Privacy policy

Last updated: 28 August 2026

Controller

ScalePoint Ventures Oy, trading as KUVOA, is the controller for personal data processed through this store.

Business ID: 3620767-9
VAT ID: FI36207679
Address: Almavägen 26, 65610 Korsholm, Finland
Email: hello@kuvoa.fi

Data we process

Depending on how you use KUVOA, we may process contact and delivery details, order and payment-status information, customer-service messages, device and usage data, and the photos, logos, text, design instructions or reference files you submit. Payment-card details are handled by Shopify and the selected payment provider; KUVOA does not receive the full card number.

Why we process data and our legal bases

To answer enquiries, prepare designs, process orders, prepare artwork for production, manufacture and deliver products: performance of a contract or steps requested before a contract.
To keep accounting records, handle consumer rights and comply with lawful requests: legal obligation.
To prevent misuse, secure the store, improve operations and establish or defend legal claims: legitimate interests, balanced against your rights.
To send optional marketing or use customer material for publicity: consent where required. Submitted artwork is not used for marketing without separate permission.

Artwork and uploaded files

Customer artwork is used only for the requested design, print preparation, fulfilment, customer support and necessary complaint handling. Do not submit unnecessary sensitive information. Do not submit an image of a child unless you are the child’s guardian or otherwise authorised to do so. KUVOA does not use customer artwork to train public AI models. If a separate design service would require disclosure beyond the processors described here, we will provide information or request permission first.

Who receives data

We disclose only what is necessary to service providers acting for us or as independent controllers, including Shopify for the storefront, checkout and order administration; contracted production and fulfilment providers; payment providers; carriers; and providers of hosting, security, email and customer support. We may also disclose data when required by law or in connection with a legitimate corporate transaction.

International transfers

Some providers may process data outside Finland or the European Economic Area. Where required, transfers are protected by an adequacy decision, standard contractual clauses or another lawful transfer mechanism. Shopify’s own privacy information explains its processing and transfer safeguards.

Retention

Order, transaction and accounting data are retained for the periods required by applicable accounting, tax and consumer law and for necessary claim handling. Artwork and working design files are retained only for the time needed to prepare, fulfil and support the order and for a limited after-sales period needed for complaints or replacements, after which they are deleted or anonymised where feasible. Cancelled-request files are removed as soon as operationally practical unless retention is required for a legal claim. Backup or processor copies may remain until ordinary secure deletion cycles complete. We review retention needs regularly.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent for future processing. You may also complain to the Finnish Data Protection Ombudsman at https://tietosuoja.fi/en/home. To exercise your rights, contact us by email. We may need to verify your identity.

Cookies and store technology

Shopify and related services use cookies and similar technologies to operate checkout, remember choices, secure the service, measure performance and, where permitted, support analytics or marketing. Available choices are presented through the store’s cookie controls where required.

Security and changes

We use reasonable technical and organisational safeguards, but no method of transmission or storage is completely secure. We may update this policy when services, practices or legal requirements change. The current version and update date will be published here.