Privacy policy
How The Long Way collects, stores, and uses personal data — and the rights you have under the GDPR.
Last updated: 2026-04-27
The Long Way ("we", "us") is the data controller for personal data collected via this website and through customer engagements. We follow the EU General Data Protection Regulation (Regulation 2016/679, "GDPR") and Finnish data-protection law.
What we collect
When you fill in the /get-started questionnaire, contact form, or sign up for an account, we store the information you provide: business name, email, password (hashed), industry, current site URL, timeline, budget, and any free-text answers. We also store referral source if your visit was tagged with a ?ref= parameter.
We use first-party cookies for the locale preference, the consent setting itself, and authentication. We do not load analytics or advertising cookies until you opt in via the consent banner.
Why we collect it
To respond to your enquiry, to scope and deliver the work you have hired us for, to bill you, and (with your consent) to send you the occasional update about new services. We do not sell or rent personal data.
How long we keep it
Customer records are kept for the duration of our engagement plus seven years (Finnish accounting law). You can request deletion at any time; we will keep only the financial records the law requires.
Your rights
You have the right to access, correct, port, or erase your personal data, and to object to or restrict processing. To exercise any of these rights, email info@longway.fi. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).
Where data lives
Personal data is stored on servers in the EU. Our infrastructure providers — Vercel and Cloudflare — process metadata under their own data-processing agreements (vercel.com/legal/dpa, cloudflare.com/cloudflare-customer-dpa).