Privacy policy

Introduction

This Privacy Policy explains how Furnivo ("we," "us," or "our") collects, uses, stores, shares and protects your personal data when you use our online store and services. Furnivo is the data controller responsible for your personal information. This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data-protection laws.

By using our Services, placing an order, subscribing to our marketing communications or otherwise interacting with us, you acknowledge that you have read and understood how we handle your personal data as set out in this Privacy Policy. We are committed to protecting your privacy and handling your data in an open and transparent manner.

Data Controller and Contact Information

The data controller responsible for your personal information is:

Furnivo
Princes Street
Edinburgh EH1 1BE
United Kingdom

Email: contact@furnivo.shop
Telephone: 447447205992

If you have any questions, concerns or requests regarding this Privacy Policy or how we process your personal data, please contact us using the details above. You may also use these contact details to exercise any of your data-subject rights described in this policy.

Personal Information We Collect or Process

When we use the term "personal information" or "personal data," we are referring to information that identifies or can reasonably be linked to you as an individual. Personal information does not include anonymised or aggregated data that cannot identify you. We may collect and process the following categories of personal information, depending on how you interact with our Services and as permitted or required by applicable law:

Contact details: your name, postal address, billing address, delivery address, telephone number and email address.
Account information: if you create an account with us, your username, password, account preferences and settings, and any other information you provide when managing your account.
Transaction information: details of the products you browse, add to your basket or wishlist, purchase, return or exchange; your order history; payment confirmation details; and records of past transactions.
Financial information: payment card details (credit or debit card number, expiry date, CVV code), billing information, and details of your payment method. Payment card data is processed securely by our payment-service provider and is not stored on our systems in full.
Communications with us: the content of any correspondence, enquiries or complaints you send to us by email, telephone, live chat or social media, including customer-service requests.
Device and technical information: your IP address, browser type and version, operating system, device identifiers, screen resolution, time-zone setting, browser plug-in types and versions, and other technology on the devices you use to access our Services.
Usage information: information about how you navigate and interact with our website, including pages visited, links clicked, products viewed, time spent on pages, referring website or source, date and time of access, and other behavioural data.
Cookies and tracking data: data collected through cookies, web beacons, pixels and similar technologies (see the "Cookies and Tracking Technologies" section below).
Marketing preferences: your preferences regarding receiving marketing communications from us and your consent choices.
Delivery and fulfilment information: delivery instructions, safe-place preferences, and any information you provide to facilitate successful delivery of your order.

Sources of Personal Information

We collect personal information from the following sources:

Directly from you: when you create an account, place an order, fill in a form on our website, subscribe to our newsletter, contact our customer service, participate in a promotion, leave a review or otherwise voluntarily provide us with your information.
Automatically through the Services: when you visit or use our website, we automatically collect certain device and usage information through cookies, server logs and similar technologies.
From our service providers: third-party service providers who support our operations (such as payment processors, delivery companies, email-marketing platforms, hosting providers and analytics services) may collect or share your personal information with us on our behalf.
From our partners or other third parties: in some cases, we may receive information about you from third-party partners, social-media platforms (if you interact with us through social media), fraud-prevention agencies, or publicly available sources, where permitted by law.

Lawful Bases for Processing Your Personal Data

Under UK data-protection law, we must have a lawful basis to process your personal data. We rely on the following lawful bases:

Performance of a contract: we process your personal data to fulfil our contract with you when you place an order. This includes processing your payment, arranging delivery, managing your account, handling returns or exchanges, and providing customer service. Without this information, we cannot complete your purchase or deliver the Services you request.
Compliance with legal obligations: we process your data where necessary to comply with our legal and regulatory obligations, including tax and accounting requirements, responding to lawful requests from law enforcement or regulatory authorities, and complying with court orders.
Legitimate interests: we process your data where necessary for our legitimate business interests or those of a third party, provided your rights and freedoms do not override those interests. Our legitimate interests include:
- Operating, maintaining and improving our website and Services;
- Detecting, preventing and investigating fraud, security breaches and other misuse of our Services;
- Understanding how customers use our website to improve user experience and develop new features;
- Conducting analytics and market research;
- Maintaining records for internal administrative purposes;
- Defending legal claims and protecting our rights and property.
Consent: where required by law (for example, for certain cookies, email marketing or SMS marketing), we rely on your freely given, specific, informed and unambiguous consent. You have the right to withdraw your consent at any time by contacting us or using the unsubscribe mechanism provided in our communications.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

Provide, Fulfil and Improve the Services

We use your personal data to provide you with the Services and fulfil our contract with you. This includes:

Processing and fulfilling your orders, including payment processing, order confirmation, packing, dispatch and delivery;
Creating and managing your online account;
Remembering your preferences, wishlist items and shopping-basket contents;
Arranging delivery with our courier partners (delivery within the UK is free and typically takes 3–5 working days);
Processing returns, exchanges, refunds and cancellations in accordance with your statutory rights and our Returns Policy;
Communicating with you about your orders, including order confirmations, dispatch notifications, delivery updates and any issues or delays;
Enabling you to post reviews and ratings;
Providing customer support and responding to your enquiries;
Improving and personalising your shopping experience, including recommending products that may interest you based on your browsing and purchase history;
Conducting internal analytics to understand how our Services are used and to improve website functionality, navigation and performance.

Marketing and Advertising

Where we have your consent or where permitted by law (based on our legitimate interests), we may use your personal data for marketing and promotional purposes, including:

Sending you marketing communications by email, SMS or post about our products, special offers, promotions and news that we believe may interest you;
Showing you targeted online advertisements for our products on our website or on third-party websites and social-media platforms, including retargeting ads based on products you have viewed or added to your basket;
Personalising marketing content and offers based on your preferences, purchase history and browsing behaviour;
Conducting market research and customer surveys to understand your preferences and improve our offerings.

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails, updating your account preferences, or contacting us directly. Even if you opt out of marketing, we will still send you transactional and service-related communications necessary to fulfil your orders.

Security, Fraud Prevention and Legal Compliance

We use your personal information to:

Authenticate your identity and manage account access;
Detect, prevent, investigate and respond to fraud, security incidents, unlawful activity and misuse of our Services;
Protect the security and integrity of our website, systems and data;
Monitor and enforce compliance with our Terms of Service and other policies;
Comply with applicable laws, regulations and legal obligations, including tax, accounting and record-keeping requirements;
Respond to lawful requests from law enforcement, regulatory authorities, courts and government agencies;
Establish, exercise or defend legal claims and protect our rights, property and safety, and those of our customers and third parties.

If you create an account, you are responsible for keeping your login credentials confidential. We strongly recommend that you do not share your username, password or other access details with anyone else.

Communicating with You

We use your contact information to:

Respond to your questions, requests and complaints;
Provide customer support and assistance;
Send you important updates about changes to our policies, terms or Services;
Maintain our business relationship with you and ensure effective service delivery.

Sharing Your Personal Information

We do not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your personal information with the following categories of recipients, only as necessary to provide the Services and for the purposes described in this Privacy Policy:

Service Providers and Processors

We engage trusted third-party service providers who process personal data on our behalf under our instructions. These include:

E-commerce platform provider: our online store is hosted on Shopify, a leading e-commerce platform. Shopify provides the technology infrastructure that enables us to operate our store and process your orders. Shopify processes your data in accordance with its own privacy policy and applicable data-protection laws. Shopify may transfer data internationally, including to Canada and the United States, under appropriate safeguards (see "International Transfers" below).
Payment processors: we use secure third-party payment-service providers to process credit and debit card payments and other payment methods. Payment processors handle your financial information securely and in compliance with Payment Card Industry Data Security Standards (PCI DSS). We do not store full payment-card details on our own systems.
Delivery and logistics providers: we share your name, delivery address, telephone number and order details with courier and delivery companies to fulfil your orders. Delivery within the UK is free and typically takes 3–5 working days.
Email and marketing platforms: we use email-service providers to send transactional emails (order confirmations, dispatch notifications) and, where you have consented, marketing emails. These providers process your email address and related data on our behalf.
Analytics and advertising services: we use analytics tools (such as Google Analytics) to understand how visitors use our website, and advertising platforms to deliver targeted ads. These services may use cookies and similar technologies (see "Cookies and Tracking Technologies" below).
Customer-service and communication tools: providers of live chat, helpdesk software and customer-relationship-management (CRM) systems that help us respond to your enquiries and manage customer interactions.
Fraud prevention and security services: third-party services that help us detect and prevent fraudulent transactions and protect the security of our website.
Cloud hosting and IT infrastructure providers: companies that provide data storage, server hosting and other technology services necessary to operate our website and maintain our systems.

We require all service providers to implement appropriate technical and organisational security measures and to process your data only in accordance with our instructions and applicable law. Service providers are prohibited from using your personal data for their own purposes.

Business Transfers

If we are involved in a merger, acquisition, reorganisation, sale of assets or bankruptcy, your personal data may be transferred to the successor entity or acquirer, subject to this Privacy Policy and applicable law. We will notify you of any such change via email or a prominent notice on our website.

Legal Requirements and Protection of Rights

We may disclose your personal information if required to do so by law, court order, subpoena or other legal process, or if we believe in good faith that disclosure is necessary to:

Comply with legal obligations or respond to lawful requests from public authorities (including law enforcement and regulatory agencies);
Enforce our Terms of Service or other agreements;
Protect the rights, property or safety of Furnivo, our customers, employees or the public;
Detect, prevent or investigate fraud, security breaches or illegal activity.

With Your Consent

We may share your personal data with other third parties where you have given your specific consent to do so.

International Transfers of Personal Data

Your personal data is primarily processed and stored within the United Kingdom. However, some of our service providers and technology partners (including Shopify, payment processors, analytics providers and cloud-hosting services) are located outside the UK, including in the European Economic Area (EEA), Canada and the United States.

When we transfer your personal data to countries outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK data-protection law. These safeguards include:

Adequacy decisions: transferring data to countries that the UK government has determined provide an adequate level of data protection (such as EEA member states and countries covered by UK adequacy regulations);
Standard Contractual Clauses (SCCs): entering into UK-approved Standard Contractual Clauses (also known as EU Standard Contractual Clauses recognised under UK law) with service providers in countries without adequacy decisions, to ensure your data is protected to UK standards;
Other appropriate safeguards: relying on Binding Corporate Rules, certification schemes or other mechanisms recognised under UK GDPR where applicable.

For example, Shopify (our e-commerce platform provider) may process data in Canada and the United States. Shopify implements appropriate technical, organisational and contractual safeguards, including Standard Contractual Clauses, to protect your data during international transfers.

You have the right to request further information about the safeguards we use for international transfers and to obtain a copy of the relevant documentation by contacting us at contact@furnivo.shop.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse how our website is used, remember your preferences, and deliver relevant advertising. A cookie is a small text file that is stored on your device when you visit a website.