Data controller: Pocabase, [À COMPLÉTER : adresse du siège] — contact@pocabase.com.
Data collected
When ordering: name, shipping address, e-mail, phone, order contents, Stripe payment identifiers (never the card number). When browsing: anonymised audience measurement (Umami, cookie-free), technical logs. The cart is stored in your browser (localStorage) and only sent to us at checkout.
Purposes and legal bases
Performance of the contract (order processing and delivery, invoicing, customer service); legal obligation (invoices kept for 10 years); legitimate interest (security, anonymous statistics). No marketing without consent.
Recipients
Stripe (payment), Resend (transactional e-mails), our suppliers and carriers (name and address, strictly for delivery), the hosting provider. Some suppliers are located outside the EU (South Korea, United States): transfers are covered by the European Commission's standard contractual clauses.
Retention
Order data and invoices: 10 years (accounting obligation). Tracking access: duration of the commercial relationship + 3 years. Technical logs: 12 months.
Your rights
Access, rectification, erasure, restriction, portability, objection: write to contact@pocabase.com. You may lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.