Privacy Policy

Privacy Policy

Last updated: 05.1.2026

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or interact with this website. We aim to be transparent, lawful, and respectful of your privacy. This policy is written to comply with major data‑protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable US privacy laws (such as CCPA/CPRA where relevant).

1. Who we are

This website is operated by: Itu Design Oy
Itu Design Oy
Salomonkatu 17 A 00100 Helsinki
Company ID 2152313-4

We provide business-to-business (B2B) professional services. This website is intended for business users and professional contacts. For the purposes of data-protection law, we are the data controller of your personal data.

2. What data we collect

We collect only the personal data that is necessary to operate a professional B2B website and respond to enquiries.

a) Data you provide voluntarily

• Name
• Business email address
• Company name
• Job title (if provided)
• Any information you submit via contact forms, email, surveys, or downloads

b) Data collected automatically

When you visit the website, we may automatically collect:

• IP address
• Browser type and version
• Device and operating system
• Pages visited, interactions, and time spent on the site
• Referring website or source

This data is collected using cookies or similar technologies and is used only for security, functionality, and performance analysis. We do not intentionally collect special-category (sensitive) personal data.

3. How we use your data

We use your personal data to:

• Respond to enquiries and business communications
• Provide requested services or information
• Improve website performance, security, and usability
• Send newsletters or professional updates (only if you have opted in)
• Meet legal, regulatory, and contractual obligations

We do not:

• Sell personal data
• Use data for automated decision-making or profiling
  
  

4. Legal basis for processing (EU/UK users)

Under GDPR, we process personal data only when we have a lawful basis, including:

• Consent – when you explicitly agree (e.g. newsletter sign‑up)
• Contract – when processing is necessary to provide a service
• Legitimate interests – to operate and improve the website
• Legal obligation – when required by law
  
  

5. Data sharing and third parties

We may share personal data with trusted third-party service providers that support the operation of this website and our business, such as:

• Website hosting and infrastructure providers
• Email and newsletter platforms
• Website analytics and security services

These providers process data only on our instructions and are contractually required to protect it.

Where personal data is transferred outside the EU or UK, we rely on appropriate safeguards, including Standard Contractual Clauses or equivalent legal mechanisms.

6. Data retention

We retain personal data only for as long as necessary:

• Enquiry and contact data: up to 24 months after last interaction
• Newsletter subscription data: until you unsubscribe or withdraw consent
• Analytics and technical data: anonymised or retained for up to 26 months

Data may be retained longer where required to meet legal or regulatory obligations.

7. Cookies and tracking

This website uses cookies to:

• Ensure basic functionality
• Understand how visitors use the site
• Improve performance and content

Where required by law, you will be asked for consent before non‑essential cookies are used.

You can manage or disable cookies through your browser settings.

8. Your rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability

We will respond to verified requests within 30 days, in line with GDPR requirements. To exercise your rights, contact us at hello@itudesign.com. EU/UK users also have the right to lodge a complaint with their local data-protection authority.

9. US privacy rights

If you are a resident of certain US states (including California), you may have additional rights under applicable privacy laws, such as:

• The right to know what personal data is collected
• The right to request deletion of personal data

We do not sell or share personal data for advertising or commercial profiling purposes.

We do not discriminate against users who exercise their privacy rights.

10. Data security

We use appropriate technical and organisational safeguards to protect personal data, including:

• Encrypted connections (SSL/TLS)
• Access controls and limited staff access
• Secure hosting and regular software updates

Despite these measures, no online service can be guaranteed to be completely secure.

11. Children’s data

This website is not intended for children under the age of 13, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via this website and, where appropriate, by email. The latest version will always be published on this page, with the updated date shown at the top.

13. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact hello@itudesign.com