Privacy Policy

I. Scope

This policy covers the processing of data generated during browsing, ordering, payment, returns or exchanges, and communication with customer service. Users under 16 should stop using this website and request deletion of any provided information.

II. Data Collected

Information provided directly by users includes name, contact details, shipping and billing addresses, order details, payment receipts, and after-sales requests.

Technical data may also be automatically collected, such as IP address, browser type, device model, browsing duration, or user-preference cookie settings (with consent).

III. Purpose of Use

Collected data is used for the following purposes:

• Order processing, shipping, and after-sales service.

• Tracking order status and responding to customer service inquiries.

• Meeting tax, accounting, and compliance obligations.

• Improving website functionality and user experience.

Data will not be used for advertising or marketing purposes without explicit user consent.

IV. About Cookies

Cookies may be stored during website access to ensure proper functioning of core features, such as authentication and shopping carts.

Cookies may also store language and display preferences, collect anonymous statistics to improve website performance, and provide content related to user interests with consent.

Browser settings can manage or delete cookies, but disabling some cookies may limit certain website functionalities.

V. Data Security

Data exchanges are protected using TLS encryption.

Data is stored in secure environments with access control and undergoes regular vulnerability assessments and security checks.

Employees receive regular data protection training.

VI. Data Sharing and Cross-Border Transfers

Data may be shared with service providers involved in payments, logistics, or technical support, all of whom are required to adhere to strict confidentiality and security obligations.

When data is transferred outside the European Economic Area (EEA), Standard Contractual Clauses (SCC) or equivalent protective measures are implemented to ensure data security.

VII. Data Retention and Management

Information is retained only as long as necessary to provide services. Order-related data is retained for five years to comply with legal requirements.

In the event of a data breach, affected users will be notified and the incident reported to the ICO as required by law.

VIII. User Rights (UK GDPR)

Users may request access, correction, or deletion of their personal data.

They may also request restrictions on certain processing or object to specific uses.

Users have the right to data portability and may withdraw previously given consent at any time.

Requests can be submitted via commande@designroomz.com, and we will respond within a reasonable timeframe.

IX. Legal Basis

• Contract performance: Processing related to order management and after-sales service.

• Legal obligation: Processing required for tax and accounting compliance.

• Explicit consent: For non-essential cookies and optional services.

• Legitimate interests: Processing necessary for website security, fraud prevention, and service optimization.

X. Data of Minor Users

We do not knowingly collect personal data from users under 16. If such data is unintentionally collected, legal guardians may request correction or deletion.

XI. Policy Updates

This policy may be updated due to legal or technical requirements. Updates will be posted on this page and take effect immediately. Continued use of the website indicates acceptance of the updated version.

XII. Contact Information

Address: PO BOX 10744, FAIRBANKS, AK 99710, US

Phone: +1 (239) 573-1878

Email: commande@designroomz.com

Business Hours: Monday to Friday 9:00–12:30 / 14:00–18:00 (CET)