Privacy Policy

1. Who is responsible for your data

Avyreno is operated by KS Nordic (“Avyreno”, “we”, “us”). We are the data controller for the personal data described in this policy.

2. What we collect

• Order and delivery data— name, delivery and billing address, email, phone number, order contents, order history.
• Account data— email address, password (stored encrypted), saved addresses.
• Payment data— handled directly by our payment provider. We receive confirmation of payment, the card type and the last four digits. We never see or store your full card number.
• Communications— messages you send us about orders, returns or product safety.
• Marketing data— your email address if you subscribe to the Inner Circle newsletter.
• Usage data— pages viewed, device and browser type, approximate location from IP address, and cart activity. Collected only where you have accepted analytics cookies.

3. Why we use it, and our legal basis

4. Who we share it with

We never sell your personal data. We share it only with the service providers needed to run the store, each acting under a data processing agreement:

• Payment processing and fraud prevention
• Shipping carriers and fulfilment partners, including suppliers who dispatch items directly to you — they receive your name, delivery address and phone number
• Ecommerce hosting, email delivery and customer support tools
• Analytics providers, where you have consented
• Accountants, auditors and authorities where the law requires it

5. Transfers outside the EU/EEA

Some of our suppliers and service providers operate outside the European Economic Area. Where your data is transferred outside the EEA, it is protected by the European Commission’s Standard Contractual Clauses or an adequacy decision. Fulfilment partners outside the EEA receive only the delivery details required to ship your parcel.

6. How long we keep it

• Order and invoice records: retained for the statutory accounting period
• Account data: until you delete your account or ask us to remove it
• Newsletter subscriptions: until you unsubscribe
• Support messages: up to 2 years after the case is closed
• Analytics data: up to 24 months

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you and receive a copy
• Have inaccurate data corrected
• Have your data erased, where we are not legally required to keep it
• Restrict or object to processing based on legitimate interest
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, without affecting processing already carried out
• Not be subject to automated decision-making with legal effects

To exercise any of these rights, email support@avyreno.co. We respond within one month. We may ask you to confirm your identity first.

8. Complaints

If you believe we have handled your data unlawfully, please contact us first — we would like the chance to put it right. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), or with the supervisory authority in your own EU country of residence.

9. Security and children

All traffic to this store is encrypted in transit. Access to personal data is limited to those who need it to fulfil orders and provide support. Our store is not directed at children, and we do not knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy as our services change. The date at the top of this page always shows the current version. Material changes affecting your rights will be communicated by email where we have your address.