Privacy policy

Last updated: 2026

This policy explains what personal data we collect through the iConstruct website, how we use it, and what rights you have over it, in accordance with the General Data Protection Regulation (GDPR).

Data controller

The controller of your data is Cuprolli Manufacturing SRL, Tax ID RO 35671874, registered office at Strada Căprioarei nr. 11, 307200 Ghiroda, Timiș County, Romania. For any question about your personal data, you can write to us at [email protected].

What data we collect

We collect the data you provide directly — name, email, password (stored encrypted, never in readable form), shipping and billing addresses, order history, and messages sent through the contact form. We also use cookies strictly necessary for the shopping cart and authentication to work.

How we use your data

We use your data to create and manage your account, process and confirm orders, communicate about the status of an order, and respond to requests sent through the contact form. We do not use your data for marketing purposes without your explicit consent.

Legal basis

We process your data to perform the contract between us (creating your account, processing orders), based on your consent (for example, for optional communications) and, where applicable, to comply with legal obligations.

Sharing your data

We do not share your data with third parties for marketing purposes. Data may be shared strictly with providers that help us operate the service — for example, our hosting provider or transactional email service — only to the extent necessary for the site to function.

Retention period

We keep your account data for as long as it remains active. Order-related data is kept for the period required by financial and accounting law. A guest visitor's cart is kept for 30 days; an inactive authenticated account has old cart items cleared after 90 days.

Your rights

You have the right to request access to your data, its rectification or deletion, restriction of processing, data portability, and the right to object to processing. You can request an export or deletion of your account at any time, except for data we're legally required to retain (for example, for financial and accounting purposes).

Data security

Passwords are stored encrypted, never in readable form. The connection to the site is secured (HTTPS), and access to personal data is restricted to authorized staff.

Changes to this policy

We may update this policy from time to time. The applicable version is the one published on the site at the time of your visit.