Privacy Policy

Last updated: October 7, 2026

QUU Design respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Heli Mäkiranta Design Oy, operating under the QUU Design brand, collects, uses, stores and shares personal information when you visit quudesign.com, make a purchase, create a customer account, contact us, subscribe to our communications or otherwise interact with our website and services.

For the purposes of applicable data protection laws, Heli Mäkiranta Design Oy is the data controller of the personal information described in this Privacy Policy.

1. Personal Information We Collect

The personal information we collect depends on how you interact with QUU Design.

We may collect the following information:

Contact information

Your name, billing and shipping address, email address and phone number.

Order and transaction information

Information about products you purchase, return or exchange, your order history, delivery details and payment-related transaction information.

Payment details are generally processed securely by our payment service providers. QUU Design does not store complete payment card details.

Customer account information

If you create an account, we may process your login information, account preferences and order history.

Communications

Information you provide when contacting us by email, through contact forms, customer service or other communication channels.

Device and usage information

Information such as your IP address, browser type, device type, operating system and information about how you use and navigate our website.

Marketing information

Your marketing preferences and information about how you interact with our newsletters, advertisements and other marketing communications.

Cookies and similar technologies

We may collect information through cookies and similar technologies used to operate the website, remember your preferences, analyze website traffic and, where permitted, provide personalized marketing.

2. How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, subscribe to our newsletter, contact us or otherwise provide information to us
• Automatically when you use our website, including through cookies and similar technologies
• From service providers that help us operate our website and business
• From marketing, analytics and advertising partners, where permitted by law

3. How We Use Your Personal Information

We use personal information for the following purposes:

Processing orders and providing our services

We use your information to:

• Process and fulfil purchases
• Process payments
• Arrange shipping and delivery
• Handle returns, exchanges and refunds
• Manage customer accounts
• Provide customer service
• Communicate with you about your order

Improving our website and services

We may use information about how customers use our website to understand customer needs, improve our products and services and develop the shopping experience.

Marketing and communications

Where permitted by law, we may use your contact information to send newsletters, product updates, offers and other marketing communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails.

Analytics and advertising

We may use website usage and interaction information to measure website performance, understand customer behaviour and improve our advertising.

Where consent is required by law, advertising and analytics cookies will only be used after you have provided consent.

Security and fraud prevention

We may process personal information to protect our website, customers and business from fraud, misuse, unauthorized access and other security risks.

Legal obligations

We may process personal information where necessary to comply with accounting, tax, consumer protection and other legal obligations.

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or similar legislation applies, we process personal information on one or more of the following legal bases:

Performance of a contract

For example, when we process your information to fulfil your order, arrange delivery or handle a return.

Legal obligation

For example, when we retain transaction information for accounting or tax purposes.

Legitimate interests

We may process information where necessary for our legitimate business interests, such as improving our services, preventing fraud and providing customer support, provided that these interests do not override your rights and freedoms.

Consent

Where required, we rely on your consent for activities such as certain marketing communications, analytics cookies and personalized advertising.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. How We Share Personal Information

We may share personal information with trusted service providers where necessary to operate our business.

These may include providers of:

• E-commerce and website hosting
• Payment processing
• Shipping and logistics
• Customer service
• Email and marketing services
• Analytics
• Advertising
• Cloud storage
• IT and security services

We only share information that is necessary for the relevant service.

We may also disclose information where required by law, legal proceedings or requests from competent authorities.

We do not sell personal information in the ordinary meaning of the term.

6. Shopify

Our online store is powered by Shopify.

Shopify processes personal information in order to provide the technical infrastructure and services necessary to operate our online store.

Information you provide through our website may therefore be processed by Shopify and its service providers.

Shopify may also process certain information independently for its own purposes in accordance with its own privacy policies.

You can find more information about Shopify's privacy practices through Shopify's official privacy information and consumer privacy resources.

7. Cookies

Our website uses cookies and similar technologies.

Cookies may be used to:

• Keep the website functioning correctly
• Remember your preferences
• Maintain your shopping cart
• Understand how visitors use our website
• Measure website performance
• Support advertising and marketing

Some cookies are necessary for the website to function and cannot be disabled through our consent tool.

Other cookies, such as analytics or advertising cookies, are used only where permitted by applicable law and, where required, after you have given consent.

You can manage your cookie preferences through the cookie settings available on our website.

8. International Data Transfers

Some of our service providers may process personal information outside Finland or the European Economic Area.

Where personal information is transferred outside the European Economic Area, we use appropriate safeguards as required by applicable data protection law.

These safeguards may include:

• An adequacy decision issued by the European Commission
• European Commission Standard Contractual Clauses
• Other legally recognized safeguards

9. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Retention periods may depend on:

• The duration of our customer relationship
• Accounting and tax obligations
• Consumer protection requirements
• Warranty, complaint or legal claim periods
• Security and fraud prevention needs

When personal information is no longer required, we delete or anonymize it where appropriate.

10. Your Rights

Depending on where you live, you may have rights relating to your personal information.

For individuals located in the European Economic Area, these may include:

Right of access

You may request information about the personal information we process about you.

Right to rectification

You may request correction of inaccurate or incomplete information.

Right to erasure

You may request deletion of your personal information in certain circumstances.

Right to restriction of processing

You may request that we restrict the processing of your information in certain circumstances.

Right to object

You may object to certain processing based on our legitimate interests or to processing for direct marketing purposes.

Right to data portability

Where applicable, you may request your personal information in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where processing is based on your consent, you may withdraw your consent at any time.

Right to lodge a complaint

You have the right to lodge a complaint with the relevant data protection authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

To exercise your rights, please contact us using the details provided below.

We may need to verify your identity before responding to certain requests.

11. Marketing Communications

If you have subscribed to QUU Design marketing communications, you may unsubscribe at any time by clicking the unsubscribe link included in our emails.

Even if you unsubscribe from marketing communications, we may still send you necessary service-related communications, such as order confirmations, shipping information and messages relating to your customer account or purchases.

12. Children's Privacy

Our website and services are intended for adults and are not directed toward children.

We do not knowingly collect personal information from children where parental or guardian consent would be required under applicable law.

If you believe a child has provided personal information to us, please contact us so that we can take appropriate action.

13. Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

Please do not send sensitive or confidential information through unsecured communication channels.

14. Third-Party Websites

Our website may contain links to third-party websites or services.

QUU Design is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party website you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technologies, legal requirements or business practices.

When we make changes, we will update the Last updated date at the top of this page.

Where required by law, we will provide additional notice of material changes.

16. Contact Us

If you have questions about this Privacy Policy, how we process your personal information or if you would like to exercise your data protection rights, please contact us:

Heli Mäkiranta Design Oy / QUU Design
Asekatu 3 A
40100 Jyväskylä
Finland

Email: info@quudesign.com
Phone: +358 50 910 9227

For the purposes of applicable data protection laws, Heli Mäkiranta Design Oy is the data controller.