Privacy Policy

Last updated: 04.06.2025

Heartwood Vintage Furniture S.R.L. (“we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data of our visitors, clients, and partners. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

By using our website or interacting with us, you agree to the terms of this Privacy Policy.

  • “Personal data” means any information relating to an identified or identifiable natural person (“the data subject”), an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier, would be a name, an identification number, location data, an online identifier, or one or more specific elements that are physically, physiologically, genetically, psychically, economically, culturally or socially identifiable.

  • We may collect the following types of personal data when you visit our website, contact us, or make a purchase:

    • Identification data: name, email, phone number

    • Contact and shipping details: address, delivery instructions

    • Purchase information: products ordered, payment method (note: we do not store full card details)

    • Communication data: messages, emails, reviews

    • Technical data: IP address, browser type, device information, cookies, and usage analytics

  • We use your personal data to:

    • Process and deliver your orders

    • Respond to inquiries or messages

    • Manage appointments or visits to our showroom

    • Send order confirmations or delivery updates

    • Improve our website and customer experience

    • Comply with legal and tax obligations

    We do not sell or rent your data. We only share it with trusted service providers (e.g., couriers, payment processors) when necessary to fulfill our services.

  • We collect and process your data only when we have a legal basis to do so:

    • Contractual necessity: to fulfill your orders or provide services

    • Legal obligations: tax, accounting, or regulatory compliance

    • Legitimate interests: improving our services, marketing, or security

    • Consent: for newsletter subscriptions or marketing (you can withdraw this at any time)

    • Service Providers - We may disclose your information to other companies that provide us with services and act as empowered persons, such as the companies that deliver the products, companies that provides our accounting services, companies that assists us in organising promotional campaigns etc. These entities are selected with special care to ensure that they meet the specific privacy protection requirements. These entities have limited capacity to use your information for purposes other than providing us with services.

    • Public Authorities and Law Enforcement - Central or local public authorities, as well as police and other public agencies or institutions will sometimes be able to ask us to provide them with various data, including data that concern you, such as details of payments made by you. These requests may be for a number of purposes, such as checking that our tax obligations are fulfilled, investigating complaints, and preventing or detecting crime, fraud or money laundering.

    • Publicly Available Content - The content you generate through our existing social networking sites such as Facebook or Istagram. You are the one who controls at any time personal data that we can access through the existing settings on the social network in question.

  • Your data is stored securely, and we take reasonable technical and organizational measures to prevent unauthorized access, loss, or misuse.

    • Access is limited to authorized staff and partners

    • Password-protected systems and secure servers are used

    • We keep data only as long as necessary for its purpose

  • We use cookies to enhance your browsing experience and collect anonymous statistics (e.g., through Google Analytics). You can manage or disable cookies in your browser settings.

    By continuing to use our website, you agree to the use of cookies unless you choose to disable them.

  • Under GDPR, you have the right to:

    • Access your personal data

    • Correct or update inaccurate data

    • Request deletion of your data (“right to be forgotten”)

    • Object to or restrict certain types of processing

    • Withdraw consent at any time

    • Lodge a complaint with the Romanian Data Protection Authority (ANSPDCP)

    To exercise your rights, contact us at shop@heartwood.ro.

  • Company Name: Heartwood Vintage Furniture S.R.L.
    Headquarters: Str. Doctor Stefan Capsa, Nr.10, Cam.1, Et.1, Sector 5, Jud. Bucuresti
    CUI: RO42274060
    Company Registration Number: J40/2222/2020

    Email: shop@heartwood.ro