Privacy policy
Last updated:
Courtesy translation: the French version prevails. This policy explains what personal data is processed when you visit swf-wakeboarding.fr, place an order or contact us, why, for how long, and how to exercise your rights.
1. Data controller
The controller of your personal data is Gauthier Etaix, Sole trader (entrepreneur individuel), RCS Rennes 890 750 748, 3 Allée de la Goupillais, 35200 Rennes, France. Contact: swf.serviceclient@gmail.com.
This policy is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and French Law no. 78-17 of 6 January 1978 on information technology, data files and civil liberties.
2. Data collected, purposes, legal bases and retention periods
We only collect the data needed for the purposes below.
| Processing | Data | Purpose and legal basis | Retention period |
|---|---|---|---|
| Order and payment | Name, delivery address, email address, country, amount and order number (collected via the Stripe payment page). No phone number is collected. | To process, make, ship and track your order. Legal bases: performance of the contract; legal obligation (accounting). | 10 years (accounting records, article L123-22 of the French Commercial Code) |
| Contact form | Name, email address, subject, message | To answer your request. Legal basis: legitimate interest (answering messages received). Messages are sent by email and are not stored in a website database. | 3 years maximum after the last exchange |
| Withdrawal declaration | Name, email address, order number, date and time of the request | To record your withdrawal, acknowledge it and keep proof of it. Legal bases: legal obligation (withdrawal function, French Consumer Code) and performance of the contract. | 5 years |
| Security and technical logs | IP address only in irreversibly hashed form, technical error information, rate-limiting counters | To protect the website against abuse, attacks and fraud; to diagnose errors. Legal basis: legitimate interest (security). | 90 days maximum |
| Cart | Cart contents, stored in your browser's local storage (key “swf-cart-v1”) | To keep your cart while you browse. Strictly necessary for the service you request; never sent to our servers before payment. | Until you delete it (emptying the cart or clearing browser data) |
Providing your order data is necessary to enter into and perform the contract: without it, we cannot process your order. Other data is optional.
3. What we do not do
- We do not sell your data.
- We do not send newsletters or marketing messages: there is no sign-up field on the website.
- We make no automated decision producing legal effects concerning you, and do no profiling.
- The website never sees or stores your card numbers: payment is processed by Stripe.
4. Recipients and processors
Your data is accessible to the publisher and to the providers that process it on its behalf, to the extent necessary for their task:
| Provider | Role | Location and transfers |
|---|---|---|
| Stripe Payments Europe Ltd | Online payment (hosted payment page), confirmation receipt | Ireland; transfers outside the European Union may occur, covered by appropriate safeguards |
| Printful | Manufacturing and shipping of orders (receives your name, delivery address, email and the items ordered) | Entities in the European Union and the United States; transfers covered by standard contractual clauses or the Data Privacy Framework, as applicable |
| Vercel Inc. | Website hosting | United States; transfers covered by the Data Privacy Framework and/or standard contractual clauses |
| Supabase | Database (orders: email, amount, delivery country, status; withdrawal declarations; technical logs) | Database hosted in the European Union |
| Resend | Sending the website's emails (contact form, order confirmations, shipping updates, withdrawal acknowledgements) | United States; transfers covered by appropriate safeguards |
Your data may also be disclosed to competent authorities where required by law.
5. Transfers outside the European Union
Some providers are established outside the European Union, notably in the United States. In that case, transfers are covered by an adequacy decision (Data Privacy Framework) where the provider is certified, or by the European Commission's standard contractual clauses, with supplementary measures where needed. You can request information about this at the address given below.
6. Audience measurement and advertising
The website uses no audience-measurement or advertising cookies or trackers. Only items strictly necessary for the website to work are used: see the cookie policy.
7. Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), IP addresses kept only in irreversibly hashed form, restricted access to data, payment delegated to a specialist provider. No measure can, however, guarantee absolute security.
8. Your rights
You have the following rights over your data:
- right of access, rectification and erasure;
- right to restriction of processing and right to data portability;
- right to object, on grounds relating to your particular situation, to processing based on legitimate interest;
- right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- right to set directives on what happens to your data after your death.
To exercise your rights, write to swf.serviceclient@gmail.com. We may ask you to prove your identity if there is reasonable doubt. We reply within one month of receiving your request, extendable by two months for complex or numerous requests.
Some data (for example accounting records) must be kept to meet a legal obligation: erasure can then only take place once the legal retention period has ended.
If, after contacting us, you believe your rights are not being respected, you can lodge a complaint with the CNIL: Commission nationale de l'informatique et des libertés, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
9. Updates to this policy
We may update this policy to reflect legal or technical changes; the version in force is the one published on this page. Last updated: 5 October 2026.