Privacy Policy

Introduction

Allura Design is an interior design studio in Bucharest, Romania. For the personal data described here, Allura Design is the data controller.

Address: Șoseaua Viilor 55A, Lot 4, Scara 4, Ap. 11, 050152, Sector 5, București. Email for data protection requests: office@alluradesign.com.

We process personal data under Regulation (EU) 2016/679 (GDPR), Romanian Law 190/2018 and Law 506/2004 on privacy in electronic communications, and the decisions of the Romanian supervisory authority (ANSPDCP).

This policy covers this website and the requests you send us through it, by email or by phone. It does not cover third-party websites we link to, such as social networks or our furniture partner’s website.

What Data We Process, for What Purpose and on What Basis

Our hosting provider keeps server logs: IP address, device and browser type, pages requested and timestamps. We use them for security and to diagnose errors. Legal basis: legitimate interest. Kept for up to 12 months.

When you send the booking form, we receive your name, your phone number or email address, the project type, the consultation type, your preferred date and time, your message and, where applicable, the service you asked about. We use them to answer you, schedule the consultation and prepare an offer. Legal basis: steps taken at your request before entering into a contract, and legitimate interest for general enquiries. Kept for 3 years from our last interaction or, if a contract follows, for the contract term plus the limitation period.

Before sending the form you confirm that you have read this policy and agree to this use of your data. We record the date and time of that confirmation together with your request.

To limit automated abuse of the form, your IP address is used in hashed form, for up to one hour, to count repeated submissions.

The assistant works in your browser. The room, size, light and palette you choose, and the PDF it generates, stay on your device. We receive the project code and a one-line summary of your choices only if you then send the booking form.

Identity and contact details of the people we sign or carry out contracts with, delivery and site addresses, invoicing and payment data. We use them to perform the contract, keep accounting records and handle any claims. Legal basis: contract, legal obligation and legitimate interest. Kept for the contract term, then for 10 years for financial and accounting records.

If you write or call us directly, or message us on Facebook or Pinterest, we use your contact details and the content of the conversation to reply. The same basis and retention period apply as for consultation requests. Social networks process your data under their own policies.

We do not ask for special categories of data, such as health data, and we make no decisions that produce legal effects by automated means alone. The assistant’s suggestions are design ideas, not decisions about you.

To Whom We Disclose Data

Access is limited to the people at Allura Design who need the data to answer you or deliver your project. Beyond them, data may be disclosed to:

• Service providers acting as our processors under Article 28 GDPR: website hosting, email and IT support.
• Partners involved in your project, such as the furniture manufacturer and installation teams, only as far as needed to prepare an offer or carry out the work.
• Accountants, lawyers and other professional advisers bound by confidentiality.
• Public authorities, when the law requires it.

We do not sell or rent personal data.

Transfers Outside the EEA

We prefer providers that store data in the European Union. If a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. You can ask us for details at office@alluradesign.com.

How Long We Keep Data

We keep personal data only for as long as the purposes above require, then delete or anonymise it. Periods may be longer where the law requires it or where we need the data to establish, exercise or defend legal claims.

How We Protect Data

We use encrypted connections (HTTPS), limit access to the people who need it, keep our software up to date and choose providers that offer appropriate security.

If a personal data breach is likely to put your rights at risk, we notify ANSPDCP within 72 hours and inform you directly where the risk is high.

Your Rights

Under the GDPR you have the right to:

• access your data and receive a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict the processing;
• receive your data in a portable format;
• object to processing based on legitimate interest;
• withdraw your consent at any time, where processing is based on consent;
• lodge a complaint with ANSPDCP or go to court.

Send requests to office@alluradesign.com or by post to the address above, marked “Data Protection”. We reply within one month; for complex requests the law allows an extension of up to two further months. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.

Minors

Our services are addressed to adults. We do not knowingly collect data from anyone under 16; if we find such data, we delete it.

Cookies

How this website uses cookies is described in our Cookie Policy.

Updates

We may update this policy when our processing, our providers or the law change. The current version and its date are always published on this page.

Contact

Controller: Allura Design, Șoseaua Viilor 55A, Lot 4, Scara 4, Ap. 11, 050152, Sector 5, București. Email: office@alluradesign.com. Phone: +40 733 428 101.

Supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, www.dataprotection.ro, anspdcp@dataprotection.ro.

This version takes effect on 8 October 2026.