Draft — to be checked by a lawyer before launch.
Privacy policy
Controller
[Company name], [Street and number], [Postcode] [City], Belgium, hello@mitama.store.
What we collect and why
- Orders: email, name, shipping address, what you bought — to make and deliver your order and to meet accounting obligations (contract; legal obligation).
- Payment: handled by Stripe; we receive a confirmation, never your card details.
- Newsletter: your email, only with your consent, confirmed by email; unsubscribe any time.
- Pre-orders: your email and the pieces you pre-ordered, only with your consent, confirmed by email — used to tell you when the shop opens. Cancel any time from the link in the email.
- Security: short-lived technical data (e.g. IP address) to prevent abuse and fraud (legitimate interest).
Who processes data for us
Stripe (payments), Gelato (production and shipping — receives your name, address and email), Resend (email delivery), Vercel (hosting) and our database provider. [Lawyer: list the data processing agreements and any transfers outside the EU.]
How long
Order data for as long as accounting law requires [period to confirm with your accountant]; newsletter data until you unsubscribe; pre-orders until [3 months] after launch.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, by writing to hello@mitama.store. You can also complain to the Belgian Data Protection Authority (dataprotectionauthority.be).
Cookies
See cookies.