Privacy Policy

 

1. Scope of Policy

This Privacy Policy governs the collection, use, handling, and protection of personal data gathered when individuals visit our online storefront, explore our indoor furniture collections, place orders, or communicate with us digitally. This policy applies exclusively to our online operations; we do not operate physical retail locations.

2. Information Collection Technical Means: Cookies

When visitors access our online storefront, technical data is gathered automatically using cookies, server log files, and pixel tags. These technologies collect technical identifiers, including Internet Protocol (IP) addresses, browser types and versions, operating system details, referring URLs, access timestamps, and page interaction records. These automated collection methods allow us to maintain session states, deliver dynamic product displays for home furnishings, and monitor server operations.

3. Scope of Information Use and Sharing

Personal information collected (such as customer names, delivery addresses, billing coordinates, email addresses, and payment details) is utilized strictly to fulfill orders, arrange home delivery of furniture items, manage customer service queries, and maintain system stability.

We share data only with designated service entities directly involved in our operational fulfillment process:

  • Logistics and Freight Partners: To transport and deliver indoor furniture to the indicated premises.

  • Payment Processors: To authenticate transactions and prevent fraudulent financial activities. All financial transactions are encrypted through certified financial gateways; we never store full payment card numbers, expiration dates, or CVV security codes on our systems.

  • Cloud Infrastructure Providers: To host our online database securely.

We do not sell, rent, or trade personal information to external commercial parties.

4. Data Storage & Cookies (User Right to Know and Authorization)

Cookies and local storage data are retained directly on your device. We uphold the principle of transparent user authorization:

  • Necessary Cookies: Essential for core functionalities, such as the digital cart and checkout pipeline. These are placed automatically.

  • Analytical and Preference Cookies: Deployed only after your explicit affirmative consent.
    You retain full control over these technologies and can adjust cookie preferences or revoke authorization at any time through your browser settings or our dedicated cookie control banner.

Users possess comprehensive rights regarding their personal records:

  • Access: Request verification and a complete record of data held.

  • Rectification: Request corrections to inaccurate, incomplete, or outdated details.

  • Deletion: Request the permanent removal of records, subject to mandatory document-retention criteria.

  • Withdrawal of Consent: Revoke previously granted consent for optional processing activities at any time without affecting the lawfulness of processing carried out prior to withdrawal.

In accordance with the policies and standards we implement, all data processing activities are grounded in a clear legal basis:

  • Performance of a Contract: Processing is required to execute purchase agreements, process payments, and dispatch indoor furniture to the provided address.

  • Explicit Consent: Processing relies on affirmative consent for newsletter subscriptions and direct marketing communications.

  • Compliance with Legal Obligations: Processing is undertaken to fulfill mandatory statutory reporting, tax filings, financial audits, and regulatory requests.

  • Legitimate Interests: Processing is conducted to maintain store security, detect and prevent fraud, optimize catalog navigation, and enhance overall user satisfaction.

7. Data Security Measures

We implement comprehensive administrative, technical, and physical security safeguards. All communications and transaction channels utilize Secure Sockets Layer / Transport Layer Security (SSL/TLS) encryption protocols. Databases are stored in secure computing environments protected by firewalls, strict role-based access restrictions, and persistent network monitoring.

8. Data Processing and Transmission Outside the European Economic Area (EEA)

Data gathered within the EEA may be transferred to and processed on secure servers located outside the EEA, including facilities in Japan and the United States. To guarantee that personal data receives an adequate level of protection equivalent to standards inside the European Union, we rely on established Standard Contractual Clauses (SCCs) issued by the European Commission or recognized adequacy decisions, supplemented by robust technical encryption measures.

9. United States Data Processing and Safeguards

For residents of the United States, we adhere to state-level consumer privacy requirements:

  • Personal records are handled according to defined business purposes.

  • We do not sell personal data or share it for behavioral advertising across unrelated services.

  • Consumers are entitled to exercise access, correction, deletion, and non-discrimination rights without facing differential pricing or service degradation.

  • All data transmissions across domestic network environments are governed by contractual terms and standard encryption.

10. Data Retention Period

Personal data is retained only for as long as strictly necessary to fulfill the primary objectives for which it was collected:

  • Order and Transaction Records: Maintained for the duration of statutory retention periods mandated for financial, accounting, and tax compliance.

  • Customer Account Data: Kept active until account closure is requested by the user.

  • Communication Logs: Retained for operational auditing and dispute resolution before being permanently purged or anonymized.

11. Exercise of Rights and Complaint Channels

To exercise any statutory privacy rights, users may submit a verifiable request via the contact details provided below. We will verify the requester's identity and provide a substantive reply within thirty (30) days (or within forty-five (45) days where permitted by local administrative frameworks). Users also have the unequivocal right to file an official complaint with their respective supervisory authority or data protection commissioner.

12. Do Not Track (DNT) and Opt-Out Signals

Certain web browsers transmit "Do Not Track" signals. Our online store is configured to recognize automated opt-out preference signals, including the Global Privacy Control (GPC), allowing users to signal their privacy preferences automatically.

Our online store may contain hyperlinks pointing to external websites. We do not oversee the privacy protocols of external platforms, and users are encouraged to review the respective privacy statements of any visited destination.

14. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy in response to business adjustments or changes in the regulatory environment. All updates will be posted on this page.

15. Contact Information

Address: 三田住友不動産三田ツイソビル西館7-4-6, 港区, 東京都 1080073, Japan
Phone: +81 3-5412-8930
Email: info@zenivireastri.com
Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (Central European Time, CET)