Privacy Policy

I. Scope of Application

This policy applies to the processing of personal data when users browse the website, place orders, make payments, request returns, or communicate with customer service.

Users under 16 years old are not recommended to use these services. If data has already been collected, it may be deleted upon request by a guardian.

II. Types of Information Collected

Information voluntarily provided by users:

• Name, contact details, email address

• Shipping and billing addresses

• Order records and payment-related information

• Communication content related to after-sales support

Information automatically collected by the system:

• Device and technical data (IP address, browser type, device category)

• Access records (pages viewed, time spent)

• Cookie preferences, stored with user consent

III. Purpose of Data Use

• Order processing, product delivery, and after-sales support – necessary for contract performance

• Sending order status updates or responding to inquiries – necessary communication

• Tax, accounting, and compliance requirements – legal obligation

• Website operation analysis and user experience optimization – legitimate interest

• Personal data will not be used for advertising or marketing without explicit consent

IV. Cookie Usage

• Necessary cookies support shopping processes, account identification, language settings, and other basic functions

• Analytical and preference cookies are activated only with user consent

• Users are notified on first visit and may adjust cookie preferences through browser settings or tools at any time

• For details, refer to the Cookie Policy page

V. Data Security Measures

• TLS encryption is used during data transmission

• Data is stored in a controlled environment with access management

• Regular security checks and risk assessments are conducted

• Personnel involved in data processing receive basic data protection training

VI. Data Sharing and Cross-Border Transfers

• Personal data is shared with payment, logistics, or technical service providers only when necessary, and these parties must comply with confidentiality and security requirements

• For transfers outside the UK, appropriate legal mechanisms and technical measures are applied to ensure data protection

VII. Retention Period and Incident Handling

• Data retention is determined based on service needs and legal requirements; e.g., order-related information may be retained for up to five years

• In case of a data security incident, affected individuals and relevant supervisory authorities will be notified in accordance with UK law

VIII. User Rights (UK GDPR)

Users have the right to:

• Access, correct, or delete their personal data

• Restrict specific data processing or request data portability

• Withdraw previously given consent (without affecting prior lawful processing)

Requests can be submitted via the contact information below and will be processed within a reasonable timeframe.

IX. Legal Basis for Data Processing

• Contract performance: order processing and after-sales support

• Legal obligation: tax, accounting, and regulatory requirements

• User consent: non-essential cookies or optional functions

• Legitimate interest: system security, risk management, and service optimization

X. Data of Minors

• Personal data of users under 16 years old is not actively collected

• If such data is discovered, it will be processed upon request, and guardians may request correction or deletion

XI. Contact Information

Address: 404 47TH ST APT 14, SAN DIEGO, CA 92102, US

Phone: +1 (678) 777-5565

Email: devis@furnomix.com

Service Hours: Monday to Friday, 9:00–12:30 and 14:00–18:00 (UK Time)

XII. Policy Updates

This policy is effective from the date of publication.

Updates will be posted on the website.

Users are advised to check this page regularly to review the current version.