PRIVACY

Privacy Policy

This policy explains how personal data is processed when you use kuitu.io and submit sourcing enquiries. It is issued under the EU General Data Protection Regulation (GDPR, 2016/679) and the Finnish Data Protection Act (1050/2018).

1. Data controller

KUITU, Business ID 3254442-4, Helsinki, Finland. For any privacy matter, contact us through the contact page.

2. Data we collect

When you submit an enquiry: company name, contact name, business email, optional phone number, delivery location, quantity, product requirements, comments and any files you upload (drawings, specifications, photos). When you create an account: email address and sign-in details. We also store technical data needed to run the service securely, such as hashed request identifiers used to prevent spam.

3. Purposes and legal basis

We process data to evaluate and answer your enquiry, prepare quotations, coordinate manufacturing with our partners and manage the resulting customer relationship. The legal basis is steps taken at your request before entering into a contract and the performance of a contract (GDPR Art. 6(1)(b)), our legitimate interest in running and securing our business (Art. 6(1)(f)), and compliance with legal obligations such as accounting (Art. 6(1)(c)). We do not use your data for unrelated marketing.

4. Automated drawing analysis

If you upload a drawing or photo, it may be analysed by an AI model to suggest specifications. The suggestions are a starting point only; no decisions with legal or similarly significant effect are made automatically. Every quotation is reviewed by a person.

5. Sharing

We share only the technical information needed to source your product with selected certified manufacturing partners. We use service providers for hosting, data storage, authentication and AI analysis, who process data on our behalf. We do not sell personal data.

6. Transfers outside the EU/EEA

Some service providers or manufacturing partners may be located outside the EU/EEA. Where data is transferred, we rely on safeguards permitted by the GDPR, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

7. Retention

Enquiry data is kept as long as needed to handle the enquiry and any resulting customer relationship, and is then deleted. Accounting records are kept for the periods required by the Finnish Accounting Act (1336/1997). You may ask us to delete your data at any time, unless we are legally required to keep it.

8. Security

Uploaded documents are stored in private storage without public links, and access is limited to authorised Kuitu personnel.

9. Cookies

We use only storage that is strictly necessary for sign-in and security. We do not use analytics or advertising cookies.

10. Your rights

You have the right to access, rectify and erase your data, restrict or object to processing, and receive your data in a portable format. Contact us through the contact page. You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

11. Changes

We may update this policy. The current version is always published on this page.