Privacy policy
Last updated: 2026
This policy explains what personal data we collect through the iConstruct website, how we use it, and what rights you have over it, in accordance with the General Data Protection Regulation (GDPR).
Data controller
The controller of your data is Cuprolli Manufacturing SRL, Tax ID RO 35671874, registered office at Strada Căprioarei nr. 11, 307200 Ghiroda, Timiș County, Romania. For any question about your personal data, you can write to us at [email protected].
What data we collect
We collect the data you provide directly — name, email, password (stored encrypted, never in readable form), shipping and billing addresses, order history, and messages sent through the contact form. We also use cookies strictly necessary for the shopping cart and authentication to work.
How we use your data
We use your data to create and manage your account, process and confirm orders, communicate about the status of an order, and respond to requests sent through the contact form. We do not use your data for marketing purposes without your explicit consent.
Legal basis
We process your data to perform the contract between us (creating your account, processing orders), based on your consent (for example, for optional communications) and, where applicable, to comply with legal obligations.
Sharing your data
We do not share your data with third parties for marketing purposes. Data may be shared strictly with providers that help us operate the service — for example, our hosting provider or transactional email service — only to the extent necessary for the site to function.
Retention period
We keep your account data for as long as it remains active. Order-related data is kept for the period required by financial and accounting law. A guest visitor's cart is kept for 30 days; an inactive authenticated account has old cart items cleared after 90 days.
Your rights
You have the right to request access to your data, its rectification or deletion, restriction of processing, data portability, and the right to object to processing. You can request an export or deletion of your account at any time, except for data we're legally required to retain (for example, for financial and accounting purposes).
Data security
Passwords are stored encrypted, never in readable form. The connection to the site is secured (HTTPS), and access to personal data is restricted to authorized staff.
Changes to this policy
We may update this policy from time to time. The applicable version is the one published on the site at the time of your visit.