Privacy policy


1. Scope of the Policy

This Privacy Policy applies solely to our online store. It governs the handling of personal data collected from visitors and purchasers who view, evaluate, or purchase indoor furniture items on our website. It does not apply to any offline operations, as we function exclusively online.

2. Information Collection Technical Means: Cookies & Collected Details

We collect personal information directly when you place an order, create an account, or contact us. This includes: contact details (first and last name, email address, phone number), delivery details (shipping address, billing address), and transaction records. In addition, we utilize technical collection mechanisms including Cookies (small text files placed on your device) to capture technical identifiers, device data, browsing actions, and interaction patterns. These technical tools enable our online store to remember your session details, retain cart selections, analyze visitor behavior, and enhance site functionality.

3. Information Use, Sharing, and Non-Sale Statement

We use your information strictly to operate our indoor furniture online store:

  • Fulfilling, processing, and delivering indoor furniture orders.

  • Communicating order confirmations, tracking details, and support inquiries.

  • Sending administrative and transactional communications.

We share information only where strictly necessary:

  • With logistics and freight carriers to ship your indoor furniture orders.

  • With payment processors to securely process checkout transactions.

  • With IT hosting and infrastructure providers who support the stability and operations of our online store.

  • When required by official supervisory orders.

We do not sell, rent, trade, or otherwise disclose your personal information to outside parties for monetary or commercial consideration.

4. Data Storage and Cookies (User Right to Know and Authorization)

Cookies and technical identifiers are stored on your local browser and on secured servers. You have the full right to know about our deployment of Cookies and to grant or deny authorization:

  • Upon entering our website, you are presented with a consent banner detailing the categories of Cookies utilized.

  • You can manage your preferences or withdraw your authorization at any time via your browser settings or our site consent manager.

  • Disabling necessary Cookies may impair standard store functions, such as retaining items in your shopping cart.

5. User Rights

You retain comprehensive rights regarding your personal information, including:

  • Right of Access: The right to inspect and obtain confirmation of the personal data we hold about you.

  • Right to Rectification: The right to update or correct inaccurate or incomplete data.

  • Right to Erasure: The right to request the permanent deletion of your personal records.

  • Right to Withdraw Consent: The right to revoke any consent previously granted at any time.

6. Legal Bases for Data Processing (GDPR Policy Framework)

In accordance with our GDPR policy framework, we process your personal data under the following legal bases:

  • Contract Performance: To process transactions, handle checkouts, manage shipments, and provide purchased services related to your indoor furniture orders.

  • Explicit Consent: To manage your voluntary newsletter subscriptions and dedicated marketing campaigns.

  • Compliance with Legal Obligations: To fulfill mandatory tax documentation, financial accounting, and official regulatory reporting requirements.

  • Legitimate Interests: To maintain system integrity, improve user browsing experience, monitor store performance, and prevent fraudulent transactions.

7. Data Security Measures & Payment Processing

We implement rigorous technical and organizational security mechanisms to protect your personal data against unauthorized disclosure, loss, or destruction:

  • Transport Layer Security (TLS/SSL) encryption for all transmitted checkout and account data.

  • Role-based access controls limiting data accessibility strictly to authorized personnel.

  • Payment card details are tokenized and processed directly by encrypted, PCI-DSS compliant payment gateways. We do not store or capture full credit card numbers on our servers.

  • Regular security assessments and server maintenance.

8. Data Processing and Transmission Outside the European Economic Area (EEA)

Your data may be processed and stored in locations situated outside the European Economic Area, including the United States, where our operational infrastructure resides. To ensure an adequate level of data protection equivalent to European standards, we rely on standard mechanisms approved by the European Commission, such as Standard Contractual Clauses (SCCs), accompanied by supplementary technical safeguards like end-to-end encryption.

9. Applicable United States Data Processing, Transmission Bases, and Safeguards

For individuals located in the United States, we process data in line with statutory privacy standards. Data is collected directly via our online store and stored on secure servers located within the United States. We implement reasonable administrative, physical, and technical controls to maintain data confidentiality, protect consumer information against unauthorized access, and ensure that data is handled fairly without deceptive practices.

10. Data Retention Period

We retain personal information only for the duration necessary to satisfy the objectives set forth in this policy:

  • Transaction and order records are preserved for the statutory durations required for tax and financial auditing purposes (typically 7 years).

  • Inactive accounts or uncompleted session data are deleted or anonymized on a routine schedule.

  • Marketing subscription records are retained until you revoke consent or unsubscribe.

11. Additional Applicable Rights, Exercise Methods, and Complaint Channels

You have the right to request restriction of processing, object to data processing based on legitimate interests, and request data portability.

  • How to Exercise Rights: Submit your verified request to our dedicated support email. We will review and respond to valid requests within statutory timeframes (generally within 30 days).

  • Complaint Channels: If you believe your data has been handled inconsistently with applicable privacy standards, you have the right to lodge a complaint directly with your local Data Protection Authority (DPA) in the EEA or the relevant state attorney general’s office in the United States.

12. "Do Not Track" and Global Privacy Control

We recognize and respect browser-initiated opt-out preference signals, including Global Privacy Control (GPC). When our system detects a recognized opt-out signal, we will treat that signal as a direct request to suppress tracking and non-essential analytical cookies.

13. Policy Updates and Modifications

As we adjust the business operations of our online store, we may revise this Privacy Policy from time to time. Any such revisions will be posted directly on this page.

14. Severability

Should any provision of this Privacy Policy be deemed invalid, void, or unenforceable under applicable statutory rules, the remaining sections and provisions shall remain fully in force and effective.

15. Contact Information

Address: 13323 Esperanza Rd #1411, Dallas, TX 75240, United States
Phone: +1 (214) 837-4921
Email: team@harodrel.com
Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (Central European Time, CET)