Privacy policy

Last updated: July 06, 2026

Aito is operated by Bae Ventures Oy (Business ID 3584090-7) (“we”, “us”, “our”). We operate this online store and website to provide our products and services (the “Services”). Our store is hosted on Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, and disclose personal information when you visit, use, or make a purchase through our Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs matters related to personal data.

Personal information we collect

We collect personal information that is necessary to operate our Services and comply with legal obligations, including:

  • Contact details such as name, billing and shipping address, email address, and phone number
  • Order and transaction information, including purchases, returns, and order history
  • Payment information, which is processed securely by our payment providers (we do not store full payment card details)
  • Account information, if you choose to create an account
  • Communications you send to us, such as customer support inquiries
  • Device and usage information, including IP address, browser type, and interactions with our website

Sources of personal information

We collect personal information from the following sources:

  • Directly from you when you place an order, contact us, or use the Services
  • Automatically through your use of the Services, for example via cookies and similar technologies
  • From Shopify and service providers who support the operation of our store

How we use your personal information

We use personal information to:

  • Process orders, payments, shipping, returns, and refunds
  • Provide customer support and communicate with you
  • Operate, maintain, and improve our Services
  • Comply with legal and regulatory obligations
  • Prevent fraud, misuse, and security incidents

Where permitted by law, we may also use limited personal information for marketing communications. You may opt out of marketing emails at any time.

Disclosure of personal information

We may share personal information with:

  • Shopify, which hosts our store and processes data necessary to provide the Services
  • Service providers such as payment processors, logistics partners, and IT providers
  • Authorities, where required by law or to protect our legal rights

We do not sell your personal information.

International data transfers

Your personal information may be transferred outside your country of residence, including outside the European Economic Area. Where this occurs, we rely on lawful transfer mechanisms such as the European Commission’s Standard Contractual Clauses.

Data retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Your rights

If you are located in the European Economic Area or the United Kingdom, you have rights under data protection laws, including the right to access, correct, delete, or restrict processing of your personal information, and to request data portability.

You may exercise these rights by contacting us using the details below. We may need to verify your identity before responding.

Children’s data

Our Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website, and the “Last updated” date will be revised accordingly.

Contact

If you have any questions about this Privacy Policy or how we process your personal information, or if you wish to exercise your rights, please contact us:

Bae Ventures Oy
Business ID: 3584090-7
Lapinlahdenkatu 14
Helsinki, Finland
Email: sup@aitohki.com

For the purposes of applicable data protection laws, Bae Ventures Oy is the data controller.