FinPost Express Privacy Policy

Last updated: July 9, 2026

This Privacy Policy (the “Policy”) describes what personal data FinPost Express (the “Company”, “we”) collects, how it is used, stored, and transferred in connection with the provision of parcel forwarding services from Finland to CIS countries through the FinPost Express website (the “Website”).

By using the Website and FinPost Express services, you agree to the terms of this Policy. Personal data processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish legislation.

1. Data Controller

The data controller is:

FinPost Express
Email for data protection inquiries: help@finpost.com

A dedicated Data Protection Officer (DPO) has not been appointed at this time; all personal data requests should be sent to the email address above.

2. Personal Data We Collect

When placing an order and using the Website, we may collect:

  • Identification data: first name and last name of the sender and recipient;
  • Contact data: email address, phone number, sender and recipient addresses;
  • Parcel data: description of contents, weight, value, destination country;
  • Customs data: when forwarding to CIS countries, customs authorities may require additional information about the sender/recipient and parcel contents (in some cases, identity document data);
  • Payment data: payment transaction data via PayPal or payment card (Visa). Full bank card data is processed directly by the payment system/acquirer and is not stored on FinPost Express servers;
  • Technical data: IP address, device type and browser, cookie data (see Section 7).

3. Purpose of Processing

We process personal data for the following purposes:

  • processing, confirmation, and fulfillment of parcel forwarding orders;
  • customs clearance in the destination country;
  • payment processing and fraud prevention;
  • communicating with the customer regarding the order (status, delays, delivery issues);
  • compliance with legal requirements, including sanctions and export control;
  • improving Website performance, analytics, and technical support.

4. Legal Basis for Processing

Personal data processing is based on:

  • performance of a contract — for processing and fulfilling the forwarding order;
  • legal obligation — for compliance with customs, tax, and sanctions requirements;
  • legitimate interest — for fraud prevention, Website security, and service improvement;
  • consent — for optional cookies and marketing communications (if applicable).

5. Data Recipients

To provide our services, we may share personal data with the following categories of recipients:

  • Logistics and postal partners that carry out physical transportation and delivery in the destination country;
  • Customs authorities of the origin and destination countries — to the extent required for customs clearance;
  • Payment systems (PayPal, payment acquirer for Visa cards) — for payment processing;
  • Government and regulatory authorities — upon lawful request, including for sanctions compliance;
  • Technical service providers (hosting, analytics, Website support) acting on our behalf.

We do not sell personal data to third parties and do not share it for purposes unrelated to service provision without the user's separate consent.

6. International Data Transfers

Since the service involves delivering parcels to countries outside the European Economic Area (EEA) — Russia, Azerbaijan, Armenia, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Turkmenistan, Uzbekistan — some personal data (recipient data, parcel information) is inevitably transferred to recipients and customs authorities in these countries.

Such transfers are carried out to the extent necessary for contract fulfillment and customs clearance, in accordance with applicable GDPR requirements for cross-border data transfers.

7. Cookies

The Website uses cookies and similar technologies for:

  • ensuring proper Website functionality and order processing;
  • analytics of Website visits and usage;
  • remembering user preferences.

Types of cookies used on the Website:

  • Necessary: cookie_consent — stores your choice regarding cookie usage (duration: 365 days);
  • Analytics: visitor_id — unique visitor identifier for counting unique users (duration: 365 days); session_id — session identifier for determining the number of pages per visit (duration: until browser is closed);
  • Functional: locale — remembering the selected language (duration: 365 days).

You can manage cookie usage through your browser settings or through the cookie settings panel on the Website. Disabling certain cookies may limit Website functionality.

8. Data Retention

Personal data is retained for the period necessary to fulfill the order, resolve potential disputes, and as required by applicable accounting, tax, and customs legislation. After the required period, data is deleted or anonymized.

9. Data Security

FinPost Express takes reasonable technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or disclosure, including restricting access to data and using secure data transmission channels.

10. User Rights

Under the GDPR, you have the right to:

  • access your personal data and obtain a copy;
  • request correction of inaccurate data;
  • request deletion of data (“right to be forgotten”), provided this does not conflict with FinPost Express's legal obligations;
  • restrict processing;
  • object to processing based on legitimate interest;
  • receive your data in a structured format (data portability);
  • withdraw consent at any time if processing is based on consent;
  • file a complaint with the supervisory authority — the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

To exercise these rights, contact us at help@finpost.com.

11. Children

FinPost Express services are intended for individuals over 18 years of age. We do not knowingly collect personal data from minors.

12. Policy Changes

FinPost Express reserves the right to update this Policy periodically. The current version is always published on the Website with the update date. Significant changes will be additionally communicated to users.

13. Contact

For all questions related to personal data processing, please contact:
FinPost Express
Email: help@finpost.com