Privacy Policy

WHO WE ARE

Planet Furniture operates this furniture storefront website from Garland, Texas, United States.

Business address: 3178 Lavon Dr. Suite #102, Garland, TX 75040

For privacy-related questions, call +1 (972) 750-0623 or use the contact form at /en/contact/. Additional business hours and contact details appear on the Contact page and site footer when configured in admin settings.

INFORMATION WE COLLECT

ORDER / CHECKOUT INFORMATION

• Name (required)
• Phone number (required)
• City (optional)
• Street address (optional)
• Order notes (optional)
• Cart items — product IDs, optional variant IDs and quantities (required)

Prices and totals are calculated on our servers from our product database. The checkout form does not send prices from your browser for final order processing.

Order data is stored in our Cloudflare D1 database (orders, order_items and related records). If you open WhatsApp after placing an order, we may record a timeline event indicating that WhatsApp was opened, linked to your order number.

CONTACT / INQUIRY INFORMATION

• Full name (required)
• Phone number (required)
• Message (optional)
• Inquiry type / service topic (optional)

The Contact form on the storefront does not include an email field. Data is stored in our D1 leads table. If you open WhatsApp from a contact submission, we may update lead status and record when WhatsApp was opened.

REVIEW SUBMISSIONS

• Name (required)
• City (required)
• Rating (required)
• Message (required)
• Category / service type (required on the storefront)
• Photo upload (optional)

Reviews are stored in D1 with status pending until approved by an administrator. Optional photos may be stored in Cloudflare R2 under a reviews/ path.

The review form on the storefront does not collect phone or email.

BROWSER STORAGE ON YOUR DEVICE

• Shopping cart contents
• Saved favorites
• A pseudonymous analytics visitor identifier used for first-party analytics and optional checkout correlation

Cart and favorites are not stored on our servers unless you submit an order or otherwise provide information through a form.

FIRST-PARTY ANALYTICS

The site collects first-party usage data sent to /api/analytics/events and stored in D1 (analytics_events). This may include a pseudonymous visitor ID, a hashed IP address, browser user-agent string, page URL/path, locale, product or search context where applicable and UTM parameters when present in the URL. Event types include page views, product views, category views, searches, cart actions, checkout steps and similar storefront interactions.

PUSH NOTIFICATIONS (IF OFFERED)

If you opt in to web push notifications, the site may store a push subscription (endpoint and encryption keys), locale, user agent and device type in D1 (push_subscriptions).

WHAT WE DO NOT COLLECT THROUGH THESE FORMS

• There is no newsletter or email signup form on the site.
• There is no customer account registration or login for shoppers.
• The checkout flow does not collect credit or debit card numbers, CVV or billing card details.
• There is no live payment gateway integration in the current codebase.

COOKIES AND SIMILAR TECHNOLOGIES

Admin area — Access to the private admin dashboard uses an HttpOnly session cookie (auth_session) for authenticated administrators only.

Storefront — The public storefront does not set shopping or analytics data via document.cookie in application code. Cart, favorites and the analytics visitor ID use localStorage in the browser.

Third-party analytics and advertising scripts — Google Analytics 4, Meta (Facebook) Pixel and TikTok Pixel load only when the corresponding public environment IDs are configured. In the current production configuration, these third-party pixels are not enabled. If enabled in the future, those services may use cookies or similar technologies according to their own policies.

The site does not currently display a separate cookie consent banner on the storefront.

Spam prevention — Forms such as checkout, contact and reviews may use Cloudflare Turnstile when a site key is configured.

HOW WE USE INFORMATION

• Processing and managing order requests submitted through the site
• Responding to contact inquiries and leads
• Moderating and publishing approved customer reviews
• Operating first-party analytics to understand site usage
• Helping prevent spam and abuse (rate limiting and Turnstile, when configured)
• Sending optional web push notifications to users who opt in
• Notifying internal staff of new orders via configured channels (for example, Telegram when configured)

We do not use order, contact or review submissions for separate marketing purposes. The storefront does not currently provide a newsletter signup or other marketing opt-in mechanism.

WHERE INFORMATION IS STORED

• Cloudflare D1 — primary application database (orders, leads, reviews, products, CMS content, analytics events, rate-limit records, push subscriptions and business settings)
• Cloudflare R2 — object storage for images, including optional review uploads and CMS/product assets
• Cloudflare Pages — website hosting
• Your browser — cart, favorites and analytics visitor ID in localStorage

These providers process information as part of hosting and operating the website. We have not separately verified data processing agreements for every provider listed above.

SHARING WITH THIRD PARTIES

• WhatsApp (wa.me) — when you choose to open WhatsApp for order coordination or customer contact after form submission
• Google Maps — embedded map or external map link when configured in business settings
• Google Reviews — external link when configured
• Cloudflare (Turnstile, D1, R2, Pages) — hosting, storage, database and bot challenge when configured
• Google Analytics 4 — only when a public GA4 ID is configured (not enabled in current production)
• Meta Pixel — only when a public Meta Pixel ID is configured (not enabled in current production)
• TikTok Pixel — only when a public TikTok Pixel ID is configured (not enabled in current production)
• Telegram — optional internal new-order notifications when configured
• Web Push (VAPID) — optional browser push notifications when configured

When you choose to open WhatsApp, you leave the site and are subject to WhatsApp's terms and privacy practices.

DATA RETENTION AND DELETION

Planet Furniture retains personal information only as long as reasonably necessary for purposes such as order and request fulfillment, customer service, transaction and business records, accounting, fraud prevention and security, compliance with legal obligations and dispute handling. We delete or anonymize information when it is no longer reasonably necessary for those purposes, subject to applicable legal and business record requirements.

Order, lead and review records are stored in our database and may be viewed, updated or deleted by authorized administrators through the private admin dashboard. There is no automated self-service delete-my-data tool for storefront visitors in the current codebase.

When an administrator deletes a review with an uploaded image, the system may attempt to remove the associated file from R2 storage.

To request access, correction or deletion of personal information you have provided, contact Planet Furniture at +1 (972) 750-0623 or /en/contact/. We may need to verify your identity and may retain certain information where required by law or legitimate business needs.

SECURITY MEASURES

• Server-side validation of orders, prices and stock
• Rate limiting on sensitive API routes (orders, leads, reviews, login, analytics, push)
• Cloudflare Turnstile on selected forms when configured
• Upload restrictions (file type, size and allowed storage paths) for review and admin image uploads
• Admin API protection and role-based access for the private admin area

No method of transmission or storage is completely secure. While we use reasonable administrative and technical measures, we cannot guarantee absolute security.

CHILDREN'S PRIVACY

This storefront is not directed to children and Planet Furniture does not knowingly collect personal information from children through the storefront. If you believe a child has submitted personal information through the site, please contact us at +1 (972) 750-0623 or /en/contact/.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The last updated date below will be revised when changes are published.

Last Updated: August 28, 2026

CONTACT US

For privacy-related questions, contact Planet Furniture by phone at +1 (972) 750-0623 or via the contact form at /en/contact/.