FD Merchant — Privacy notice

Updated 7 October 2026

Suomi · English

FD Merchant is a work application for Fin Delivery partner venues. Access is provided through merchant onboarding, not public sign-up in the app. This notice concerns the Merchant app, not the customer or courier app.

1. Controller and contact

Fin Delivery Oy · Business ID 3584658-3
Nöykkiönlaaksontie 42, 02330 Espoo, Finland
info@fin-delivery.com

2. Information processed

Venue account and contact information, login credentials, session identifiers and the venue associated with the account. Account information comes from the merchant onboarding process and authorised administrators.
Orders assigned to the venue: order identifiers, products, quantities, customer name and order notes; delivery address and telephone number when the merchant provides delivery. Customer information originates from orders placed through Fin Delivery.
Operational actions, including accepting or rejecting orders, preparation and handover status, venue availability and Last Call settings.
Push notification token, app project identifier, language, notification permission status, app version and device connection/heartbeat information. Service requests also involve technical information such as IP addresses and timestamps.

Login session information is stored on the device using secure storage; the language preference is also stored locally. Do not share venue access with unauthorised people.

3. Purposes and legal grounds

We use these data to authenticate authorised venue users, deliver and manage orders, notify the venue of work, maintain availability and protect and support the service. Processing is based on performance of a contract where the individual is a party, and otherwise our legitimate interests in operating the merchant service, coordinating fulfilment, preventing misuse and maintaining security. Records required by accounting or other applicable law are processed to meet those obligations. You may ask us about the interests relied upon and object where the law provides that right.

4. Device permissions

The app requests notification permission to alert you to orders and uses sound and vibration. You can manage notifications in Android settings. FD Merchant does not need your device's GPS location, microphone recording, camera or navigation access to handle orders. Its order alarm plays a generated sound; it does not record conversations. A delivery address in an order is not device location tracking.

5. Recipients, service providers and security

Authorised venue staff and Fin Delivery personnel access information needed for their duties. Order status is used within the delivery service so the customer and relevant delivery participants can follow fulfilment. Hosting and infrastructure providers, including Amazon Web Services, process service data. Expo and Google Firebase Cloud Messaging process the technical data required for Android push notifications; Expo also supplies app updates. Information may be disclosed to authorities when legally required. We do not sell personal data.

Access controls and encrypted network connections protect service data. This notice does not promise that any system is completely risk-free. This privacy page contains no advertising or analytics scripts.

6. International processing

Service providers may process technical data outside the EU/EEA. Where personal data are transferred, applicable safeguards such as an adequacy decision or standard contractual clauses are required. Contact us for information about the safeguards applicable to your data and how to obtain a copy.

7. Retention and deletion requests

Account and operational data are retained for as long as necessary to operate the merchant relationship and fulfil the purposes described above. Retention also depends on statutory record-keeping, unresolved transactions, disputes, fraud prevention and security needs. Removing app access or uninstalling the app does not itself erase order or accounting records.

To request closure of Merchant access or deletion of your personal data, email info@fin-delivery.com with “FD Merchant data request”, your venue name and account email. Do not send your password. We verify the requester's authority and explain what can be deleted and what must be retained and why. Venue access changes may require confirmation from the merchant's authorised representative.

8. Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction and portability of your personal data, and object to processing based on legitimate interests. Contact us using the details above. You may complain to the Finnish Data Protection Ombudsman or your competent supervisory authority. The app's operational status indicators are not a promise of automated legal decisions about you.

9. Other notices and changes

Customer data are also described in the customer privacy notice; courier processing has a separate notice. Merchants remain responsible for their own handling of customer information. We update this notice when the Merchant service changes; the date above identifies this version.