Privacy & Cookies Policy

Privacy & Cookie Policy

Effective date: April 22, 2025

www.thosay.com

Welcome to ThoSay. We respect your privacy and are committed to protecting your
personal data. This Privacy & Cookie Policy explains how we collect, use,
store, and protect your information, as well as how we use cookies to improve
your browsing experience.

1. Who We Are

This website is operated by ThoSay DESIGN SRL
("ThoSay", "we", "our", or "us"):

• Registered Office: Sat Vetiș, Strada Careiului 11, Satu Mare, Romania
• Trade Register Number: J30/769/2021
• VAT Code: RO44686580
• Email: contact@thosay.com
• Phone: +40 733 065 677

2. What Personal Data We Collect

We collect and process the following types of personal
information:

• Name and surname
• Email address
• Phone number
• Delivery and billing address
• Payment information
• Shopping preferences and order history
• Website interactions and marketing preferences

3. How We Collect Your Data

• Information you provide directly when creating an account or placing an order
• Through cookies and similar technologies
• From newsletter subscriptions and marketing forms (with your consent)
• Automatically via your interaction with our website

4. How We Use Your Data

We process your personal data for:

• Fulfilling and delivering your orders
• Communicating order updates and customer service support
• Sending newsletters and marketing materials (only with your consent)
• Improving our website and services
• Legal, accounting, and tax obligations

Legal basis for processing includes:

• Performance of a contract
• Your explicit consent
• Legal compliance
• Our legitimate interest in improving services

5. Data Retention & Security

We retain your personal data:

• For commercial and legal purposes: up to 10 years
• For marketing purposes: until you withdraw your consent
• For account-related data: until you delete your account

To protect your information, we implement:

• SSL encryption for secure data transfer
• Restricted access to personal data
• Regular data backups
• Updated IT security protocols

6. Your Rights Under GDPR

You have the right to:

• Access your data
• Correct or update your data
• Request deletion ("right to be forgotten")
• Restrict or object to data processing
• Port your data to another provider
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise your rights, email us at contact@thosay.com. We will respond within
30 days.

7. Sharing Your Data

We share your data only with trusted partners necessary for
fulfilling services:

• Payment processors (e.g. card and online payments)
• Courier and logistics services
• Marketing platforms and newsletter services
• IT and web hosting providers

International Transfers

If data is transferred outside the EU/EEA, it is protected by standard contractual clauses and relevant safeguards.

Cookie Policy

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help improve site functionality, personalize content, and analyze user behavior to optimize your experience.

2. What Cookies We Use

• Necessary Cookies – Essential for website operation, such as login or cart
  functionality
• Performance Cookies – Help us analyze how visitors use our site (e.g. Google
  Analytics)
• Functionality Cookies – Remember preferences like language and region
• Marketing Cookies – Track behavior for tailored advertising (used only with your
  consent)

3. Why We Use Cookies

We use cookies to:

• Store items in your shopping cart
• Authenticate users
• Improve website performance and user experience
• Provide personalized content and promotions

Cookies are stored as:

• Session cookies: deleted when browser is closed
• Persistent cookies: stored for up to 2 years
• Marketing cookies: stored up to 13 months (only with consent)

4. How You Can Manage Cookies

You can manage or disable cookies via:

• Our Cookie Preferences Center (shown at first visit)
• Your browser settings (instructions vary by browser)

Note: Disabling cookies may impact some functionalities of the website. Essential cookies cannot be disabled as they are required for site performance.

5. Third-Party Cookies

We may allow trusted third parties to set cookies:

• Google Analytics
• Meta/Facebook Pixel
• Payment processors
• Social media sharing tools
• Marketing automation services

6. Policy Updates

We may update this policy from time to time. All changes will be published on this page with the updated date at the top.

For any concerns or inquiries, please contact us at contact@thosay.com.