Privacy Policy

1. Who we are

The personal data controller for the Furnizo platform is:

• IXIR SOFTWARE SOLUTIONS SRL
• Tax ID (CUI): 46828398
• Trade Register No.: J2022018094406
• Email: office@furnizo.ro
• Phone: +40 729 195 894
• Website: www.furnizo.ro

Furnizo is a marketplace. When you place an order, the supplier handling it may process the data needed for delivery, invoicing and the contractual relationship with you as the seller.

2. What data we collect

Depending on how you use the platform, we may process:

• Account data: name, email, password (stored hashed), communication preferences.
• Identification and billing data: individual or company details (name, tax ID, trade register number, billing address) where you provide them.
• Addresses and contact: delivery addresses, phone, order contact email.
• Order data: products, quantities, amounts, statuses, payment methods chosen at the supplier, notes, documents uploaded by the supplier related to the order.
• Vendor data: store application data, public store data, commercial settings and documents needed for verification.
• Communications: contact form messages, newsletter (if you subscribe), support tickets and related attachments.
• Technical data: IP address, browser/device type, security and error logs, strictly necessary cookies (see the Cookie Policy).
• Cashback: balances, transactions and statuses related to the cashback programme.

We do not intentionally collect special categories of data through the platform’s standard features.

3. Processing purposes

• creating and managing the Furnizo account;
• enabling placement and tracking of marketplace orders;
• sending suppliers the data needed to fulfil an order;
• administering commissions owed by suppliers to Furnizo;
• administering the cashback programme;
• user support, tickets and responses to requests;
• sending operational communications about the account/order;
• newsletter and marketing messages only if you consented;
• platform security, abuse prevention and technical maintenance;
• complying with legal obligations (accounting, tax, responses to authorities when required by law).

4. Legal bases

• Performance of a contract — account, platform orders, cashback, service-related support.
• Legal obligations — keeping records where required by law, responses to authorities.
• Legitimate interest — security, fraud prevention, service stability, internal aggregated analysis without selling your data.
• Consent — newsletter/marketing and other processing for which we asked for explicit consent. You may withdraw it at any time.

5. Recipients

Data may be disclosed, to the extent necessary, to:

• Suppliers involved in an order — for delivery, invoicing and the sale relationship;
• Processors that help us operate the platform (for example hosting/infrastructure, transactional email), under confidentiality obligations;
• Public authorities when required by law.

We do not sell personal data. We do not currently use advertising or analytics services such as Google Analytics / Meta Pixel on the site.

6. Transfers

Data is processed primarily in the European Union / European Economic Area. If a processor stores or accesses data outside the EEA, we will use GDPR safeguards (for example standard contractual clauses) where applicable.

7. Retention

We keep data only as long as needed for the purposes described:

• account data — for the life of the account and a reasonable period after closure if legal duties or disputes remain;
• order and billing data — according to applicable commercial/tax record-keeping periods;
• tickets and correspondence — for the time needed to resolve them and reasonable archiving;
• technical logs — for limited periods needed for security and troubleshooting;
• newsletter — until you unsubscribe or withdraw consent.

8. Security

We apply reasonable technical and organisational measures: controlled access, HTTPS, hashed passwords, environment segregation and incident monitoring. No measure is absolute; please use a strong password and do not share it.

9. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Details are on the GDPR page.

Requests: office@furnizo.ro. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

10. Minors

The platform is intended for commercial/B2B use and persons with full legal capacity. We do not intentionally collect data from minors. If we learn we processed such data without a basis, we will delete it.

11. Changes

We may update this policy. The version and date shown at the start of the document indicate the text in force.

12. Contact

IXIR SOFTWARE SOLUTIONS SRL · office@furnizo.ro · +40 729 195 894 · Contact.