Privacy policy

 

1. Scope of the Policy

This Privacy Policy governs the collection, storage, processing, and handling of personal information gathered when you visit, browse, or purchase indoor and outdoor furniture from our online store. It describes our procedures throughout the full interaction lifecycle, from preliminary browsing and transaction checkout to delivery coordination and after-sales customer service.

2. Information Collection and Technical Means (Cookies)

To facilitate smooth browsing, execute furniture purchases, and ensure operational integrity, we collect relevant technical and transactional information. Technical data collection relies on Cookies—small data files placed onto your device that record functional preferences and operational variables.

Information collected includes:

  • Contact & Transaction Identifiers: Full name, billing address, shipping destination, email address, telephone number, and furniture order histories.

  • Payment Verification Data: Secure transaction tokens and payment confirmation statuses transmitted through encrypted payment gateways (we do not store complete payment card credentials).

  • Technical & Device Metrics: IP address, browser type and version, operating system, localized time zone parameters, referral URLs, and specific furniture catalog pages viewed.

  • Cookies & Automated Technologies: Session Cookies (which terminate upon closing your browser) and Persistent Cookies (retained on your hardware to remember shopping cart items, interface settings, and previous preferences).

3. Information Use and Sharing

Collected information is utilized exclusively for genuine operational purposes necessary to run an online retail store:

  • Processing online furniture orders, managing physical freight dispatch, and generating digital receipts.

  • Authenticating user credentials and safeguarding account environments.

  • Responding to inquiries regarding furniture dimensions, materials, assembly instructions, and delivery timelines.

  • Evaluating storefront responsiveness, server stability, and navigational layout to enhance customer experience.

  • Sending essential transactional notices and informational email communications where prior explicit consent has been secured.

We strictly do not sell personal data to external parties for monetary or other considerations. Data is shared solely with trusted service partners under binding non-disclosure conditions:

  • Logistics & Freight Carriers: Entrusted with recipient names, physical addresses, and contact numbers to complete delivery of indoor and outdoor furniture.

  • Payment Processing Networks: Authorized to validate payment transactions and settle purchase funds securely.

  • Technical Infrastructure & Data Hosting Providers: Utilized to maintain secure server environments, database stability, and digital store operations.

  • Regulatory & Judicial Authorities: Disclosed only when strictly required by mandatory official directives, court subpoenas, or binding statutory requests.

The deployment of Cookies and corresponding local storage occurs under strict principles of transparency and affirmative consent:

  • Notice & Banner Mechanism: Upon your initial entry to the store, an explicit notification banner informs you of the functional, analytical, and performance Cookies utilized.

  • Granular Consent: You retain full authority to accept or reject non-essential Cookies before they are activated. Necessary technical Cookies required to operate the shopping cart and checkout mechanisms function based on operational necessity.

  • Browser Management: You may modify your personal browser controls at any time to inspect, restrict, or purge stored Cookies. Disabling necessary Cookies may impair standard store operations.

5. User Rights (Access, Rectification, Erasure, and Withdrawal)

We respect your control over your personal records. You are entitled to exercise the following rights at any time:

  • Right to Access: Request comprehensive disclosure of the personal data we maintain concerning your profile and purchase history.

  • Right to Rectification: Request corrections, updates, or completions of any inaccurate or outdated information on file.

  • Right to Erasure: Request the deletion of your personal records from active operational systems when the retention purpose has lapsed.

  • Right to Withdraw Consent: Revoke previously granted consent for discretionary processing activities (such as marketing communications) without affecting the lawfulness of processing carried out prior to withdrawal.

In accordance with relevant regulations, all our processing of personal information is based on a clear legal foundation:

  • Performance of a Contract: Processing is necessary to handle furniture purchases, verify payments, fulfill delivery to residential or commercial locations, and handle post-purchase inquiries.

  • Explicit Consent: Processing for newsletter subscriptions and direct marketing communications relies entirely on your freely given, specific, and revocable consent.

  • Compliance with Legal Obligations: Processing is carried out to satisfy mandatory requirements, including tax accounting, fiscal reporting, and statutory bookkeeping obligations.

  • Legitimate Interests: Processing is conducted to optimize store performance, safeguard digital infrastructure against cyber threats, improve shopping experiences, and prevent fraudulent financial activities.

7. Data Security Measures

We implement comprehensive technical and organizational safeguards to protect personal data against accidental loss, unauthorized access, alteration, and unlawful disclosure:

  • End-to-end 256-bit Transport Layer Security (TLS/SSL) encryption active across every page of our online furniture store.

  • Integration with certified PCI-DSS compliant payment gateways, ensuring sensitive payment card information bypasses direct store storage.

  • Strict role-based internal access restrictions, permitting only verified operational personnel to handle shipping and customer service details.

  • Periodic vulnerability assessments, automated monitoring, and routine security patching.

8. Data Processing and Transfers Outside the European Economic Area (EEA)

To maintain international technical hosting, centralized fulfillment, and global customer support, personal information may be transferred to or handled in facilities situated outside the European Economic Area.

For all such external processing, we enforce recognized legal transfer mechanisms and security safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission entered into with external service partners.

  • Adherence to formal adequacy determinations recognized by competent regulatory authorities.

  • Strong technical encryption protocols and access barriers during data transmission and remote storage.

9. United States Specific Data Processing and Protections

For visitors and customers residing in the United States, we uphold standards compliant with applicable state-level privacy statutes, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA):

  • Right to Know and Access: The right to request information about the specific categories and pieces of personal data collected, their sources, and the commercial purposes of collection.

  • Right to Delete and Correct: The right to request the deletion of personal information or the correction of inaccurate records held by us.

  • Non-Discrimination Assurance: Exercising your privacy rights will never result in denied orders, altered pricing, or reduced quality of customer care.

  • Opt-Out of Data Sale & Sharing: We do not sell personal data for monetary gain, nor do we share personal records for cross-context behavioral advertising.

10. Data Retention Period

Personal data is retained solely for the period necessary to fulfill the operational goals stated in this policy, unless a longer retention is mandated by statutory authority:

  • Order & Financial Records: Preserved for statutory retention periods mandated by fiscal, accounting, and taxation standards (typically 5 to 10 years).

  • Customer Support Records: Maintained for up to 2 years following the resolution of an inquiry to support product warranties or delivery verifications.

  • Marketing Contacts: Retained continuously until an explicit opt-out or consent withdrawal is received.

  • Technical Cookies: Retained according to technical expiration dates, ranging from the immediate close of a session up to 12 months.

11. Supplementary Applicable Rights, Exercise, and Complaint Procedures

  • Submitting a Request: To submit an inquiry, request data access, update information, or demand data deletion, please reach out through the contact points specified in Section 16. To safeguard your account, we will verify your identity using order history or email confirmation before processing your request. Responses are provided within statutory deadlines (ordinarily within 30 days).

  • Lodging a Complaint: If you believe that our handling of personal information does not conform to applicable privacy principles, you possess the right to file a formal complaint with your local supervisory data protection authority.

12. General Service Eligibility

Our online store and indoor and outdoor furniture offerings are directed exclusively toward individuals who possess the full legal capacity to enter into binding commercial contracts and complete online purchases independently.

13. "Do Not Track" (DNT) Signals

Certain internet browsers provide an automated "Do Not Track" setting. Because uniform technological protocols for interpreting these signals remain unfinalized across the e-commerce sector, our online store currently does not alter its data gathering routines in response to automated DNT headers. You may, however, adjust Cookie settings manually as detailed in Section 4.

Our online store may provide reference links to external web destinations (such as parcel carrier delivery tracking portals). We exercise no control over the content, operational guidelines, or privacy practices of external web domains. We encourage users to inspect the individual privacy terms of any external destination visited.

15. Policy Updates and Revisions

We may update this policy from time to time to reflect technological advancements, business adjustments, or changes in legal and regulatory requirements. Updated terms will be posted directly on this page. By continuing to browse or use our online store following any such revisions, you acknowledge and accept the updated terms.

16. Contact Information

For any questions, clarification, or requests regarding this Privacy Policy and your personal records, please reach us using the exact details below:

Address: 六本木住友不動産六本木グランド夕ワ一16-2, 港区, 東京都 1060032, Japan
Phone: +81 3-6438-5120
Email: support@garolorelia.com
Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (Central European Time, CET)