This Privacy Policy explains how Righthere Oy ("Righthere", "we", "us") processes personal data when you use the Righthere mobile app, the righthere.fi website, and per-business online booking pages (e.g. yourbusiness.righthere.fi).
Finnish version: Tietosuojaseloste
Righthere Oy
Erkki Koiso-Kanttilan katu 1
90014 University of Oulu, Finland
Business ID: 2893031-4
Contact: Petri Ahokangas (petri@righthere.fi)
Support: tuki@righthere.fi
This policy applies to:
We collect only data needed to provide and improve our services. Categories include:
| Data | Examples |
|---|---|
| Identity & contact | Name, email address, phone number |
| Authentication | Firebase user ID, account credentials (password stored in hashed form) |
| Account type | Provider or customer role |
| Preferences | App language and locale settings |
| Data | Examples |
|---|---|
| Business details | Shop name, description, contact phone, website URL |
| Location | Address, city, postal code, country, latitude/longitude |
| Services & products | Service names, descriptions, prices, durations, availability schedules |
| Staff | Provider names linked to a shop |
| Data | Examples |
|---|---|
| Reservation details | Date, time, service or product, status, participant count |
| Customer link | Customer account ID or guest booking details |
| Additional info | Notes or messages provided with a booking |
When someone books without a Righthere account, we may collect:
Paid subscriptions for providers are processed through Apple App Store or Google Play, with subscription status managed via RevenueCat. We receive subscription status and product identifiers; we do not receive or store full payment card details.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing user accounts | Performance of a contract |
| Providing booking, calendar, and shop management features | Performance of a contract |
| Processing and displaying reservations | Performance of a contract |
| Sending booking confirmations and service notifications (email, push) | Performance of a contract; legitimate interest |
| Managing paid subscriptions | Performance of a contract |
| Securing services, preventing abuse, and fixing errors | Legitimate interest |
| Understanding how our website and booking calendar are used | Consent (analytics cookies on booking pages); legitimate interest (aggregated app analytics) |
| Complying with legal obligations | Legal obligation |
We do not use your personal data for direct marketing unless you have given separate consent or applicable law otherwise permits it.
We use trusted service providers to operate Righthere. They process data on our instructions and under appropriate agreements:
Shop data may also be visible to customers who use a shop's public booking link, as required for the booking service.
Our primary infrastructure uses Google Cloud / Firebase, which may store or process data in the European Economic Area and in other countries (including the United States). When data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the provider's compliance programs. Some subprocessors (for example Google, RevenueCat, or MailerSend) may process data globally.
You may request deletion of personal data subject to legal retention requirements (see Section 8).
Under the EU General Data Protection Regulation (GDPR), you have the right to:
To exercise your rights, contact petri@righthere.fi or tuki@righthere.fi.
Finnish supervisory authority: Tietosuojavaltuutettu (Office of the Data Protection Ombudsman).
We use Google Analytics cookies to understand website traffic. Analytics cookies are loaded only if you accept them in the cookie banner. You can also limit tracking through your browser settings or opt-out tools provided by Google.
Essential cookies and local storage are used for session management, language preference, and completing bookings. Optional analytics cookies are used only if you accept them in the cookie banner. See this policy for details on data collected.
The app uses device identifiers and local storage for login sessions and settings. Push notifications require a device token stored with Firebase.
Righthere is a business service for booking and providing services. It is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
We use industry-standard measures including encrypted connections (HTTPS/TLS), authenticated access to backend systems, and access controls limiting personal data to personnel who need it to maintain the service. No method of transmission or storage is completely secure; we work to protect your data but cannot guarantee absolute security.
We may update this Privacy Policy from time to time. The current version is always published at this URL. Material changes will be noted on our website. Continued use of the services after an update constitutes acceptance of the revised policy where permitted by law.