All online stores must have two legally required documents: terms and conditions and a privacy notice. This chapter of the quick guide explains how they are created in MyCashflow and where to find more information on drafting these texts.

One of the most important features of a good online store is reliability. Customer trust begins to build from having enough information available about your online store and company.

The law requires the online store operator to provide certain information about their company. Carefully review the guidelines from the Finnish Competition and Consumer Authority on the information disclosure obligations of online stores to ensure that your online store is compliant with the law.

Terms and Conditions

Your online store must have public terms and conditions that the customer can read before placing an order. Shipping conditions discuss subjects such as payment and shipping methods and rates, shipping times, returns, and other sales-related topics.

However, the terms and conditions should not be regarded as just a necessary nuisance, as thorough terms and conditions positively impact the customer's purchasing experience: based on the terms and conditions, the online store creates a reliable and professional impression.

MyCashflow includes pre-made terms and conditions, which you can easily modify to create terms suitable for your own online store.

You can edit the terms and conditions in the admin panel on the Settings > General settings page at Terms and Conditions.

The terms and conditions are also included by default in the online store's content page menu (see quick guide chapter 4), so that they are easily accessible to visitors.

You can find the location of the terms of delivery in the menu on the admin panel' Contents > Pages page. The page contains only the tag {TermsAndConditions}, which retrieves the content of the terms and conditions to the page from the aforementioned settings page.

Notable considerations for drafting terms and conditions:

  • Edit the content of the terms of delivery only on the Settings > General settings page.

    Changes or additions to the content of the terms should not be made in the Contents > Pages section.

  • Do not remove or modify the Interface tags, such as {ShopOpened} and {ContactInformation}.

    The tags include information stored in the store settings in the text (for example, the aforementioned tags print the store's opening date and contact information), and modifying them may break the terms and conditions in the online store.

  • If you do not intend to use Klarna as a payment method in your online store, remove the default mentions of Klarna and replace them with text describing the payment methods of your own online store.

Return policy

The return policy defines the customer's right to return products and receive a refund. Suomessa kuluttajansuojalaki takaa asiakkaalle oikeuden palauttaa tuotteet 14 päivän kuluessa niiden vastaanottamisesta, mikäli tuotteet ovat käyttämättömiä ja alkuperäispakkauksessa. As an online retailer, you must provide a clear and understandable return policy that complies with this law.

MyCashflow online stores include a pre-made return policy that defines the customer's right to return products to the online store.

The return poliy is displayed by default in the order confirmation message, which the system automatically sends to a customer when they place an order.

The return policy may not fully apply as such to the use of your online store. For example, you may want to specify return costs that suit your own purposes.

Here's how you can edit the default return policy:

  1. Go to the admin panel's Contents > Dictionary page.
  2. In the search field at the top right corner of the page, enter the keyword return.

    The page updates and you will see all the text excerpts that make up the return conditions.

  3. Open each text for editing by clicking its content and make changes to the texts.
  4. Press the Save button below the text field when you are ready.

Privacy notice

In MyCashflow, customers can create user accounts in online stores, which means that your online store will collect and store user details. Because you will process personal data, you must provide a privacy notice in which you'll explain what your online store does to comply with EU's General Data Protection Regulation (GDPR).

You should regard the duty to provide a privacy notice as a positive thing, because all information you provide to your customers will add to your store's credibility, reliability and transparency as well as help you to earn your customers' trust.

It is good to include the following information in the privacy notice:

  • openly and clearly, at least the name and contact information of your company and of the data protection officer if you have one, as well as a description of what kind of personal data your company intends to process
  • the purpose for which your company processes personal data
  • the legal basis for processing personal data
  • how long the data will be stored
  • other organizations or people who can be given access to the data
  • whether personal data are transferred outside the EU
  • the data protection rights of an individual
  • the right to lodge a complaint with a data protection authority
  • the right to withdraw consent at any time if the processing is based on consent
  • information about automated decision making and processing-related logic

Source: Tietosuoja.fi

There is no standard template for a privacy notice but you can use the information provided on the Finnish Data Protection Ombudsman's GDPR page to write yours.

You can also use other online stores' privacy notices as models.

In MyCashflow the privacy notice is drafted as a content page:

  1. Go to the admin panel page Contents > Pages and create a new content page.
  2. Specify at least the following information on the content page form:
    • Name: Name the page, for example, Privacy notice (the name will appear in menus and as the page title).
    • Show in version: Select all versions (the privacy notice is only visible in the selected versions).
    • Contents: Write the content of the privacy notice in the text field.
  3. Press the Save button at the end of the form.

You can now set the page you created as the privacy notice for the online store:

  1. Go to the admin panel's Settings > General settings page.
  2. Select the page you created from the Privacy notice menu.

The page is now visible in the online store at the address https://STORE-NAME.mycashflow.fi/privacy, and it is linked to from all forms that collect personal data (e.g., the checkout customer information form and the store's contact form).

Cookies and cookie survey

Cookies are small text files that are stored on a user's device when they visit a website. They contain information related to the visit, such as user settings and login, and help improve the user experience. Cookies can be either
  • session-specific, so they are automatically deleted after closing the browser or
  • persistent, allowing them to remain on the user's device for a certain period of time.

In online stores, cookies are used for many purposes. They help, for example, to remember the contents of the user's shopping cart, track the user's browsing history, and provide personalized recommendations. They are often used for marketing as well, such as displaying targeted advertising.

In the EU, the use of cookies is strictly regulated by data protection legislation, such as the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

Websites must obtain the user's consent before storing cookies on their device, and the user must be provided with clear information about which cookies are used and for what purposes. The user also has the right to refuse the use of cookies or withdraw their consent at any time. Compliance with these regulations is important for online retailers to operate legally and maintain user trust.

MyCashflow offers a cookie survey as an additional service.

The easiest way to implement a cookie consent survey in your online store is to use MyCashflow's Cookie and consent management service. With it, you can have a cookie consent form for your online store that complies with data protection regulations, and you don't have to manage it yourself.

Check prices and subscribe to the service.