1. Introduction
Welcome to furnibuildcove. We respect your privacy and are committed to protecting your personal data in accordance with applicable laws and regulations, including the European Union General Data Protection Regulation (GDPR), European privacy standards, and applicable United States federal and state privacy legislation.
This Privacy Policy explains how we collect, use, disclose, and store your personal information when you visit www.furnibuildcove.com or book our custom in-home flat-pack furniture assembly services.
2. Data Controller
The Data Controller responsible for processing your personal data collected through this website and service is the brand furnibuildcove.
If you have any questions, concerns, or requests regarding the handling of your personal data or this policy, please contact us directly at:
- Brand Name: furnibuildcove
- Website: www.furnibuildcove.com
- Customer Support Email: support@furnibuildcove.com
3. Personal Data We Collect
We collect personal information necessary to deliver, manage, and optimize our furniture assembly services for customers in Europe and the United States. This includes:
- Contact & Identification Data: Name, email address, physical delivery/service address, and phone number (if provided for service coordination).
- Service & Order Details: Booking details, furniture specifications, service location information, and communication history regarding your requests.
- Payment & Transaction Data: Information required to complete payments for our services.
- Technical & Usage Data: IP address, browser type, device information, and interactions with our website collected via necessary operational logs or cookies.
4. Payment Processing via Stripe
To ensure secure payment processing on our website, we integrate third-party payment infrastructure.
- Third-Party Payment Processor: We explicitly utilize Stripe as our payment handling provider.
- Data Processing by Stripe: When you pay for our services, your payment card details, billing address, and transaction metadata are directly collected, transmitted, and processed by Stripe.
- Data Minimization: furnibuildcove does not process, store, or have access to full credit card numbers or sensitive payment authentication credentials on our servers. Stripe processes all payment data securely in compliance with the Payment Card Industry Data Security Standard (PCI-DSS) and applicable global security protocols. For more information on how Stripe handles payment data, please refer to Stripe’s Privacy Policy.
5. Legal Bases for Processing
We process your personal data under the following lawful legal grounds:
- Performance of a Contract: To process bookings, coordinate in-home assembly services, and fulfill customer support requests.
- Compliance with Legal Obligations: To fulfill statutory tax, legal accounting, anti-money laundering, and fraud protection obligations under EU and applicable laws.
- Legitimate Interests: To improve our platform security, optimize service delivery, and maintain standard operational records.
- Consent: Where applicable, for non-essential cookies or specific communications.
6. Data Retention Period
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory legal, tax, accounting, and reporting obligations under applicable EU and US law.
- Customer Service & Booking Records: Retained for the duration of your active service fulfillment plus up to 2 years following completion to handle warranty claims, support follow-ups, or service inquiries.
- Financial & Transaction Records: Transaction history, invoicing data, and payment receipts are retained for up to 10 years in compliance with mandatory European legal, statutory tax, and accounting record-keeping requirements.
- Technical & Web Logs: Server and security logs are retained for a maximum of 6 to 12 months, after which they are deleted or anonymized.
Once the applicable retention period expires, your personal data will be securely deleted or permanently anonymized.
7. International Data Transfers
furnibuildcove is located in France and provides services to clients across Europe and the United States. When transferring personal data outside the European Economic Area (EEA)—such as to service providers or payment processors like Stripe operating in the United States—we ensure adequate protection mechanisms are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent legal transfer frameworks.
8. Your Data Protection Rights
Rights for European Union (EEA) Residents:
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data when it is no longer needed for its original purpose or statutory retention period.
- Right to Restrict or Object to Processing: Request that we restrict or stop processing your data under certain circumstances.
- Right to Data Portability: Request transfer of your data to another service provider.
- Right to Lodge a Complaint: File a complaint with a supervisory authority, such as the CNIL (Commission Nationale de l’Informatique et des Libertés) in France.
Rights for United States Residents:
Depending on your state of residence (e.g., California, Virginia, Colorado), you may have specific rights, including:
- The right to know what personal data is collected and how it is used.
- The right to request deletion of your personal information.
- The right to opt-out of the sale or sharing of personal information (Note: furnibuildcove does not sell or share customer personal data to third parties for monetary or marketing consideration).
- The right to non-discrimination for exercising your privacy rights.
To exercise any of your privacy rights, please contact us at support@furnibuildcove.com.
9. Third-Party Sharing & Disclosure
We do not sell, rent, or trade your personal information. Personal data is shared strictly with authorized service providers necessary to operate our business:
- Payment processors (Stripe) to handle payments securely.
- IT infrastructure, web hosting, and security providers.
- Legal or regulatory authorities when required by mandatory legal processes or legal orders.
10. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technical updates, or operational practices. Any changes will be published on this page with an updated effective date.