Managing your personal data and data requests
Manage your own data
You can view, correct, transfer or delete the data held about you. This page explains what rights you have and how a request works in practice.
How do I make a data request?
Email info@lastu.co and tell us what you are asking for. Use the same email address you ordered with, so we can match the request to the right records. We confirm the request by email before processing it and reply within one month at the latest. The request is free of charge.
What you can ask for
- Access: a copy of the personal data stored about you.
- Rectification: incorrect or incomplete data is corrected. You can update your name, address and email yourself in your customer account.
- Portability: your data in a machine-readable format.
- Erasure: your data is deleted unless there is a legal reason to keep it. Accounting law requires order records to be retained for a set period.
- Objection: you can object to direct marketing and targeted advertising. See advertising settings →
- Withdrawing consent: you can change your cookie consent at any time in cookie settings.
How a request proceeds
- Send the request to info@lastu.co. Say which right you are exercising and which email address you used with us.
- We verify your identity by email. We never ask for banking credentials, passwords or payment details as part of a data request.
- We process the request and reply within one month at the latest. If the request is unusually broad, we tell you about the extension.
- You receive the answer at the same email address, in a secure form.
Which laws this covers
Lastu (Droplet Hitech Design Oy) is a Finnish company, so the baseline is the EU General Data Protection Regulation, GDPR. We handle data requests the same way regardless of where you live.
The same procedure also covers the other privacy laws our customers may rely on: US state laws (CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, FDBR, OCPA, TDPSA, MCDPA), Canada's PIPEDA, Brazil's LGPD, Japan's APPI, and the privacy laws of Australia and New Zealand, including Australia's NDB breach notification obligation.
Who to address the request to
- Data controller: Droplet Hitech Design Oy (Lastu)
- Address: Nahkatehtaankatu 2, 90130 Oulu, Finland
- Email: info@lastu.co
- Store platform: Shopify acts as a data processor for the online store.
- Supervisory authority: if you are not satisfied with how a request was handled, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Frequently asked questions
How long does a data request take?
We reply within one month of confirming the request at the latest. If the request is unusually broad, we tell you about the extension before the deadline.
Does a data request cost anything?
No. Data requests are free. The law allows a reasonable fee for manifestly unfounded or repetitive requests, but in practice this has not been necessary.
Will my order history be deleted too?
A deletion request removes the customer account and the data linked to it. Accounting law requires order records to be retained for a set period, so billing data cannot be deleted before that period ends.
How do I change my cookie settings?
Open cookie settings and make your choices again. The setting is stored per browser, so it has to be made separately on each device and browser you use.
Can I opt out of my data being used for advertising?
You can. Targeted advertising and sharing data with advertising partners can be declined in cookie settings or by email. Read more on Personal data and advertising.
Related
Customer service
Guides, News and Blogs
iPhone 18 Pro and 18 Pro Max cases are now available to order
The iPhone 18 Pro and 18 Pro Max just got their own Lastu cases – available to order now. Wooden cases, M05 camo fabric, carbon-fibre-look KARB, MagSafe and your own photo or engraving with a live preview. And if you already own a Lastu 17 Pro case, it fits the 18 Pro too.
Read moreabout iPhone 18 Pro and 18 Pro Max cases are now available to order
Google Pixel 11, 11 Pro and 11 Pro XL cases are now at Lastu
The Google Pixel 11, 11 Pro and 11 Pro XL now have their own Lastu cases. Why the Pixel 11 and 11 Pro don't share a case, how PixelSnap magnets and MagSafe work with a wooden case, and what people really look for in a Pixel case – seven questions answered.
Read moreabout Google Pixel 11, 11 Pro and 11 Pro XL cases are now at Lastu
Realme phone cases are coming to Lastu: GT 8 Pro, 16 Pro+, 16 Pro and 16
Read moreabout Realme phone cases are coming to Lastu: GT 8 Pro, 16 Pro+, 16 Pro and 16
Genuine camouflage phone cases: M05, M04, MM14, Flecktarn, M90 and MultiCam
Read moreabout Genuine camouflage phone cases: M05, M04, MM14, Flecktarn, M90 and MultiCam
Genuine birch wood phone cases – colors, finishes, and tar
Read moreabout Genuine birch wood phone cases – colors, finishes, and tar
iPhone 18 Pro, 18 Pro Max and iPhone Ultra – rumors, specs and Case
iPhone 18 Pro, iPhone 18 Pro Max, and the foldable iPhone Ultra are rumored to launch in September 2026. We’ve rounded up the rumored specs and answer the question everyone’s searching for: will iPhone 17 Pro phone cases fit the iPhone 18 Pro? In Lastu’s range, yes — the case is the same.
Read moreabout iPhone 18 Pro, 18 Pro Max and iPhone Ultra – rumors, specs and Case
Screen protector or tempered glass—and do you need one in addition to a phone case?
Read moreabout Screen protector or tempered glass—and do you need one in addition to a phone case?
Can the MagSafe magnet damage bank cards?