This Privacy Policy sets out how sofafold manages, collects, uses, and safeguards personal data obtained from visitors and customers on www.sofafold.com. We operate from Germany and serve customers across Europe and the United States. We are committed to processing personal information in compliance with applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR) and relevant United States privacy regulations.
Data Controller Information
The entity responsible for the collection, processing, and control of your personal data under this Privacy Policy is the brand controller:
- Data Controller: sofafold
- Website: www.sofafold.com
- Official Support Email: access@sofafold.com
- Location: Germany
For any privacy-related inquiries, requests regarding personal records, or data protection rights, please reach out directly to our team via access@sofafold.com.
Information We Collect
We collect personal data necessary to execute purchase agreements, deliver orders, communicate regarding purchases, and maintain standard site functionality.
- Order & Contact Details: Full name, billing address, delivery address, email address, and telephone number.
- Transaction Information: Purchase history, item specifications, order values, and fulfillment records.
- Technical & Browsing Data: IP addresses, browser configuration, device details, and log information collected automatically during website access.
Payment Processing
Payment transactions executed on www.sofafold.com are processed through our payment infrastructure provider, Stripe.
When placing an order, payment details (such as credit card numbers or account authentication data) are transmitted directly to Stripe via encrypted channels. sofafold does not handle, store, or view full payment card numbers or security codes on our servers. The processing of financial credentials is governed by Stripe’s privacy documentation and strict security specifications applicable to financial services.
Legal Bases & Use of Information
We process personal data under the following legal frameworks:
- Contractual Execution: Processing necessary to fulfill orders, handle shipments, manage customer inquiries, and deliver purchased items.
- Legal Obligation: Processing required to comply with statutory accounting, tax, and commercial archiving requirements in Germany and operating jurisdictions.
- Legitimate Interests: Processing required to maintain system stability, prevent unauthorized access, and streamline standard customer operations.
Data Sharing & Third-Party Service Providers
We share personal data strictly with trusted third parties to support operations:
- Logistics & Delivery Partners: Operational transport providers required to fulfill orders to European and US destinations.
- Payment Service Provider: Stripe, for processing transaction payments.
- Technical Infrastructure Providers: Data hosting and technical backend management providers supporting website operations.
We do not sell, rent, or trade personal data to third parties.
Data Retention Period
Personal information is retained only for the duration necessary to satisfy operational purposes, contractual duties, or legal retention obligations:
- Transaction & Commercial Records: Retained for up to ten (10) years in accordance with applicable statutory commercial and tax retention requirements under German and European legislation.
- Customer Inquiry Records: Retained for up to two (2) years following resolution to maintain accurate service history.
- Technical & Log Data: Retained for a limited operational duration to preserve server stability and audit log requirements.
Upon expiry of statutory retention periods, personal records are erased or anonymised.
Your Rights
Subject to statutory provisions under European data protection laws and applicable United States privacy regulations, you have rights regarding your personal records:
- Right of Access: Request copies of your personal data held by sofafold.
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure: Request deletion of your personal data where statutory storage duties no longer apply.
- Right to Restriction of Processing: Request limited handling of your data under specific operational circumstances.
To exercise any of these rights, please submit a request to access@sofafold.com.
Information Security & Data Protection Standards
We maintain physical, technical, and organizational measures to safeguard personal data against unauthorized access, loss, alteration, or disclosure. However, customers acknowledge that no transmission method across the internet can be guaranteed as completely immune to security incidents. We make reasonable endeavors to uphold appropriate industry safeguards across all operating channels.