Privacy policy

 

1. Scope of the Policy

This Privacy Policy applies solely to personal data collected through our online indoor furniture store, digital purchase channels, and related electronic communications. It governs how we handle information acquired during your visits, account registration, and online transactions. It does not apply to any offline operations, as we conduct all sales and interactions entirely online.

2. Technical Means of Information Collection: Cookies

We employ automated technical tracking tools, specifically cookies, pixel tags, and web beacons, to record your browsing habits, device identifiers, IP addresses, session data, and interaction history across our online storefront. These automated technical means assist us in maintaining site functionality, recognizing returning visitors, and evaluating general site traffic patterns.

3. Scope of Information Use and Sharing

We utilize the collected details to process online indoor furniture orders, facilitate delivery, handle electronic payments, maintain customer records, and provide customer support. We share your personal data only with trusted logistics carriers, secure payment gateways, and IT infrastructure service providers solely to the extent necessary to fulfill our commitments. We do not sell your personal information, nor do we share it for cross-context behavioral advertising.

4. Data Storage and Cookies (User Right to Know and Authorization)

Cookies are stored on your local device for predetermined periods. You have full transparency and control regarding cookie usage:

  • Awareness: When you enter our online store, a clear notification informs you about the types and purposes of the cookies we utilize.

  • Authorization: Non-essential technical tracking cookies will only be activated after obtaining your informed, affirmative consent. You maintain the right to adjust, disable, or revoke authorization for cookie placement at any time via your browser settings or our preferences tool.

5. User Rights (Access, Rectification, Erasure, and Withdrawal)

You possess definite controls over your personal records:

  • Access: You may request confirmation of whether we process your data and obtain a copy of the records we hold.

  • Rectification: You may request the correction of inaccurate or incomplete personal information.

  • Erasure: You may request the deletion of your personal records when they are no longer necessary for the original purposes.

  • Withdrawal: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

Under the GDPR policy framework, our handling of your personal details is justified under the following distinct legal grounds:

  • Performance of a Contract: Processing is necessary to manage your online indoor furniture purchases, fulfill transactions, coordinate delivery, and provide purchased services.

  • Explicit Consent: Processing is based on your freely given, explicit consent for newsletter subscriptions and direct marketing communications.

  • Compliance with Legal Obligations: Processing is necessary to satisfy our mandatory tax, accounting, financial auditing, and regulatory reporting duties.

  • Legitimate Interests: Processing is required to support our legitimate operational interests, such as improving user navigation, securing our website network, and detecting and preventing fraudulent transactions.

7. Data Security Measures

We deploy strict technical and organizational measures to safeguard your personal information against accidental loss, unauthorized access, alteration, and unauthorized disclosure. These protections include Secure Sockets Layer (SSL) encryption, end-to-end payment tokenization, strict access restrictions based on the principle of least privilege, and routine technical vulnerability audits. All electronic payment transactions are processed through certified, encrypted third-party payment gateways; we never store full credit card numbers, expiration dates, or CVV security codes directly on our servers.

8. Data Processing and Transfers Outside the European Economic Area (EEA)

In the normal operation of our online store, personal information collected from individuals in the European Economic Area is transferred to, hosted in, and processed within facilities located outside the EEA, primarily within the United States. To safeguard this data flow, we implement valid legal transfer mechanisms approved by competent authorities, including Standard Contractual Clauses (SCCs), ensuring an equivalent level of protection for your rights.

9. United States Data Processing and Safeguards

For transactions and users located within the United States, personal information is hosted in secure data centers operating within the United States. Processing is governed by applicable federal and state privacy frameworks, including the California Consumer Privacy Act (CCPA/CPRA). We implement administrative controls, data segregation, and restricted data exposure to prevent unauthorized extraction or commercial misuse of your personal details. United States residents, particularly those in California, maintain specific entitlements to know the categories of personal details collected, request the deletion of their information, and opt out of the sale or sharing of personal data at any time.

10. Data Retention Period

We retain your personal records only for the duration strictly necessary to fulfill the operational purposes described in this document:

  • Transaction and payment details are kept for the duration required by applicable statutory tax and accounting standards.

  • Account information is retained while your user profile remains active.

  • Marketing contact details are retained until you request removal or withdraw consent.
    Once the applicable retention window expires, data is either securely scrubbed or permanently anonymized.

11. Supplemental Rights, Exercise Mechanisms, and Complaint Procedures

Depending on your place of residence, you may have supplemental statutory rights, including the right to data portability, the right to object to specific processing activities, non-discrimination for exercising privacy privileges, and the right to restrict processing.

  • How to Exercise: To exercise any of your entitlements, submit a verifiable written request to our designated email address. We review and answer verifiable submissions within standard statutory timelines.

  • Complaints: You retain the right to lodge a formal complaint with the relevant data protection supervisory authority in your jurisdiction if you believe our data practices violate statutory requirements.

12. "Do Not Track" (DNT) Signals

Some internet browsers include a "Do Not Track" feature that sends signals to websites you visit. Because uniform industry standards for interpreting DNT signals have not been finalized, our online store does not currently respond to automated browser DNT signals unless explicitly mandated by statutory standards.

Our online store may contain reference links to external web destinations operated by independent entities. We do not govern the operational practices, content, or privacy guidelines of those external destinations. We advise you to read the privacy statements of any external site you visit.

14. Modifications to This Policy

We reserve the right to amend individual terms from time to time as our business operations evolve or regulatory requirements change. Any such updates will be posted directly on this page. By continuing to use our online store after the updated terms have been posted, you acknowledge and accept the revised content.

15. Contact Details

If you have any questions, requests, or concerns regarding our privacy practices, please contact us via the following information:

Address: 5050 Apex Cir #414, Davenport, FL 33837, United States
Phone: +1 (863) 424-7382
Email: team@zalvenfiel.com
Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (Central European Time, CET)