Privacy Policy - Accent Design

Last updated: February 19, 2026

1. Introduction

Welcome to our online store. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, process, and store your personal information when you visit our website or make purchases from us.

This policy applies to information we collect:

When you visit our website
When you register an account with us
When you purchase products from us or use our services
When you contact our customer service

2. Who We Are

Bau Ventures Oy (Accent)

FI33984878

Käenkuja 3 a A, 00500, Helsinki, Finland

vm@accent.design

+358504629898

For the purposes of GDPR, we are the data controller of your personal information.

For any privacy-related inquiries, please contact our privacy contact at vm@accent.design.

3. Information We Collect

3.1. Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

Create an account
Place an order
Complete forms on our website
Contact our customer service

This information may include:

Identity Data: first name, last name
Contact Data: billing address, shipping address, email address, phone number
Company Data: company name (if applicable)
Transaction Data: details about products you purchase and payment information
Marketing and Communications Data: your preferences in receiving marketing from us

3.2. Information We Collect Automatically

When you visit our website, we automatically collect certain information about your device and usage patterns. This includes:

Technical Data: internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
Usage Data: information about how you use our website, products, and services, including page views, navigation paths, and interaction with site features

We collect this information using cookies and similar technologies. For detailed information about the cookies we use, please see our Cookie Policy.

3.3. Third-Party Sources

We use Google Analytics 4 (GA4) to help us understand how visitors engage with our website. GA4 uses cookies and similar technologies to collect and analyze information about the use of our website. We have enabled IP anonymization, which means your IP address is truncated before being stored or processed by Google. We rely on your consent (obtained via our cookie consent mechanism) as the legal basis for this processing under GDPR Article 6(1)(a). You may withdraw your consent at any time through our cookie settings. For more information about how Google processes your data, please visit: https://policies.google.com/privacy.

We use Intercom, a third-party customer messaging platform, to provide customer support and communication services. When you interact with us through Intercom (e.g., via live chat or support messages), Intercom may collect certain personal data such as your name, email address, and the content of your messages. For more information about how Intercom processes your data, please visit: Intercom's Privacy Policy.

4. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

4.1. For Contract Performance

To process and fulfill your orders
To manage payments, fees, and charges
To communicate with you about your order
To provide customer support

4.2. For Our Legitimate Interests

To improve our website, products, and services
To personalize your experience
To prevent fraud and ensure website security
To manage our business efficiently

4.3. With Your Consent

To send you marketing communications
To share information with selected partners (if applicable)
To collect certain types of sensitive data (if applicable)

You have the right to withdraw your consent at any time by contacting us or using the unsubscribe function in our communications.

4.4. To Comply with Legal Obligations

To maintain business records as required by law
To comply with tax and financial reporting requirements
To respond to legal requests from authorities

5. Who We Share Your Data With

In accordance with GDPR Article 13(1)(e), we disclose the categories of recipients with whom your personal data may be shared. We do not sell your personal data to third parties. We may share your data with the following categories of recipients:

5.1. Payment Processors

We share transaction and payment data with our payment service providers to process your purchases securely. These providers act as independent data controllers for payment processing.

5.2. Shipping and Logistics Providers

We share your name, delivery address, and contact details with shipping and logistics companies to fulfill and deliver your orders.

5.3. Analytics Providers

We use Google Analytics 4 (GA4) to analyze website usage. GA4 processes anonymized usage data on our behalf. See Section 3.3 for details on the legal basis and data handling.

5.4. Customer Support Tools

We use Intercom, Inc. as our customer messaging and support platform. When you interact with our support channels, your name, email address, and message content are processed by Intercom. See Sections 7 and 9 for details on Intercom's data handling and international transfers.

5.5. Hosting and Infrastructure Providers

Our website and services are hosted by cloud infrastructure providers who process data on our behalf under data processing agreements that comply with GDPR requirements.

5.6. Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulators, or other authorities when required by law or to protect our legal rights.

All third-party service providers acting as data processors are required to enter into data processing agreements that ensure your data is protected in accordance with GDPR.

6. Data Retention

We will only keep your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

For transaction data: We retain this information for a period of 5 years after your last transaction to comply with tax and accounting regulations
For account information: We retain this information for as long as your account remains active. If your account becomes inactive, we will retain the data for 1 year before deletion
For marketing data: We retain this information until you unsubscribe or withdraw your consent
For analytics data: Data collected through Google Analytics is retained for 14 months from the date of collection. After this period, user-level and event-level data is automatically deleted
For cookies: Session cookies expire when you close your browser. Persistent cookies (such as analytics and preference cookies) expire after the period specified in our Cookie Policy, typically between 30 days and 2 years depending on their purpose. You can delete cookies at any time through your browser settings
For Intercom data: Data associated with inactive visitors is automatically expired by Intercom after 9 months to comply with GDPR retention requirements

7. Your Data Protection Rights

Under GDPR, you have significant rights regarding your personal data:

7.1. Right of Access

You have the right to request copies of your personal data that we hold.

7.2. Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

7.3. Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

7.4. Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

7.5. Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

7.6. Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

To exercise any of these rights, please contact us at vm@accent.design. We will respond to all legitimate requests within one month.

8. Automated Decision-Making and Profiling

In accordance with GDPR Article 13(2)(f), we inform you that we do not use automated decision-making, including profiling, that produces legal effects or similarly significantly affects you. Any decisions affecting your account, orders, or services are made with human involvement.

If this changes in the future, we will update this privacy policy and inform you of the logic involved, as well as the significance and the envisaged consequences of such processing.

9. International Data Transfers

We may transfer your personal data outside the European Economic Area (EEA) in the following circumstances:

To service providers located outside the EEA who help us provide our websites and services to you
To affiliated companies who may be located outside the EEA

When we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission
Using specific contracts approved by the European Commission (Standard Contractual Clauses)
Transferring data to US-based providers that are certified under an approved data protection framework

Intercom (Customer Messaging Platform)

We use Intercom, Inc. as our customer messaging and support platform. Intercom is a US-based company, and we use their US-hosted region, which means that personal data processed through Intercom (such as your name, email address, and support conversations) may be stored and processed on servers located in the United States.

Intercom participates in the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce, to ensure compliance with GDPR requirements for international data transfers. Intercom also maintains a Data Processing Addendum (DPA) incorporating Standard Contractual Clauses (SCCs) issued by the European Commission.

All data sent to or from Intercom is encrypted in transit using 256-bit encryption, and data at rest is encrypted using AES-256 encryption. Intercom holds international compliance certifications including SOC2, ISO 27001, and ISO 27701.

For more information about how Intercom complies with GDPR, please visit: Intercom's GDPR Compliance.

10. Data Security

We have implemented appropriate technical and organizational measures to secure your personal data from accidental loss, unauthorized access, alteration, and disclosure. These measures include:

Encryption of sensitive data
Regular security assessments
Access controls and authentication requirements
Staff training on data protection
Regular backups

11. Third-Party Links

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

12. Children's Privacy

Our website is not intended for children under the age of 13. Under Finnish national legislation implementing GDPR Article 8, the age of digital consent for information society services in Finland is 13 years. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience on our website. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. For more information about the cookies we use, please see our Cookie Policy.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last Updated" date.

We encourage you to review this privacy policy periodically to stay informed about how we protect your personal information.

15. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Bau Ventures Oy (Accent)

FI33984878

Käenkuja 3 a A, 00500, Helsinki, Finland

vm@accent.design

+358504629898

16. Complaints

If you are concerned about how we handle your personal data, you have the right to make a complaint at any time to your local data protection authority. However, we would appreciate the chance to deal with your concerns before you approach the authority, so please contact us in the first instance.

As we are based in Finland, the relevant supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). For EU residents in other member states, a list of data protection authorities can be found at: edpb.europa.eu.