Skip to content

Privacy policy

Updated 1 October 2026.

This privacy policy explains how we process your personal data in the Aikido Unlimited online store at aikidounlimited.com. It is based on the EU General Data Protection Regulation (GDPR).

1. Controller

  • Aikido Unlimited Oy
  • Business ID: 3498765-9
  • Turjankatu 1 C, 33100 Tampere, Finland
  • Email: info@aikidounlimited.fi
  • Phone: +358 44 280 0489

2. Contact person for privacy matters

Sarita Siltanen-Lehtovaara, sarita@aikidounlimited.fi

3. Data we process

  • contact details: name, email address, phone number
  • delivery and billing address
  • order details: products and services ordered, sizes, embroidery text, chosen delivery method and order status
  • payment status (paid or unpaid). We do not process card details, as payments are handled by Paytrail.
  • account details, if you create an account: sign-in details and order history
  • customer service messages
  • technical data, such as your sign-in session and security logs
  • your consent choices for marketing and cookies
  • analytics and advertising data, if you have given consent

4. Purposes and legal bases

  • Performance of a contract: processing orders, payment, delivery, returns and maintaining your account.
  • Legal obligations: accounting and taxation, and obligations under consumer protection law.
  • Legitimate interest: customer service, security of the service and preventing misuse.
  • Consent: analytics and advertising cookies and marketing messages. You can withdraw your consent at any time.

5. Where the data comes from

We mainly receive the data from you when you place an order, create an account or contact us. We receive payment status from Paytrail and delivery status from the carriers. If you sign in with Google, we receive your name and email address from Google.

6. Recipients and processors

We do not sell your personal data. We use the following service providers, who process data on our behalf or as independent controllers:

  • Supabase: database, authentication and file storage. Servers are located in the EU.
  • Google Firebase Hosting: website hosting
  • Paytrail Oyj: payments
  • Shipit Oy (ShipIt): shipping labels and pickup point search
  • PostNord and GLS: deliveries
  • Google: Google sign-in, if you choose it, and Google Analytics 4 and Google Ads conversion measurement only with your consent
  • our email service provider: order confirmations and other messages
  • Kuvatikkaus: details of the item and the embroidery text, if you order embroidery
  • Tozando (Japan): size and name details, if an item is made to order for you and the details are needed for manufacturing

We may disclose data to authorities when required by law.

7. Transfers outside the EU and EEA

Some service providers, such as Google, may process data outside the EU and EEA, for example in the United States. Such transfers are based on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission. Transfers to Tozando are based on the European Commission's decision that Japan provides an adequate level of data protection.

8. Retention

  • Account data is kept until you delete your account or ask us to delete it.
  • Order and payment data is kept as required by the Accounting Act, usually six years from the end of the financial year in which the order was placed.
  • Analytics data is kept for 14 months in line with our Google Analytics settings.
  • Marketing consent remains valid until you withdraw it.

9. Cookies and browser storage

We use technologies that are necessary for the store to work: your cart is saved in your browser's local storage (localStorage), and your sign-in session keeps you signed in. These do not require consent.

Analytics and advertising cookies (Google Analytics 4 and Google Ads) are used only with your consent. You can change your choice at any time via the Cookie settings link in the site footer.

10. Your rights

You have the right to:

  • access your data
  • have inaccurate data rectified
  • have your data erased
  • restrict processing
  • object to processing
  • data portability
  • withdraw your consent

Send your request to info@aikidounlimited.fi. You can also request deletion of your account on the My account page. We delete the account but keep the order data required by the Accounting Act for the statutory period.

If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

11. Security

Data is stored in secured systems, and the connection to the store is encrypted. Only people who need personal data for their work have access to it.

12. Changes

We may update this privacy policy. The current version is always available on this page.