← Documents
Privacy policy
Updated: 12 October 2026
This policy explains how we process personal data on the oncee.io website, its forms and our surveys. The Oncee app has its own privacy policy, published together with the app.
01Data controller
9core Oy (Business ID 3565526-9)
[street address], Turku, Finland
Email: hello@oncee.io
The Oncee service is operated by 9core Oy.
02What data we collect and why
Waitlist (Join the Waitlist)
- Data: email address and role (user, stylist, store or brand, investor).
- Purpose: to tell you when the service opens and send you information about Oncee related to your role.
- Legal basis: consent (GDPR Art. 6(1)(a)).
Founding Member and username reservation
- Data: email address, reserved username, purchased tier, payment date and reference. Card details are handled by the payment provider Stripe, not by us.
- Purpose: delivering the membership and username reservation, receipts and bookkeeping.
- Legal basis: contract (Art. 6(1)(b)) and obligations under the Finnish Accounting Act (Art. 6(1)(c)).
Investor form (Request Investor Brief)
- Data: name, email, investor type and your message.
- Purpose: sending investor materials and keeping in touch.
- Legal basis: your request and our legitimate interest in responding to it (Art. 6(1)(f)).
Partner form (stores and brands)
- Data: email, company or store name, online store link, contact person, city and store platform.
- Purpose: discussing a partnership and preparing a possible agreement.
- Legal basis: steps prior to a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
Stylist and Style Mentor enquiries
- Data: the contact details and message you give in the form.
- Purpose: discussing cooperation.
- Legal basis: legitimate interest (Art. 6(1)(f)).
Surveys
- Data: your answers, an optional story, the channel you came from, and an optional email address.
- Purpose: researching shopping behaviour to develop the service, and contacting you about a test or a launch notice if you choose so.
- Legal basis: consent (Art. 6(1)(a)).
- Surveys are anonymous unless you leave your email. Your story is quoted anonymously only if you give permission.
We do not collect body measurements, photos or other sensitive data through the website.
03Cookies
The website uses only cookies that are strictly necessary for it to work. If we start using analytics or marketing cookies, we will ask for your consent with a cookie banner before doing so and update this policy.
04Who processes data on our behalf
We use the following service providers, who process data only on our instructions:
- Webflow, Inc. (United States): website hosting and forms
- Stripe: payment processing
- Tally BV (Belgium): survey forms
- email and office software providers
We never sell your data or share it for marketing.
05Transfers outside the EU
Some providers (for example Webflow and Stripe) may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
06Retention
- Waitlist: until the service launches or until you withdraw consent.
- Founding Member payments: accounting records are kept as required by the Finnish Accounting Act (vouchers for 6 years from the end of the financial year).
- Investor and partner enquiries: up to 24 months from the last contact, unless an agreement is made.
- Survey answers: deleted once the summary is done, at the latest on 30 June 2027. Emails given for a test are deleted after the test round, at the latest after 12 months.
07Your rights
You have the right to:
- know what data we process about you
- ask us to correct or delete it
- restrict or object to processing based on legitimate interest
- receive the data you gave us in a portable format
- withdraw your consent at any time
- lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)
Send requests to hello@oncee.io. We reply within one month.
08Age limit
The website forms are intended for people aged 18 or over.
09Automated decisions
We do not use data collected through the website for automated decision-making or profiling.
10Changes
We update this policy when our service changes. The date of the latest update is shown at the top of the page.