Privacy
Legal page (draft) — replace placeholders in {BRACES}.
# Privacy Policy
**Last updated:** {LAST_UPDATED_DATE}
This Privacy Policy explains how **{COMPANY_LEGAL_NAME}** ("we") collects, uses, and shares your personal data when you visit or shop on **{BRAND}**.
## 1. Data controller
Controller: {COMPANY_LEGAL_NAME}, {REGISTERED_ADDRESS} — {PRIVACY_EMAIL_OR_SUPPORT_EMAIL}
## 2. What data we collect
- Account data (Supabase auth)
- Order & shipping data (Printful fulfillment)
- Payment status data (Stripe)
- Support communications
- Device/usage data, cookies (see Cookie Notice)
## 3. Purposes & legal bases
We process data to provide the service, fulfill orders, handle support, comply with legal obligations, and improve the site.
## 4. Sharing / processors
Supabase, Stripe, Printful, carriers, and optional analytics/email providers ({ANALYTICS_PROVIDER_PLACEHOLDER}, {EMAIL_PROVIDER_PLACEHOLDER}).
## 5. International transfers
Some providers may process data outside the EEA; appropriate safeguards may apply (e.g., SCCs).
## 6. Retention
Invoices/orders retained for {RETENTION_YEARS} years (tax/accounting).
## 7. Your rights
Access, correction, deletion, objection, portability, withdraw consent. You may complain to CNIL (France).
## 8. Cookies
See Cookie Notice.
Contact: {PRIVACY_EMAIL_OR_SUPPORT_EMAIL}