This statement explains the scope of data protection, processing principles, and user rights applicable in the UK, in accordance with UK GDPR and relevant laws.
I. Scope of Application
This statement applies to the processing of personal data related to users in the United Kingdom.
It covers the provision of goods or services to UK users, as well as recording and analyzing usage behavior within compliance limits.
Applies to data stored electronically or in structured paper records containing personal information.
Data processing for strictly personal or household purposes is not covered by this statement.
II. Data Processing Principles
Personal data processing follows these principles:
-
Processing is lawful, transparent, and fair
-
Data use is specified and limited to necessary purposes
-
Data is accurate and collection is minimized
-
Retention is limited to necessary periods
-
Technical and managerial measures are implemented to ensure data security and confidentiality
III. User Rights
Under UK GDPR, users have the following rights:
-
Access personal data and obtain information on its processing
-
Correct inaccurate or incomplete data
-
Request deletion of data where legally permissible
-
Restrict or object to specific data processing
-
Request data portability where applicable
-
Withdraw previously given consent at any time without affecting prior lawful processing
For users under 16 years old, these rights must be exercised with the assistance of a guardian.
IV. Third-Party Processing Requirements
Third parties involved in logistics, payment, or technical support must:
-
Process data only according to explicit instructions
-
Implement necessary security measures
-
Assist in handling user rights requests
-
Report data anomalies if detected
-
Maintain necessary records of data processing
V. Cross-Border Data Transfers
When personal data is transferred outside the UK, protection is ensured through one of the following:
-
Adequacy mechanisms recognized by the UK
-
Standard contractual clauses or equivalent agreements
-
Supplemental security measures such as encryption and access controls
VI. Supervision and Compliance
The Information Commissioner’s Office (ICO) supervises UK data protection compliance.
Non-compliant processing may be subject to investigation or corrective actions by relevant authorities.
VII. Compliance Principles
During data processing, the following principles are followed:
-
Ensure users are informed and in control of their personal data
-
Maintain transparent and traceable processing
-
Reduce privacy risks through reasonable technical and procedural measures
VIII. Contact Information
Address: 404 47TH ST APT 14, SAN DIEGO, CA 92102, US
Phone: +1 (678) 777-5565
Email: devis@furnomix.com
Service Hours: Monday to Friday, 9:00–12:30 and 14:00–18:00 (UK Time)
IX. Data Protection Contact Channel
Users may submit requests to access, correct, delete, or restrict the processing of their personal data via the above contact information.
Requests will be processed during normal business hours.