Privacy Policy

This policy describes how personal data is collected, used, and protected during the use of the website and related services.

Before providing any information or proceeding with an order, we recommend reading the following content carefully to understand the applicable rules and your rights.

I. Scope of Application

This Privacy Policy applies to all interactions of users with the website, including, but not limited to:

• Browsing pages, searching, and viewing products

• Placing orders, making payments, and post-sale management

• Contacting customer support through online channels

• Communication related to returns, refunds, or dispute management

Users under the age of 18 are not authorized to register or provide personal data. If data related to minors is detected, it will be handled according to the applicable rules.

II. Types of Data Collected

To the extent necessary for the functioning of the services, the following types of data may be processed:

Data provided directly by the user:

• For example: name, phone number, email address, shipping or billing address, order-related information, and data necessary for payment processing (such as payment method reference).

Data generated automatically during usage:

• Including IP address, device type, browser and operating system, access times, browsing history, as well as preferences stored via cookies or local storage, after obtaining consent.

No sensitive data unrelated to the services offered is collected.

III. Purpose of Data Processing and Legal Bases

Data processing is carried out for specific purposes and on legitimate legal bases, including:

• Contract execution: managing orders, organizing shipping, and providing post-sale assistance

• Service communications: necessary updates regarding order status, shipping, or customer support

• Website optimization: statistical analysis on general usage, prioritizing anonymous or aggregated data

• Legal obligations: compliance with fiscal, accounting, or fraud prevention requirements

Without explicit consent, data is not used for marketing purposes.

IV. Use of Cookies

Non-essential cookies are used only with user consent. The main purposes include:

• Maintaining login status

• Storing language or geographical preferences

• Preserving the shopping cart and payment process

Users can manage or withdraw consent for cookies at any time via their browser settings. Disabling non-essential cookies does not affect basic functionalities but may impact personalized experiences.

V. Data Security Measures

To minimize the risk of unauthorized access, loss, or misuse, technical and organizational measures are implemented, including:

• TLS/SSL encryption for data transmission

• Access control systems based on the principle of least privilege

• Use of firewalls and regular security checks

• Staff training on data protection principles

• System and component maintenance and updates

VI. Data Sharing and Third Parties

Data is shared with third parties only when necessary and in compliance with the UK GDPR, via Data Processing Agreements (DPA) that define responsibilities and operational limits.

Common cases include:

• Payment service providers

• Operators involved in logistics or warehousing

• Technical service providers for order or system management

Third parties are authorized to process data only for agreed purposes and must implement adequate security measures.

VII. International Data Transfers

Data is generally stored within the European Economic Area (EEA).

If transfers to third countries are required, appropriate protective measures, such as Standard Contractual Clauses (SCC), are implemented, and relevant information will be provided as necessary.

VIII. Data Retention Period

The retention period for data depends on the purpose of processing and legal obligations, for example:

• Data related to orders and billing are retained according to applicable law

• Once the purpose is achieved or the legal retention period expires, data will be deleted or anonymized, unless required by law

IX. Security Incident Management

In the event of incidents that may compromise users' rights and freedoms, the situation will be assessed and managed in accordance with the UK GDPR, with corrective measures adopted and notification obligations met.

X. User Rights

Under the UK GDPR, users may exercise the following rights where applicable:

• Right to access personal data

• Right to rectify inaccurate or incomplete data

• Right to erase data under certain circumstances

• Right to restrict processing

• Right to data portability in a structured, commonly used format

• Right to object to processing based on legitimate interests or withdraw consent

Requests can be submitted using the contact details provided, and will be handled based on the specific situation.

XI. Minor Information

The website is not intended for minors and does not intentionally collect personal data from individuals under the age of 18.

If information related to minors is detected, the appropriate procedures will be applied.

XII. Contact Information

For questions related to this Privacy Policy or personal data processing, please contact:

• Address: 422 WELLS BROTHERS RD, ROSE HILL, NC 28458-8496, US

• Phone: +1 (914) 309-3805

• Email: bonjour@furnifindz.com

• Hours: Monday to Friday, 9:00 AM to 12:30 PM and 2:00 PM to 6:00 PM (CET)

XIII. Policy Updates

This Privacy Policy is drafted in compliance with the applicable regulations and operational needs and may be updated over time.

The version published on the website represents the current effective policy; users are advised to consult it periodically for any updates.