Privacy Policy

DIRECT by DUNBAR | Last updated: October 6, 2026

1. About this policy

DIRECT by DUNBAR, available at directbydunbar.com, is operated by DUNBAR Furniture, LLC (“we,” “us,” or “our”). We are responsible for the personal information we collect for the purposes described in this policy. Our website uses Odoo Online. This Privacy Policy explains how we handle information collected through the website, its AI features, and related customer inquiries and transactions.

For privacy questions or requests, email service@collectdunbar.com with the subject “Privacy Request.” You may also use the Contact Us page on our website.

2. Information we collect

Information you provide. We collect information you submit when you contact us, discuss a project, request recommendations or a quote, or request an account. Account requests require your name, email address, and company name. Other information may include your telephone number, product interests, project specifications, delivery requirements, and correspondence. Requesting an account or making an inquiry does not subscribe you to marketing.

AI interactions. When you use our AI features, we collect your messages, the responses generated, and relevant conversation or session information. If an upload feature is made available and you choose to use it, we will also process the images or documents you submit to respond to your request.

Technical and visitor information. We use Odoo visitor tracking to understand website visits and interactions, help manage inquiries, and improve the website. Information may include pages visited, timestamps, session or visitor identifiers, referring pages, and browser or device details. Website and security services may also process IP addresses and diagnostic logs. Where an interaction identifies you, related information may be associated with your inquiry or customer record.

Order and project information. If you discuss a purchase or project with our team, we may collect the product selections, quote details, delivery requirements, and other information needed to handle your inquiry or order. Our website does not currently accept online payments.

3. How we use information

We use information to operate our website; answer product questions; recommend furniture based on the preferences or project details you provide; collect project requirements; prepare quotes; create and manage customer inquiries; and provide customer service. Where an inquiry leads to an order, we also use relevant information to handle the order and arrange delivery.

We also use information to maintain and improve website functionality, investigate technical issues, prevent fraud and misuse, protect our services, resolve disputes, and meet legal, tax, and accounting obligations.

We send marketing communications only if you opt in. Providing information through an inquiry, account request, or AI chat does not by itself constitute a marketing opt-in. You may withdraw your marketing consent at any time.

4. Odoo AI functionality

Our website uses Odoo’s AI functionality powered by Google Gemini to answer questions, recommend furniture, collect project details, assist with quotes, and create customer inquiries. Your messages and relevant conversation context may be transmitted through Odoo to Google for processing. Relevant information from configured documents, information sources, or tools may also be included to generate a response.

Google’s Gemini service and Odoo process information under the applicable service arrangements and privacy terms. Any temporary processing or provider logs are separate from the conversations we save in our Odoo database. Our six-month chat retention period applies to our retained records and does not define the retention practices of every service provider.

We save AI conversations in Odoo to handle inquiries and provide customer service. Conversations may be accessed by authorized personnel for those purposes. Please do not submit passwords, payment-card numbers, government identification numbers, or sensitive or confidential information that is unnecessary for your inquiry. Only submit information about others if you are authorized to do so.

AI responses may be inaccurate or incomplete. Please confirm product specifications, pricing, availability, lead times, and quote or order details with our team before relying on them. You may request human assistance or review of an AI-assisted recommendation or quote by emailing service@collectdunbar.com.

5. Cloudflare Turnstile

We use Cloudflare Turnstile to help distinguish human visitors from automated bots and protect our website and forms against spam, abuse, and malicious activity.

Turnstile processes technical signals such as IP addresses, browser information, connection characteristics, and information identifying the website where the check occurs. Cloudflare uses these signals to provide bot detection and blocking on our behalf and to improve its bot-detection capabilities under its own privacy disclosures.

Turnstile pre-clearance is enabled. After a successful check, Cloudflare issues a security cookie called cf_clearance to record that your browser has passed the verification and reduce repeated challenges. Its validity depends on our Cloudflare security configuration. It is used for security verification, rather than marketing.

6. Cookies and similar technologies

Our website uses cookies and similar technologies for website operation, session management, preferences, Odoo visitor tracking, and security. We display a cookie banner. Necessary cookies support essential website or security functions, including Turnstile pre-clearance. Other tracking technologies are subject to your choices and applicable consent requirements.

Use the choices displayed in our cookie banner to manage optional cookies. You can also manage or delete cookies through your browser settings. Where consent is required for optional tracking, that tracking should occur only with your consent. Deleting cookies may reset your preferences or require a new security check. Blocking essential cookies may affect website functionality. Browser cookie settings do not prevent all processing through server or security logs.

7. How we disclose information

We disclose information to service providers as needed for the functions they perform, including Odoo for website and business-system services, Google for Gemini AI processing, Cloudflare for security, and communication and delivery providers where needed to handle your request or order. We also disclose information to professional advisers where necessary for business operations.

We may disclose information when required by law or valid legal process, or when reasonably necessary to investigate misuse, address security incidents, enforce agreements, or protect rights and property.

Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, sale of business assets, or similar transaction, subject to applicable legal protections. We may also disclose information at your direction or with your consent.

8. How long we retain information

We retain saved AI conversations and inquiries that do not become orders for six months after the last interaction, unless a longer period is required by law or is necessary for an unresolved dispute or security investigation. At the end of this period, these records are deleted or anonymized. If an inquiry becomes an order, information needed for the order becomes part of our customer and transaction records and may be retained longer for fulfillment, warranty or customer-service needs, legal requirements, and accounting purposes.

Account-request and account information is retained as needed to handle the request and maintain any resulting account or business relationship. Marketing subscription information is retained while you remain subscribed; limited unsubscribe records may be kept to respect your choice. Technical logs and visitor-tracking records are retained only as needed for their operational, security, or analytical purposes. Service providers apply their own contractual retention rules, and backup copies may remain until removed through the applicable backup cycle.

9. Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

10. Your choices and privacy requests

You can choose whether to provide information through our forms or AI features. Some information may be necessary to respond to a request, complete a transaction, or provide a particular feature.

You can withdraw marketing consent using the unsubscribe link in an email or by contacting service@collectdunbar.com. We may continue communications needed to respond to an inquiry, handle an account request, or manage an order. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Depending on your location and the laws applicable to our business, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent where processing relies on consent; or opt out of certain data uses. These rights are subject to applicable conditions and exceptions.

Email service@collectdunbar.com with the subject “Privacy Request,” describing the action you are requesting and providing enough information to identify the relevant interaction. Do not include sensitive identification documents in your initial message. We may request information necessary to verify your identity or an authorized agent’s authority.

We will respond within the time required by applicable law and will not unlawfully discriminate against you for exercising protected privacy rights. Where an appeal right applies, email the same address with the subject “Privacy Appeal.” Where applicable, you may also complain to your local data-protection authority, including an EU supervisory authority or the UK Information Commissioner’s Office.

11. Legal bases and international processing

For individuals whose information is subject to EU or UK data-protection law, we rely on the following legal bases as applicable: steps taken at your request before entering into a contract, or performance of a contract, for quotes and orders; legitimate interests in responding to business inquiries, administering account requests, providing customer service, and protecting our website, where those interests are not overridden by your rights; consent for opt-in marketing and optional tracking where required; and legal obligations for required records and disclosures. You can object to processing based on legitimate interests and withdraw consent for consent-based processing.

We serve customers globally and operate from the United States. Odoo, Google, and Cloudflare may process information in the United States and other countries where their services operate. Laws in these locations may differ from those in your country. Where transfer safeguards are legally required, appropriate safeguards must apply, such as an applicable adequacy decision or approved contractual safeguards. Contact us for information about the safeguards applicable to your data. Website use alone does not constitute consent to a transfer that requires separate consent.

12. Children’s privacy

Our website is intended for design and trade professionals and other adults seeking furniture and related information. It is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information, please contact us so we can investigate and take appropriate action.

13. Third-party links

Our website may link to third-party websites or services. Their handling of information is governed by their own privacy policies. Please review those policies before providing information to them.

14. Changes to this policy

We may update this policy to reflect changes in our website, services, or practices. We will post the updated version with a revised date and provide additional notice where required by applicable law.

15. Contact us

DUNBAR Furniture, LLC  |  DIRECT by DUNBAR

Website: https://directbydunbar.com

Privacy and customer-service email: service@collectdunbar.com

Please use “Privacy Request” in the subject line for privacy matters.

Service-provider privacy information

Odoo Privacy Policy: https://www.odoo.com/privacy

Odoo AI service disclosures (Ask AI / AI Agents): https://iap.odoo.com/privacy

Cloudflare Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/

Google Gemini API additional terms and data-use information: https://ai.google.dev/gemini-api/terms

Website may use cookies to personalize and facilitate maximum navigation of the User by this site. The User may configure his / her browser to notify and reject the installation of the cookies sent by us. (see Terms of Service)