Privacy policy

PRIVACY POLICY

Concept Global

Last updated and effective from: [01 June 2026]

1. INTRODUCTION

Welcome to Concept Global. We are committed to protecting your privacy and processing your personal data responsibly, in accordance with applicable data protection laws, such as the General Data Protection Regulation (EU) 2016/679 ("GDPR"). This Privacy Policy explains how we collect, use, share and safeguard your information when you visit our website robustgoods.com (the "Website") or make a purchase from us. Please read this policy carefully.

2. WHO WE ARE

The data controller responsible for your personal data is:

Robust Goods Oy

Registered address: Simonkatu 6A, 00100 Helsinki, Finland

Finnish Business ID: 3229993-2

E-mail: support@conceptglobal.co

Telephone: +1 323-645-2296

3. PERSONAL INFORMATION WE COLLECT

We collect information about you in the following ways.

(A) Information you provide to us

When you make a purchase or attempt to make a purchase through the Website, we collect the following information ("Order Information"):

• Full name

• Billing address

• Shipping address

• E-mail address

• Telephone number

• Payment information (Note: full payment card details are processed by our payment providers directly and are not stored on our systems)

(B) Information we collect automatically

When you visit the Website, we automatically collect certain information about your device and your use of the Website ("Usage Data"), including:

• Internet Protocol (IP) address

• Browser type and version

• Pages you visit and how you interact with them

• Date, time and duration of your visit

• Referring website or search terms that directed you to the Website

• Data collected through cookies, log files and similar tracking technologies

Further information about our use of cookies is set out in Section 8 below.

4. HOW WE USE YOUR INFORMATION; LEGAL BASES FOR PROCESSING

We use your personal data for the following purposes, on the legal bases indicated.

• To process and fulfil your order: including confirming your purchase, processing payment, arranging delivery, and sending order confirmations, invoices and shipping updates. Legal basis: Performance of a contract to which you are a party.

• To handle returns, refunds and warranty claims: including communicating with you about defective or non-conforming goods and processing any applicable remedy. Legal basis: Performance of a contract; legal obligation.

• To prevent and detect fraud and misuse: including screening orders for potential risk or fraud and monitoring for suspicious activity on the Website. Legal basis: Legitimate interests (protecting our business and our customers from fraudulent activity).

• To improve and optimise the Website: including generating analytics about how customers browse and interact with the Website and assessing the effectiveness of our content and marketing. Legal basis: Legitimate interests (improving our services and user experience).

• To comply with legal obligations: including accounting, tax and financial record-keeping obligations applicable to us as a Finnish company. Legal basis: Legal obligation.

• To send you marketing communications about our products and services: including information about new products, offers and updates. We may send such communications to existing customers in respect of our own similar products and services. Legal basis: Legitimate interests (direct marketing to existing customers). Where required by applicable data protection laws, we will seek your prior consent. You may object to or unsubscribe from such communications at any time.

• To respond to your enquiries and provide customer support. Legal basis: Legitimate interests (providing effective customer service); performance of a contract.

• To deliver personalised content and interest-based advertising: with your prior consent, we may use data about your browsing behaviour on the Website to tailor the content and promotions you see on the Website and on third-party platforms. You may withdraw your consent at any time through our cookie settings. Legal basis: Consent.

• To send you marketing communications by text message: with your prior consent, we may send promotional messages to the telephone number you have provided. You may withdraw your consent at any time by contacting us or by following the opt-out instructions included in any such message. Legal basis: Consent.

5. SHARING YOUR INFORMATION

We may share your personal data with the following categories of third parties, to the extent necessary for the purposes described in this Privacy Policy.

• E-commerce platform provider: We use Shopify to power our online store. For customers located in the European Economic Area, your data is received by Shopify International Ltd., an entity incorporated and operating in Ireland. You can read Shopify's privacy policy at shopify.com/legal/privacy.

• Payment processors: We work with payment service providers to process payment transactions securely, including those facilitating payments via credit and debit cards, PayPal, Shop Pay and Klarna. We do not store your full payment card details on our systems.

• Delivery and logistics providers: We share your name and delivery address with our carriers and logistics partners to the extent necessary to fulfil and deliver your order.

• Analytics providers: We use Google Analytics to understand how visitors use the Website and to improve our services. Google's privacy policy is available at policies.google.com/privacy.

• Legal, accounting and financial advisers: Where necessary to comply with our legal, regulatory or financial obligations.

• Competent authorities: We may disclose your personal data where required to do so by applicable law, by a court order, or by a competent regulatory or law enforcement authority.

We do not sell your personal data to third parties.

6. DATA TRANSFERS

We aim to keep your personal data within the European Economic Area ("EEA") wherever possible. Where we engage service providers that process data outside the EEA, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

In particular:

• Data processed by Shopify in connection with orders placed by customers in the EEA is handled by Shopify International Ltd. in Ireland and does not leave the EEA on that basis.

• Data processed by Google Analytics may be transferred to the United States. Google is a certified participant under the EU-US Data Privacy Framework, in respect of which the European Commission has issued an adequacy decision.

Where personal data is transferred to other third countries, we take steps to ensure that such transfers are made in accordance with applicable data protection laws, including, where applicable, through the use of standard contractual clauses approved by the European Commission (the “SCCs”) or other appropriate transfer mechanisms.

7. DATA RETENTION

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

In particular:

• Order Information: retained for the duration of our contractual relationship with you and for a period thereafter as required by applicable Finnish law, including accounting and tax legislation (generally up to seven years).

• Customer service correspondence: retained for up to three years from the date of our last interaction with you, unless a longer retention period is required by applicable law.

• Marketing communications: if you receive marketing communications from us, your contact details will be retained for this purpose until you unsubscribe or object.

• Usage Data: retained in accordance with our cookie settings and the data retention policies of our analytics providers. Please see Section 8 for further information.

Regardless of the retention periods described above, you may at any time request that we delete personal data we hold about you. We will fulfil any such request unless we are required or entitled to retain the data under applicable law, or where retention is necessary for the establishment, exercise or defence of legal claims.

8. COOKIES

Our Website uses cookies and similar tracking technologies to distinguish you from other users and to improve your experience. When you visit the Website, you will encounter a cookie consent banner that provides detailed information about the cookies we use, their purposes and their duration. The banner allows you to accept or decline the use of non-essential cookies according to your preferences.

We will not place non-essential cookies on your device without your prior, freely given and explicit consent. You may withdraw or update your cookie preferences at any time through the cookie settings available on the Website.

You may also manage certain tracking preferences through your browser settings. Please note, however, that our Website may not respond to all browser-level tracking signals, and adjusting browser settings alone may not disable all forms of data collection. We recommend using our cookie settings on the Website for the most effective management of your preferences.

9. YOUR DATA PROTECTION RIGHTS

You have the following rights in relation to your personal data under applicable data protection laws.

• Access: request access to the personal data we hold about you and receive a copy of it.

• Rectification: request that inaccurate or incomplete personal data be corrected.

• Erasure: request that your personal data be deleted where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations we may have to retain it.

• Restriction: request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you consider the processing to be unlawful.

• Data portability: receive your personal data in a structured, commonly used and machine-readable format, and request that it be transferred to another controller, where the processing is based on consent or contract and is carried out by automated means.

• Objection: object to the processing of your personal data where that processing is based on our legitimate interests. You have the right to object at any time to the processing of your personal data for direct marketing purposes.

• Withdraw consent: where we are relying on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

• Lodge a complaint: you have the right to lodge a complaint with the competent data protection supervisory authority if you consider that our processing of your personal data does not comply with applicable data protection laws. Please see Section 14 below for details of the Finnish supervisory authority.

To exercise any of these rights, please contact us using the details set out in Section 13 below. We will respond to your request within the timeframe required by applicable data protection laws.

10. SECURITY

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. All payment transactions are encrypted during transmission. We do not store full payment card details on our systems.

Whilst we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is entirely secure, and we cannot guarantee its absolute security.

11. YOUR RIGHTS UNDER APPLICABLE DATA PROTECTION LAWS

Nothing in this Privacy Policy shall limit, exclude or modify any rights you may have under applicable data protection laws. This Privacy Policy is intended to supplement and clarify those rights, not to restrict them. Where any provision of this Privacy Policy is inconsistent with your rights under applicable data protection laws, those rights shall prevail.

12. YOUR RIGHTS UNDER APPLICABLE DATA PROTECTION LAWS

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices or our business operations. We will notify you of any changes by posting the updated Privacy Policy on the Website with an updated effective date. We encourage you to review this Privacy Policy periodically.

13. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise any of your data protection rights, please contact us at:

Robust Goods Oy

Simonkatu 6A, 00100 Helsinki, Finland

Finnish Business ID: 3229993-2

E-mail: support@conceptglobal.co

Telephone: +1 323-645-2296 (Monday to Friday – 9:00 AM to 4:00 PM EST)

14. HOW TO CONTACT THE SUPERVISORY AUTHORITY

If you consider that our processing of your personal data does not comply with applicable data protection laws and you wish to lodge a complaint, you may contact the competent data protection supervisory authority. In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman

Ratapihantie 9

00520 Helsinki, Finland

Website: tietosuoja.fi/en/home

E-mail: tietosuoja@om.fi

Telephone: +358 29 566 6700