Privacy policy

Privacy Policy and Cookie Policy

Last updated: 31 October 2026

1. Who we are

The website www.valeriufurtuna.com is operated by VALERIU FURTUNĂ DESIGN S.R.L., with its registered office at Șoseaua Barajului no. 32, Tulcea, Tulcea County, Romania, registered with the Romanian Trade Register under no. J2022000299369 (EUID: ROONRC.J2022000299369), Unique Registration Code (CUI) 46195334.

Under data protection law, we are the controller of your personal data. For any question or request regarding your data, you can contact us at:

Email: valeriufurtunadesign@gmail.com
Phone: +40 744 325 684

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Romanian Law no. 190/2018 and Romanian Law no. 506/2004 on electronic communications.

2. What data we collect

We only collect the data we need to create and deliver your jewelry, to communicate with you and, with your consent, to show you relevant advertising:

  • Identity and contact details: first and last name, email address, phone number.
  • Delivery and billing details: address, city, country, postal code; for companies, the company name and tax ID.
  • Order details: the products you order, ring size, engravings, design preferences, and any sketches or inspiration photos you choose to send us for made-to-order pieces.
  • Correspondence: messages you send us by email, phone, WhatsApp, the contact form or social media.
  • Technical and usage data: IP address, browser and device type, pages visited, products viewed, items added to the cart and purchases, collected automatically through cookies and similar technologies (pixels, tags), as described in section 9.

We do not have access to your card details. Payments are processed directly by our payment provider (Shopify Payments and its partners) on a secure page. Your card number, expiry date and CVV never reach us and are not stored on our servers.

3. Why we use your data and on what legal basis

  • Processing and delivering your order, making made-to-order pieces and keeping you updated on their progress: performance of our contract with you (Art. 6(1)(b) GDPR).
  • Invoicing and accounting records: compliance with our legal obligations (Art. 6(1)(c) GDPR).
  • Answering questions and requests sent before an order: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Newsletter and news about collections and events: only with your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
  • Website analytics: understanding how the website is used so we can improve it – only with your consent (Art. 6(1)(a) GDPR).
  • Advertising and measuring advertising results: showing you ads for our jewelry on platforms such as Instagram, Facebook and Google, including to people who have visited our website (remarketing), and measuring which ads lead to visits and orders – only with your consent (Art. 6(1)(a) GDPR).
  • Website security, fraud prevention and improving the website: our legitimate interest (Art. 6(1)(f) GDPR).
  • Warranty, returns and defending our rights in case of a dispute: legitimate interest and legal obligations.

Personalised advertising involves a limited form of profiling (for example, showing an ad for a ring you viewed). We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Who we share your data with

We do not sell and will never sell your data. We share it only with the partners we need, and only to the extent necessary:

  • Shopify – the platform our online store runs on (hosting, order processing, payments, emails).
  • Courier companies – within Romania, national courier partners (e.g. Fan Courier, Sameday); for international deliveries, FedEx and UPS. We share your name, address and phone number with them.
  • Partner workshops that make the jewelry – they receive only the technical specifications of the piece (e.g. size, engraving), without your contact details.
  • Advertising and analytics platforms – only if you accept marketing or analytics cookies: Meta Platforms Ireland Ltd. (Facebook, Instagram), Google Ireland Ltd. (Google Ads, Google Analytics) and, where used, TikTok Technology Ltd. They receive technical data about your visit (e.g. pages viewed, products added to the cart, purchases, device identifiers). For the collection and transmission of data through the Meta Pixel, we and Meta are joint controllers; Meta is responsible for its further processing, described in its own privacy policy.
  • Accountants and legal advisers – within the limits of our legal obligations.
  • Public authorities – only when required by law.

5. Transfers outside the EU

Some of our providers (e.g. Shopify, Meta, Google, FedEx, UPS) may process data outside the European Economic Area, including in the United States or Canada. In these cases, transfers are based on an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework, where the provider is certified) or on the Standard Contractual Clauses approved by the Commission. For international deliveries, your delivery details necessarily reach the destination country.

6. How long we keep your data

  • Order and billing data: 10 years, as required by accounting law.
  • Correspondence and design details for made-to-order pieces: for the duration of our relationship and up to 3 years after your last order, for warranty, adjustments, repairs or repeat orders.
  • Newsletter data: until you unsubscribe.
  • Enquiries without an order: up to 1 year from your last message.
  • Cookies and similar technologies: as described in section 9; analytics and marketing cookies are kept for a maximum of 13 months, unless you delete them earlier.

At the end of these periods, the data is deleted or anonymised.

7. Your rights

Under the GDPR, you have the right:

  • to know what data we hold about you and to receive a copy (right of access);
  • to have inaccurate or incomplete data corrected (rectification);
  • to have your data deleted when there is no longer a legal reason to keep it (erasure);
  • to restrict processing;
  • to receive your data in a structured format or have it transferred to another controller (portability);
  • to object to processing based on legitimate interest, and at any time to direct marketing;
  • to withdraw your consent at any time, including for analytics and marketing cookies, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, write to us at valeriufurtunadesign@gmail.com. We will reply within one month.

If you believe your rights have been infringed, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro, 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, Romania – or with the data protection authority in your country of residence.

8. Data security

The website uses an encrypted connection (HTTPS/SSL). Access to customer data is limited to the people who need it to process your order. We only work with providers that offer adequate data protection guarantees.

9. Cookie Policy

Cookies are small text files saved on your device when you visit a website. Similar technologies, such as pixels and tags, work in the same way. They contain no programs and cannot access other information on your device.

We use the following categories:

  • Strictly necessary cookies – set by Shopify for the shopping cart, checkout, security and remembering your cookie preferences. They do not require consent and cannot be disabled, because the store does not work without them.
  • Preference cookies – remember choices such as language and region. They are activated only with your consent.
  • Analytics cookies – help us understand how the website is used (for example, Shopify Analytics or Google Analytics) so we can improve it. They are activated only with your consent.
  • Marketing cookies – set by us and by advertising platforms such as Meta (Meta Pixel), Google (Google Ads) and, where used, TikTok (TikTok Pixel). They allow us to show you relevant ads on these platforms, including after you leave our website, and to measure the results of our campaigns. They are activated only with your consent.

When you first visit the website, a cookie banner lets you accept all cookies, refuse non-essential cookies or choose by category. Until you give your consent, only strictly necessary cookies are used.

You can change or withdraw your consent at any time from the website's cookie banner (“Manage preferences”), or delete and block cookies in your browser settings. You can also manage the ads you see directly in your account settings on Meta (Facebook, Instagram) and Google. Blocking necessary cookies may cause some website features to stop working properly.

10. Children

This website is not intended for people under 16, and we do not knowingly collect data about them.

11. Changes to this policy

We may update this policy when our services or the law change. The current version is always published on this page, with the date of the last update.