer of technical data to Google LLC in the US, covered by Standard Contractual Clauses and Google's supplementary safeguards.
6. How long we keep your data
We keep personal data only as long as needed for the purposes above:
- Account data: for as long as your account is active, plus 6 months after closure for legal/dispute purposes.
- Transaction records: 7 years, to meet Finnish accounting and tax retention requirements.
- Support communications: 6 months after resolution.
You can request deletion earlier — see your rights below.
7. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten"), subject to legal retention requirements
- Restrict or object to certain processing
- Port your data to another service in a machine-readable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these, contact us at info@helsinkiperfumeclub.com. We'll respond within one month.
If you're not satisfied with our response, you can lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) — tietosuoja.fi.
8. Security
We use industry-standard measures — encryption in transit, access controls, and regular review of who can access what — to protect your data. No system is 100% secure, but we treat this seriously, particularly around anything perfumer-facing.
9. Changes to this policy
If we make material changes, we'll notify you by email or an in-Platform notice before they take effect. The "last updated" date at the top always reflects the current version.
10. Contact
Questions about this policy or your data? Reach us at info@helsinkiperfumeclub.com.