Privacy Policy

Draft document. The final wording must be reviewed by Blisterr’s legal team before going live.

1. Foreword

[To be completed by Blisterr’s legal team — Blisterr’s commitment to data protection, GDPR compliance, legal basis.]

2. Data controller

[To be completed — Blisterr’s identity, DPO contact details if applicable.]

3. Data collected

[To be completed — categories: identity, account, transactions, user content, technical data (cookies, logs), payment data (Stripe).]

4. Purposes of processing

[To be completed — account management, sale execution, payments, fraud prevention, marketing, product improvement.]

5. Legal bases

[To be completed — performance of the contract, legitimate interest, consent, legal obligation.]

6. Recipients and processors

[To be completed — Stripe (payments), Sendcloud / Mondial Relay (shipping), Brevo (transactional email), Cloudflare (hosting / CDN), analytics providers, competent authorities.]

7. Transfers outside the EU

[To be completed — third countries, standard contractual clauses, level of protection.]

8. Retention period

[To be completed — duration per data category, archiving, deletion.]

9. User rights

[To be completed — access, rectification, erasure, portability, objection, restriction, withdrawal of consent, complaint to the CNIL.]

10. Security

[To be completed — encryption, access controls, logging, incident management.]

11. Cookies

[To be completed — reference to the dedicated Cookie Policy.]

12. Contact

To exercise your rights or for any question, contact us at privacy@blisterr.com.