How we handle personal data.

KuuraStack is a software and web development brand operated by LiteIT Oy. This privacy policy explains what personal data we may collect, why we use it and how we protect it.

Last updated: 6 September 2026

Data controller

LiteIT Oy / KuuraStack

LiteIT Oy
Business ID 2782422-9
Finlaysoninkuja 13
33210 Tampere
Finland

Email: hello@kuurastack.com

Our approach

We keep data collection limited and practical.

We collect and process personal data only when it is reasonably necessary for customer relationships, enquiries, sales, marketing, projects or providing our services.

We do not intentionally collect unnecessary sensitive personal information.

Information we collect

Mostly normal business contact information.

The information we process is mainly information needed to communicate with customers, prospects and partners.

Contact details

Name
Email address
Phone number
Job title or role

Communication

Emails and contact form messages
Information provided by phone
Quotation and service requests
Marketing preferences

What we do not normally collect

We do not need highly sensitive personal identifiers for normal business communication.

KuuraStack does not intentionally collect information such as Finnish personal identity codes or other sensitive personal data unless there is a specific and justified reason related to a service or legal requirement.

Where the information comes from

Usually directly from you.

Email

Information you provide when contacting KuuraStack or LiteIT Oy by email may be stored as part of our customer or marketing records.

Phone

Business contact information provided during phone conversations may be recorded when relevant to an enquiry, customer relationship or marketing.

Website forms

Information submitted through website forms may be stored so we can respond to the request and continue the relevant business communication.

Why we use personal data

Customer relationships, projects and communication.

Responding to enquiries
Preparing quotations
Managing customer relationships
Delivering and supporting services
Communicating about projects
Managing customer and marketing records
Meeting legal and accounting obligations

Legal basis

Processing depends on the situation.

Personal data may be processed because of an existing customer relationship, steps taken before entering into an agreement, our legitimate business interests, legal obligations or consent where consent is required.

Marketing register

Contact information may also be used for relevant business marketing.

Contact information received through email, phone, website forms, customer relationships or other business communication may be stored in our customer and marketing register.

We may use this information for reasonable business-to-business communication and marketing related to KuuraStack or LiteIT Oy services.

Opt out

You can ask us to stop marketing communications.

If you do not want to receive marketing communication from us, you can ask us to stop using your contact information for that purpose.

hello@kuurastack.com

Sharing personal data

We do not sell or freely distribute personal information.

Personal data is not shared with third parties for their independent marketing purposes.

When agreed

Information may be shared when you have specifically agreed to it or when sharing is part of the service or project you requested.

Customers and partners

Necessary information may be shared when a project involves a customer, subcontractor, supplier, cooperation partner or other third party who needs the information.

Legal requirements

Information may be disclosed when required by law, an authority or another applicable legal obligation.

EU and EEA

We aim to keep personal data within Europe.

As a general rule, we aim to process personal data within the European Union or European Economic Area.

Personal data is not intentionally transferred outside the EU or EEA without a reason related to the relevant service, customer, project or third-party system.

When a third party is involved

Some services may require processing outside the EU or EEA.

If a customer, partner, supplier, technical platform or other service involved in a project requires processing outside the EU or EEA, personal data may be transferred when necessary.

Where required, appropriate safeguards are used for such transfers.

Data retention

We keep information only while there is a reasonable reason to keep it.

Customer and project information may be retained during the customer relationship and afterwards when needed for support, business records, legal obligations or other legitimate business purposes.

Marketing contact information may be kept while it remains relevant or until you ask us to stop using it for marketing.

Data security

Access is limited to people who need the information.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

Personal data is accessible only when it is needed for work related to the relevant customer, project, service or business function.

Your rights

You can ask us about your personal data.

Depending on the circumstances and applicable data protection law, you may have rights concerning the personal data we process about you.

Access and correction

You may request access to your personal data and ask us to correct inaccurate or incomplete information.

Deletion and restriction

You may have the right to request deletion of personal data or restriction of processing where applicable.

Object to marketing

You may object to direct marketing and withdraw consent where processing is based on consent.

Privacy requests

Contact us if you want to exercise your rights.

Requests concerning access, correction, deletion, marketing or other personal data matters can be sent by email.