1Who we are
Effective date: October 14, 2026 · Version 1.0
Oriental Sofa is the trading name of Oriental Sofa, registered at New Jersey, USA (Available on request). In this policy, "Oriental Sofa", "we" and "us" mean that company. We are responsible for the personal information described here (in EU and UK law we are the "controller").
Our atelier and team are in Istanbul, Türkiye.
To contact us about privacy, email orientalsofa@gmail.com. The person in charge of protecting personal information at Oriental Sofa is our Owner, reachable at the same address.
Our representative in the European Union for data protection matters is not appointed.
Our representative in the United Kingdom for data protection matters is not appointed.
2What this policy covers
This policy covers orientalsofa.com in English and Arabic, our quote form and majlis planner, and your contact with our team by WhatsApp, email, phone and video call. It also covers what happens to your information when you order.
It does not cover other companies' services, even when you reach them from our site — for example the WhatsApp app or the secure page where you pay. Those companies have their own privacy policies.
3What we collect
3.1 When you ask for a quote or use the planner
- Where the seating will go: country, and state or province; type of space (home, café, hotel and so on); layout (single wall, L-shape, U-shape and similar); wall lengths and the unit you used; seat height; obstacles such as doors, windows and radiators.
- Your preferences: fabric, colors, extras, the date you need it by, and anything you tell us about your budget in your own words.
- Files you choose to send: room photos, short videos, sketches and floor plans. Our form shrinks photos in your browser before upload and removes the location data that phones store inside photo files.
- How to reach you: a first name (a full name is not needed), a WhatsApp number or an email address (at least one), your preferred way of contact and your language.
- For business enquiries: business name, number of branches, opening date, the type of delivery address and whether you need an invoice for your business.
- Your choices on the form: whether you ticked the optional reminder box, the date and time you sent the form, and which version of our privacy notice was shown to you.
The majlis planner works in your browser. It saves your draft plan on your device so you can come back to it; the plan reaches us only if you send it to us (see our Cookie Policy).
3.2 When you write to us or talk to us
When you contact us by WhatsApp, email or phone, we receive what you send: your number or email address, the name shown on your account, your texts, photos, videos and voice notes. During video calls we may look at your room together with you.
3.3 When you order
To make and deliver your order we need the delivery name, address and phone number, the approved layout plan and order details, records of payments you made, and the documents needed for shipping and customs. If you ask for a sample box, we need a postal address.
You pay on a secure page run by our payment provider. We do not receive or store your full card number or security code. We never ask for card numbers, security codes or one-time passcodes by chat, email or phone.
3.4 Information collected automatically
- Website delivery and security: our site is delivered through Cloudflare, which processes your IP address and technical details (such as browser type) to show you the pages and protect the site from attacks. Our own systems do not keep your IP address. To stop abuse of our forms, we keep a scrambled (hashed) value derived from your IP address for 48 hours.
- Country: we use the country that Cloudflare derives from your connection to pre-fill the country field and to note which country an enquiry came from. We do not use precise location.
- Statistics without cookies: we count page views and clicks on our contact buttons (for example "WhatsApp", "email" or "send form") per page and per day. These counts contain no IP address, no device identifier and no cookie. We use Cloudflare Web Analytics, which does not use cookies or local storage and does not fingerprint visitors.
- Spam protection: when our spam check is switched on, a Cloudflare Turnstile check may run when you use the form. It processes technical signals, such as your IP address and browser details, only to tell people and automated programs apart.
3.5 What we do not collect
We do not ask for health information, religious beliefs or other sensitive information, and we ask you not to send it. We do not buy contact lists. We do not use advertising pixels or cross-site tracking.
4Why we use your information and our legal grounds
| Purpose | What we use | Legal ground (EU / UK) |
|---|---|---|
| Plan your seating and prepare your written quote | Room details, files, preferences, contact details | Steps you ask us to take before a contract |
| Talk to you about your enquiry and order | Contact details, what you send us | Steps before a contract; performing the contract |
| Make, ship and deliver your order, and handle returns, repairs and warranty claims | Order, delivery and payment records | Performing the contract |
| Send you a reminder about your plan, if you ticked the optional box | Contact details, plan | Your consent — you can withdraw it at any time |
| Keep our site and forms safe and filter spam | Technical data, hashed IP value | Our legitimate interest in security |
| Keep accounting, tax and customs records | Order and payment records | Legal obligation |
| Improve our service and the information on our site | De-identified or combined information, for example which sizes or fabrics are asked about most often | Our legitimate interest in improving our service |
| Deal with disputes and legal claims | Relevant records | Our legitimate interest in defending legal claims |
Where the law of your country relies on consent (for example in Canada), sending us the form or a message means you agree to the uses in this table that are needed to answer you. You can withdraw that consent at any time; we may then be unable to prepare a quote or complete an order.
Photos of your home: we use them only to plan your layout and quote. We never publish them on our website or social media.
When we improve our site, we work only with information that no longer identifies you. Nothing we publish includes your name, contact details, address or photos.
5Reminders and other messages
We contact you about your enquiry and order because you asked us to. We send a reminder about your plan only if you ticked the optional box on the form. We do not send newsletters or promotional campaigns. Every reminder tells you how to stop further reminders, and you can also reply "stop" on WhatsApp or email.
6Who we share information with
We share only what each party needs:
| Who | Why | Where |
|---|---|---|
| Our web hosting provider | Stores the website and enquiry database | United States |
| Cloudflare | Delivers and protects the site; cookie-free statistics; spam checks | Global network |
| Our email provider | Receives and stores emails to and from our team | Google (Gmail), United States |
| WhatsApp (Meta) | Carries messages if you choose to contact us by WhatsApp | WhatsApp's own terms and privacy policy apply |
| Our payment provider | Runs the secure payment page and processes your payment | Its own privacy policy applies |
| Couriers and freight forwarders | Deliver your order (name, address, phone, parcel details) | Countries on the delivery route |
| Customs brokers and customs authorities | Import and export declarations | Origin and destination countries |
| Professional advisers | Accounting, legal and audit services | United States |
| Authorities and courts | Only when the law requires it | — |
Our service providers may use your information only to provide their service to us. If our business or part of it is ever transferred to another owner, your information may pass to that owner under the same protections.
We do not sell your personal information, and we do not share it for targeted or cross-context behavioral advertising.
7International transfers
Our team works from Türkiye, our website is hosted in United States and some of our service providers are in other countries, including the United States. Your information will therefore be handled outside your own country. Where the law that protects you requires safeguards for this, we use the mechanisms it provides, such as adequacy decisions or standard contractual clauses.
While your information is in another country, the courts, law-enforcement and national-security authorities of that country may be able to access it under their laws.
8How long we keep it
| Information | How long |
|---|---|
| Enquiries that did not lead to an order (contact details, messages, notes) | 24 months — after that we delete your contact details and messages and keep only anonymous statistics (country, type of space, date) |
| Customer records for orders | 24 months; invoices and accounting records for as long as tax law requires |
| Photos, videos and plans you upload | 90 days |
| Sample box postal address | 365 days |
| Messages that our spam check flags | 30 days |
| Server and error logs | 30 days |
| Encrypted backups | Deleted automatically after 7 days |
We keep information longer only when the law requires it or when we need it for a legal claim.
9How we protect it
Our site uses encrypted connections (HTTPS). Only team members who need your enquiry to do their work can open it, and our admin panel requires two-step sign-in. Uploaded files are stored outside the public website, backups are encrypted, and we never store card details. If a security incident puts your information at risk, we will tell you and the authorities where the law requires it.
10Your rights
Whatever country you live in, you can ask us to tell you what we hold about you, to correct it, or to delete it. You do not have to pay to make a request. The rights below depend on where you live.
10.1 European Union, EEA and United Kingdom
You have the right to access your information, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. You can complain to a data protection authority — in the UK the Information Commissioner's Office (ICO), in the EU the authority in the country where you live or work. We would appreciate the chance to resolve your concern first.
10.2 United States
Depending on your state (including California, Colorado, Connecticut, Texas, Virginia and other states with consumer privacy laws), you may have the right to know what personal information we collect and how we use and disclose it, to access it, to correct it, to delete it, and to opt out of its sale, of "sharing" for cross-context behavioral advertising, and of targeted advertising. We do not sell or share personal information and we do not run targeted advertising. We will not treat you differently for using your rights. You may use an authorized agent; we may ask the agent for proof of your permission. If we decline your request, you can appeal by replying to our decision; we will answer your appeal in writing.
In the last 12 months we collected these categories of personal information: identifiers (name, phone number, email, postal address); commercial information (enquiries and orders); internet activity limited to cookie-free page statistics and spam checks; country-level location (not precise geolocation); audio and visual information you choose to send (photos, videos, voice notes); and, for business buyers, professional information (business name and role). We collect it from you, from your device as described in section 3.4, and from our payment provider (payment status). We use it for the purposes in section 4 and disclose it to the service providers in section 6.
Do Not Track and Global Privacy Control: we do not track visitors across other websites and we do not allow other companies to collect information about your browsing on our site over time and across websites. We honor Global Privacy Control signals as a request to opt out of sale and sharing, although we do neither.
10.3 Canada
You can ask to access your personal information and to correct it, and you can withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information. Quebec residents also have the right to have their information transferred to them in a structured, commonly used format and to ask that links to it be removed (de-indexing) where the law allows. We do not make decisions about you based only on automated processing.
10.4 Gulf countries
If you live in the United Arab Emirates, Saudi Arabia or another Gulf country, you can ask us to inform you about how your information is used, to give you access to it, to correct it, to delete it when we no longer need it, and to withdraw your consent. In Saudi Arabia you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).
11How to make a request
Email orientalsofa@gmail.com or write to us at +905510439232. Please tell us what you are asking for. To protect you, we check that the request comes from you — usually by replying to the same phone number or email address you used with us. We answer within the time your law requires: usually within one month in the EU, UK and Gulf countries, 30 days in Canada and 45 days in the United States. If we need more time, we will tell you why.
12Automated checks
An automatic spam check scores form submissions; a submission marked as spam is held for review by our team instead of being answered automatically. We do not make decisions with legal or similarly significant effects on you based only on automated processing.
13Children
Our site and services are for adults. We do not knowingly collect information from children under 16. If you believe a child has sent us information, contact us and we will delete it.
14Changes to this policy
If we change this policy, we will publish the new version on this page with a new effective date. If the change is significant, we will also show a notice on our site, and where the law requires, ask for your consent again.
15Contact
Oriental Sofa · New Jersey, USA · orientalsofa@gmail.com