Legal
Privacy policy
This policy explains what personal data furnely collects, why we collect it, who else sees it, and how to ask us to delete it. We follow the EU General Data Protection Regulation (Regulation 2016/679 — "applicable data protection law") and the French Data Protection Act ("Loi Informatique et Libertés").
Data we collect
When you buy or pre-order
- Name, email, postal address (for shipping)
- Card data — never stored on our servers; processed directly by Stripe
- Order history (what you bought, when)
When you sign up for the waitlist
- Email address
- The page you submitted from (homepage vs PDP)
When you browse the site
- Anonymous analytics through a self-hosted measurement tool — a hashed device identifier, page paths, referrer, browser and OS family, country. No cookies for analytics.
- Crash and error tracking through a self-hosted tool — same hashed identifier, the URL where the error happened, the technical stack trace.
Why we collect it
| Purpose | Legal basis (applicable data protection law Art. 6) |
|---|---|
| Process and ship your order | Performance of the sales contract |
| Send order confirmation and shipping updates | Performance of contract |
| Provide warranty service for the legal warranty period | Performance of contract and legal obligation (EU Directive 2019/771) |
| Send launch and product-development emails to waitlist subscribers | Consent (opt-in via the form; opt-out in every email) |
| Analytics and error tracking | Legitimate interest (improving the product, fixing bugs) |
Who else sees your data
- Stripe Payments Europe Ltd. (Dublin, IE) — card processing.
- Cubyn (Lille, FR) — 3PL that warehouses and ships your order. Receives shipping name and address only.
- Resend (San Francisco, US — SCCs in place) — transactional and waitlist email delivery.
- Cloud provider (Nuremberg, DE) — hosting provider. Data lives on cloud servers.
- Cloudflare, Inc. (San Francisco, US — DPF certified) — CDN and WAF.
We do not share your data with advertisers, data brokers, or any other third party. The list above is exhaustive.
How long we keep it
- Order data: 10 years (French accounting and tax law)
- Waitlist email: until you unsubscribe (one-click in every email)
- Analytics: aggregated after 24 months; raw data deleted after 12 months
Your rights (applicable data protection law articles 15–22)
You can ask us, free of charge, by email at contact@furnely.com, to:
- Confirm what data we hold about you (right of access)
- Correct anything that is wrong (right to rectification)
- Delete your data (right to erasure — subject to the 10-year accounting retention)
- Export your data in a portable format (right to portability)
- Object to processing based on legitimate interest (right to object)
- Restrict processing while we resolve a dispute (right to restriction)
We answer within 30 days. If you are not satisfied, you can complain to the French data-protection authority: competent data protection authority — 3 place de Fontenoy, 75007 Paris, competent data protection authority.fr.
Data controller
Data controller: see the legal imprint. Contact: contact@furnely.com.