Privacy Policy – Kudostu
Who We Are
Our website address is: https://kudostu.com Kudostu is a trade name of Limitless Venture Group Oy, and the kudostu.com online store is operated under the Kudostu trade name by Limitless Venture Group Oy (Business ID: 2804095-2).
Registry Name: Kudostu Online Store Customer Registry
Controller:
Limitless Venture Group Oy
Itätuulenkuja 10 A 13
02100 Espoo, Finland
info@kudostu.com
Business ID: 2804095-2
What Personal Data We Collect, Where From, and Why
We process personal data for purposes related to managing, administering, and developing customer relationships, delivering products and services, invoicing, handling complaints, and developing products and services.
We also use personal data for customer communication, such as announcements, satisfaction surveys, customer research, and marketing. This includes direct and electronic marketing – with the customer’s consent. Customers have the right to opt out of direct marketing.
The controller processes personal data directly and may use subcontractors acting on behalf of and for the controller.
We collect data directly from you when you use Kudoste’s website, create an account, log in, or shop at Kudoste.
Examples of collected data:
- Products you viewed – used to display recently viewed products
- Location, IP address, browser type – to calculate taxes and shipping
- Shipping address – to estimate and apply delivery costs and fulfill orders
Cookies are also used to retain your cart contents during browsing.
When you make a purchase, we request:
- Name, billing/shipping address, email, phone number, payment information
- Optional account data: company details, role, marketing permissions, username/password
We use this data to:
- Send order/account information
- Respond to inquiries, including returns and complaints
- Process payments and prevent fraud
- Set up your account
- Comply with legal obligations (e.g. taxes)
- Improve store offerings
- Send marketing messages if you opt in
If you create an account, your name, address, email, and phone number are stored for autofill in future orders.
We also store your wishlist content to show favorites, personalize marketing (if you’ve opted in), and guide product development.
When users leave comments, we collect the comment form data, IP address, and browser info for spam detection.
If you upload images, avoid including location data (EXIF GPS), as visitors can download and view this data.
We may also collect publicly available personal data when necessary for maintaining the customer relationship.
Personal data may be generated not only from user interactions but also through technical processes (e.g., forms, cookies, analytics, and third-party plugins).
Legal Basis for Processing
We process personal data under the following GDPR bases:
- Consent (Article 6(1)(a)) for one or more specific purposes
- Contractual necessity (Article 6(1)(b)) when fulfilling or preparing contracts
- Legitimate interests (Article 6(1)(f)), when a relevant and appropriate relationship exists, such as when the data subject is a customer and the processing is reasonably expected
Cookies
If you comment on the site, you may opt to save your name, email, and URL in cookies for convenience. These cookies expire after one year.
If you log in, we set a temporary cookie to check if your browser accepts cookies. It’s deleted when you close the browser.
Login cookies last two days, display preference cookies last a year. “Remember Me” keeps you logged in for two weeks. Logging out removes login cookies.
Publishing or editing an article sets a cookie with the article ID, which expires in one day.
Cookies also track your wishlist while browsing.
Embedded Content from Other Sites
Articles on this site may include embedded content (e.g., videos, images, articles). Interacting with such content is treated as if you visited the source site.
These sites may collect data, use cookies, embed third-party tracking, and monitor your interaction, including if you’re logged in to that site.
Who We Share Your Data With
If you request a password reset, your IP will be included in the email.
We may share necessary data with partners to process orders, prevent abuse, or complete payments and deliveries, including:
- Matkahuolto
- Posti
- UPS
- PostNord
- Visma Pay (our payment provider)
Visma Pay may process data such as total purchase amount and billing details to fulfill your transaction.
We generally do not transfer data outside the EU or EEA. If our partners do so, they must apply appropriate safeguards in accordance with the GDPR.
How Long We Store Your Data
We retain user profile data for registered users. All users can view, edit, or delete their personal data anytime.
Comments and their metadata are retained indefinitely to auto-approve future comments.
Usernames cannot be changed. Site admins can edit profiles.
We store purchase-related payment and legal data as required by law.
Inactive accounts (no login or order in 2 years) are deleted.
We review retention needs every five years. Data is deleted 2 years after a customer relationship ends unless legally required (e.g., accounting records are kept for 5 years after the fiscal year ends).
Outdated or incorrect data is regularly reviewed and corrected.
Your Rights Regarding Your Data
If you have an account or have left comments, you can request a copy of your data via email to info@kudostu.com. The request must include your name, phone number, email address, and a description of the request.
You can also request deletion of your data – except where we are legally required to retain it.
How We Protect Your Data
Only authorized personnel with a need for the data can access it. For example:
- Order info (what was purchased and where it was shipped)
- Customer info (name, email, billing/shipping details, wishlist content)
Data is stored on secure servers with restricted access. All access is password-protected and logged.
Employees and contractors are bound by confidentiality obligations.