Data protection

Last updated: December 5, 2025

EcoFurn Store operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the “Services”). EcoFurn Store is powered by Shopify technology, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, or make purchases or other transactions through our Services, or otherwise communicate with us. If there is a conflict between our Terms of Use and this Privacy Policy, this Privacy Policy will govern the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using any of the Services, you confirm that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal data we collect or process

When we use the term "personal information", we mean information that identifies you or another person or that can be reasonably associated with you or another person. Personal information does not include information that has been collected anonymously or has been de-identified so that it cannot be used to identify or reasonably associate you with you. We may collect or process the following categories of personal information, including inferences drawn from personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact information, including name, address, billing address, shipping address, telephone number, and email address.
• Financial information, including credit card, debit card and bank account numbers, payment card details, financial account details, payment transaction details, payment information and other payment transaction confirmation details.
• Account information, including username, password, security questions, preferences, and settings.
• Payment transaction information, including products you view, add to cart, add to wishlist or purchase, return, exchange or cancel, and your past transactions.
• Communication with us, including information you provide in communications with us, for example, when you submit a customer support inquiry.
• Device information, including information about the device, browser or network connection you are using, your IP address and other personal identifiers.
• Usage Data, including information about your interaction with the Services, such as how and when you interact with or navigate the Services.

Sources of personal data

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, interact with us, or otherwise provide us with your personal information;
• Automatically through the Services, including from your device when you use our products or services or visit our websites and through the use of cookies and similar technologies;
• Through our service providers, including when we use them to use certain technology and when they collect or process your personal data on our behalf; and
• From our Shopify Partners or other third parties.

How we use your personal data

Depending on how you interact with us or which Service you use, we may use your personal information for the following purposes:

• Providing, customizing and improving the Services We use your personal information to provide you with the Services, including fulfilling our contract with you, processing your payments, delivering your orders, remembering your preferences and products of interest, sending you notifications related to your account, processing purchases, returns, exchanges and other transactions, creating, maintaining and otherwise administering your account, arranging deliveries, facilitating possible returns and exchanges, enabling you to leave reviews and creating a shopping experience tailored to you, such as recommending products related to your purchases. This may include using your personal information to better customize and improve the Services.
• Marketing and Advertising We use your personal information for marketing and advertising purposes, such as sending you marketing, advertising and promotional communications by email, text message or postal mail, and showing you online advertisements for products and services on the Services or other websites, including based on products you have previously purchased or added to your shopping cart and other past activity on the Services.
• Security and Fraud Prevention We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or take action regarding potentially fraudulent, illegal, dangerous, or malicious activity, protect public safety, and secure our services. If you choose to use the Services and register for an account, you are responsible for keeping your account login credentials secure. We strongly recommend that you do not share your username, password, and other login information with anyone else.
• Communicating with you We use your personal information to provide you with customer support, respond to you, provide you with efficient services, and maintain our business relationship with you.
• Legal Reasons We use your personal information to comply with applicable laws or respond to legitimate legal process, including requests from law enforcement or government agencies, to investigate or participate in a civil investigation, potential or actual litigation or other controversial legal proceedings, or to investigate potential violations of our terms or policies.

How we disclose your personal information

In certain circumstances, we may disclose your personal information to third parties for lawful purposes in accordance with this Privacy Policy. Such circumstances may include the following:

• To Shopify, vendors, and other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, distribution, and deliveries).
• To business and marketing partners to provide you with marketing services and advertisements. For example, we use Shopify to support personalized advertising with third parties based on your online interactions with different merchants and websites. Our business and marketing partners use information in accordance with their own privacy policies. Depending on where you live, you may have the right to ask us not to share information about you to serve you targeted advertising and marketing based on your online interactions with different merchants and websites. You can exercise your rights and opt out of these uses here
• When you direct, request, or otherwise consent to the disclosure of certain information to third parties, such as to ship products to you or through your use of social media widgets or login integrations.
• With our partners or otherwise within our group of companies.
• In connection with business transactions, such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), enforce applicable terms of use or policies, and protect or defend the Services, our rights, and the rights of our users or others.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data about your use of the Services in order to provide and improve the Services to you. Information that you submit to the Services is sent and shared with Shopify and third parties that may be located in countries other than your country of residence in order to provide and improve the Services to you. We also use certain Shopify enhanced features, which include information obtained from your interactions with our Store, other merchants, and Shopify, to help protect, grow, and improve our business. In order to provide these enhanced features, Shopify may use personal data collected from your interactions with our Store, other merchants, and Shopify. In these cases, Shopify is responsible for processing your personal data, including responding to your requests and exercising the rights you have regarding the use of your personal data for these purposes. For more information about Shopify's use of your personal data and any rights you may have, please see Shopify's Consumer Privacy Policy . Depending on where you live, you may have certain rights regarding your personal information, as outlined here in the Shopify Privacy Policy link .

Third-party websites and links

The Services may contain links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms of use. We do not guarantee the privacy or security of such sites and are not responsible for the accuracy, completeness or reliability of the information found on such sites. Information that you provide in public or semi-public places, including information that you share on third-party social media platforms, may also be visible to other users of the Services and/or users of such third-party platforms without any restriction on our or any third party’s ability to use it. Our inclusion of such links does not in itself constitute an endorsement of the content of such platforms or their owners or operators, other than as otherwise disclosed in the Services.

Information about children

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided us with personal information, you may contact us using the contact information provided below to request deletion of that personal information. As of the effective date of this Privacy Policy, we have no actual knowledge that we would “share” or “sell” (as those terms are defined in applicable law) the personal information of individuals under the age of 16.

Security and retention of your information

Please note that no security measures are perfect or impenetrable, and we cannot guarantee “complete security.” In addition, the information you send to us may not be protected during transmission. We recommend that you do not use non-secure channels to transmit sensitive or confidential information to us.

The length of time we retain your personal information depends on various factors, such as whether we need the information to maintain your account, provide the Services to you, comply with our legal obligations, resolve disputes, or enforce applicable agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may only apply in certain circumstances, and in some cases we may refuse your request to the extent permitted by law.

• Right to access/know You may have the right to request access to the personal information we hold about you.
• Right to erasure You may have the right to ask us to erase personal data we hold about you.
• Right to rectification You may have the right to ask us to correct inaccurate personal data we hold about you.
• Right to portability You may have the right to obtain a copy of the personal data we hold about you and to ask us to transfer it to a third party in certain circumstances and subject to certain exceptions.
• Managing your communication preferences We may send you promotional emails, and you can opt out of receiving these at any time by using the unsubscribe option that appears in the emails we send you. If you opt out, we may still send you non-promotional emails, such as emails about your account or orders you have placed.

You may exercise any of these rights as set out in the Services or by contacting us using the contact details below. For more information about how Shopify uses your personal information and what rights you may have, including rights relating to the information Shopify processes, please visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising these rights. We may need to verify your identity before fulfilling your requests as permitted or required by applicable law. Subject to applicable law, you may designate an authorized representative to make requests on your behalf to exercise your rights. Before we accept such a request from a representative, we will require the representative to provide proof that you have authorized them to act on your behalf, and we may need to require you to verify your identity directly with us. We will respond to your request promptly as required by applicable law.

Complaints

If you have any complaints about how we process your personal data, please contact us using the contact details below. Depending on your location, you may have the right to object to our decision by contacting us using the contact details below or by lodging a complaint with your local data protection authority. For the European Economic Area, you can find a list of the responsible data protection authorities here .

International transfers

Please note that we may transfer, store and process your personal data outside of your country of residence.

If we transfer your personal data outside the European Economic Area or the United Kingdom, we will follow recognised transfer mechanisms, such as the European Commission's Model Contractual Clauses or other equivalent agreements, as applicable, published by the competent authority of the United Kingdom, unless the data is transferred to a country that has been determined to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, such as when we change our practices, or for other operational, legal or regulatory reasons. We will post the updated Privacy Policy on this website, update the “Last Updated” date, and provide notice as required by applicable law.

Contact us

If you have any questions about our data protection practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call , send an email to service@ecofurn.eu , or contact us at EcoFurnNet c/o EcoFurn Finland Oy, P.O. Box 111, 04401 Järvenpää. In accordance with applicable data protection laws, we are the controller of your personal data.