Privacy Policy

 

1. Scope of the Policy

This Privacy Policy applies solely to online store interactions, website visits, and digital checkouts on our website. We operate strictly as an online store with no physical retail locations. All collection, utilization, and management of data described herein relate entirely to activities conducted through our website.

2. Information Collection Technologies: Cookies

We utilize session Cookies, persistent Cookies, and server-level tracking identifiers to support storefront architecture. These technical mechanisms automatically collect connection information, including your IP address, browser type, device specifications, operating system details, referring website paths, and page navigation history throughout our indoor furniture catalog. We do not incorporate external tracking add-ons to build individual profiles across unaffiliated websites.

3. Collection, Use, and Sharing of Personal Information

To fulfill transactions, we collect specific personal details directly provided by you during the checkout and account creation processes:

  • Identification & Contact Data: Your full name, email address, and telephone number (used for order verification, dispatch notifications, and client inquiries).

  • Delivery & Invoicing Data: Your physical shipping address and billing address (used exclusively to route indoor furniture items and process billing records).

  • Payment Transaction Data: Financial details necessary to complete purchases, which are submitted directly through encrypted payment channels. We never store or view full credit or debit card numbers on our servers.

We share information strictly with specialized operational service providers:

  • Payment settlement gateways to authenticate financial transactions.

  • Freight, handling, and delivery carriers to execute order transport.

  • Secured server infrastructures responsible for hosting our storefront databases.

We do not sell, rent, disclose, or trade personal data to outside parties for monetary or commercial purposes.

Cookies and technical logs are retained in secure digital storage. Through our website consent mechanism, you receive immediate notice regarding which Cookies are activated. You maintain the full right to accept, reject, or adjust non-essential Cookies prior to placement on your device. You can also modify your browser preferences at any moment to clear or reject stored Cookies.

You maintain extensive control over your stored details:

  • Access & Correction: You may review the records we hold concerning you and request updates to inaccurate or outdated items.

  • Deletion: You may request the permanent erasure of your personal records whenever operational retention is no longer necessary.

  • Withdrawal of Consent: Where processing depends on your consent, you can revoke that consent at any time without affecting past lawful handling.

In accordance with our General Data Protection Regulation (GDPR) policy, we process personal information based on the following legal grounds:

  • Performance of a Contract: Fulfilling online orders, verifying payment transactions, providing customer care, and delivering purchased indoor furniture.

  • Explicit Consent: Sending email newsletters and updates regarding our indoor furniture line when you voluntarily choose to opt in.

  • Compliance with Legal Obligations: Satisfying mandatory tax submissions, financial accounting requirements, and official administrative audits.

  • Legitimate Interests: Safeguarding our digital infrastructure against fraudulent orders, improving store usability, and strengthening network security.

7. Data Security Measures

We maintain comprehensive technological and administrative protections. All personal and financial transmissions use Transport Layer Security (TLS/SSL) encryption protocols to prevent unauthorized interception. Our server environments feature dedicated firewalls, multi-factor access verification, and regular vulnerability scanning routines.

8. Data Transmission and Processing Outside the European Economic Area

When technical routing necessitates data processing at server facilities outside the European Economic Area, we implement European Commission Standard Contractual Clauses (SCCs) alongside data encryption safeguards. This confirms that personal details receive equivalent protection regardless of where technical systems operate.

9. United States Data Processing and Safeguards

For information stored, accessed, or handled within the United States, we uphold consumer protections aligned with California privacy standards and applicable state statutes. You have the right to request full disclosure of data categories gathered, obtain copies of personal records, demand deletion, correct errors, and restrict sensitive processing. We will never alter pricing, impose penalties, or degrade service quality because you exercise your privacy rights.

10. Data Retention Period

We store personal details solely for the duration required to complete order delivery, address customer support inquiries, and fulfill statutory tax and accounting retention mandates. Once operational and statutory requirements conclude, files are permanently deleted or irreversibly anonymized.

11. Supplementary Rights, Exercise Methods, and Complaint Channels

You have the right to restrict the scope of data processing, object to specific activities grounded in legitimate interests, and request the transfer of your details in a portable electronic format.

To exercise any of these protections, submit your request using the contact channels specified below. We review, verify, and complete submitted requests within 30 days. If you find our response unsatisfactory, you have the right to lodge a formal complaint with your relevant data protection authority.

12. Do Not Track (DNT) Signals

Our systems do not modify storefront behavior upon receiving automated browser "Do Not Track" signals, as standardized uniform protocols for DNT interpretation have not been formally established across the industry.

13. Policy Modifications

We may update this Privacy Policy from time to time to accommodate operational updates or revised statutory mandates. Revisions become effective immediately upon posting to this page.

14. Contact Information

Address: 232 Fairfield Dr, Sanford, FL 32771, United States
Phone: +1 (407) 835-9241
Email: client@xorlena.com
Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (Central European Time, CET)