Privacy Policy

1. Introduction

Welcome to Furniture Department, operated by Furniture Department LLC ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using our website, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password
• Contact Information: Shipping address, billing address, phone number
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• Order History: Products purchased, order dates, order amounts
• Communications: Messages you send us, customer support inquiries

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent on pages, links clicked
• Cookies: Small data files stored on your device (see Section 4)
• Analytics: Aggregate data about site usage via Vercel Analytics

3. How We Use Your Information

We use the information we collect for the following purposes:

• Order Fulfillment: Process and deliver your orders
• Account Management: Create and manage your account
• Customer Support: Respond to your inquiries and provide assistance
• Communication: Send order confirmations, shipping updates, and important notices
• Improvement: Analyze usage patterns to improve our website and services
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with applicable laws and regulations
• Marketing: Send promotional emails (with your consent, opt-out available)

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website.

4.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (authentication, shopping cart)
• Analytics Cookies: Help us understand how visitors use our site
• Performance Cookies: Improve website speed and performance
• Functional Cookies: Remember your preferences

4.2 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality. You can manage your cookie preferences at any time using our Cookie Consent banner, and we honor the Global Privacy Control (GPC) signal as an opt-out of the sale or sharing of personal information. For full details, see our Cookie Policy.

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

5.1 Service Providers

• Payment Processing: Stripe (for secure payment processing)
• Hosting: Vercel (website hosting and infrastructure)
• Database: Supabase (secure data storage)
• Email: Resend (transactional email delivery)
• Analytics: Vercel Analytics (website usage analysis)

5.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Prevent fraud or security threats

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over HTTPS (SSL/TLS)
• Authentication: Secure password hashing and JWT tokens
• Database Security: Row-level security policies on all tables
• Access Control: Limited access to personal data based on roles
• Monitoring: Continuous security monitoring and logging
• Regular Audits: Automated security scans and vulnerability assessments

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Data Rights

Depending on your location, you may have the following rights regarding your personal data:

7.1 GDPR Rights (EU/UK)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit how we use your data
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

7.2 California Privacy Rights (CCPA/CPRA)

This section applies to California residents and is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). It describes the categories of personal information we collect, how we use and disclose it, and the rights you have.

Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA):

• Identifiers: name, email address, postal address, phone number, account login
• Customer records: billing and shipping information, order history
• Commercial information: products purchased or considered, cart contents
• Internet/network activity: device information, IP address, pages viewed, interactions with our site
• Geolocation: approximate location derived from IP address and shipping address
• Financial information: payment is processed by Stripe; we do not store full card numbers

How We Disclose Personal Information

We disclose the categories above to service providers and contractors for business purposes only — for example, payment processing (Stripe), hosting (Vercel), data storage (Supabase), email delivery (Resend), and the third-party manufacturers who fulfill your orders. We require these recipients to use the information only to perform services on our behalf.

We Do Not Sell or Share Your Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We also do not knowingly sell or share the personal information of consumers under 16 years of age.

Your California Rights

• Right to Know / Access: request the categories and specific pieces of personal information we have collected
• Right to Delete: request deletion of personal information we have collected, subject to legal exceptions
• Right to Correct: request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: direct us not to sell or share your personal information. Although we do not sell or share data, you may still exercise this right through (a) our Do Not Sell or Share My Personal Information page, (b) our Cookie Settings, or (c) by broadcasting a Global Privacy Control (GPC) signal, which we honor automatically.
• Right to Limit Use of Sensitive Information: we do not use or disclose sensitive personal information beyond the purposes permitted by the CCPA, so no separate limitation request is required.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights.
• Authorized Agents: you may use an authorized agent to submit a request on your behalf, subject to verification.

Response times. We honor requests to opt out of the sale or sharing of personal information as soon as feasibly possible and within 15 business days. For requests to know, delete, or correct, we respond to verifiable requests within 45 days (we may extend by an additional 45 days when reasonably necessary, with notice).

How to submit a request. Visit your Privacy & Data Controls, use the Do Not Sell or Share page, or email privacy@furnituredepartment.com.

Right to appeal. If we decline to take action on your request, you may appeal our decision by replying to our response or contacting us at privacy@furnituredepartment.com. We will inform you in writing of any action taken or not taken in response to the appeal.

7.3 Exercising Your Rights

To exercise any of these rights, please visit your Account Settings or contact us at privacy@furnituredepartment.com. We will respond to your request within 30 days.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

Account Data: Retained while your account is active, plus 3 years after account closure
Order History: Retained for 7 years for tax and accounting purposes
Marketing Data: Retained until you unsubscribe or 2 years of inactivity

9. Children's Privacy

Our services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@furnituredepartment.com.

10. International Data Transfers

Our services are directed to customers in the United States, and your information is stored and processed in the United States. If you access our services from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those in your jurisdiction. We maintain appropriate safeguards to protect your data in accordance with this Privacy Policy and applicable law.

Data Processing Location: United States

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes

Your continued use of our services after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: