privacy.html

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>Privacy Policy</title>
  <link rel="icon" type="image/png" href="common/favicon.png" />
  <link rel="stylesheet" href="common/styles.css">
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link href="https://fonts.googleapis.com/css2?family=Share+Tech+Mono&display=swap" rel="stylesheet">
  <script src="common/autofetch.js"></script>
</head>
<body>
  <div id="header-placeholder"></div>
  <div id="navigation-placeholder"></div>
  
  <main>
    
    <h1>Privacy Policy</h1>
    <p><strong>Effective date:</strong> Ineffective, this is a draft version</p>
    <p><strong>Last updated:</strong> 2025-09-09</p>
    </br>
    
    <section id="who-i-am">
      <h2>1. Who i am</h2>
      <p>Jérémy "Harg" Harris operates a website at https://harg2001.github.io .</p>
      <p><strong>Controller:</strong> Jérémy Harris, Louvain-la-neuve, Belgium.</p>
      <p><strong>Contact:</strong> harg2001+privacy@gmail.com | No Company/VAT Number yet</p><!-- update when possible -->
      <p><strong>Data Protection Officer :</strong> Jérémy Harris, harg2001+privacy@gmail.com</p><!-- change to a dpo@domain address and add mailto tag-->
    </section>

    <section id="scope">
      <h2>2. Scope</h2>
      <p>This policy explains how we (third parties and I) collect, use, disclose, and protect personal data when you browse this website, make purchases in the shop, or otherwise interact with us.</p>
    </section>

    <section id="data-we-collect">
      <h2>3. Personal data collected</h2>
      <h3>3.1 Information you provide</h3>
      <ul>
        <li><strong>Account and orders:</strong> Name, email, billing/shipping address, phone, order details.</li>
        <li><strong>Payments:</strong> I do not store full card details. Payments are processed by third-party providers (Stripe, PayPal, etc.).</li>
        <li><strong>Communications:</strong> Messages sent via contact forms or email, support requests.</li>
        <li><strong>Marketing consents:</strong> Newsletter preferences and consent status.</li>
      </ul>

      <h3>3.2 Information collected automatically</h3>
      <ul>
        <li><strong>Technical data:</strong> IP address, device information, browser type/version, operating system, referral URLs, pages viewed, time/date of visits.</li>
        <li><strong>Cookies and similar technologies:</strong> See “Cookies” section below.</li>
      </ul>

      <h3>3.3 Information from third parties</h3>
      <ul>
        <li><strong>Payment processors:</strong> Limited payment status and fraud signals.</li>
        <li><strong>Analytics/advertising partners:</strong> Aggregated usage and campaign performance data.</li>
        <li><strong>Shipping providers:</strong> Delivery status and tracking updates.</li>
      </ul>
    </section>

    <section id="lawful-bases">
      <h2>4. Legal bases for processing (GDPR)</h2>
      <ul>
        <li><strong>Contract:</strong> To process and fulfill your orders, provide customer service, and manage your account.</li>
        <li><strong>Consent:</strong> For optional marketing emails, non-essential cookies, and certain analytics/advertising activities.</li>
        <li><strong>Legitimate interests:</strong> To secure our services, prevent fraud, improve our site, and protect our legal rights (balanced against your rights).</li>
        <li><strong>Legal obligation:</strong> To comply with tax, bookkeeping, and consumer protection laws.</li>
      </ul>
    </section>

    <section id="how-we-use-data">
      <h2>5. How are used personal datas</h2>
      <ul>
        <li><strong>Orders and delivery:</strong> Process payments, manage shipments, and provide order updates.</li>
        <li><strong>Support:</strong> Respond to messages and resolve issues.</li>
        <li><strong>Site operation:</strong> Maintain and improve functionality, performance, and security.</li>
        <li><strong>Marketing:</strong> Send newsletters and offers if you opted in; you can unsubscribe anytime.</li>
        <li><strong>Compliance and fraud prevention:</strong> Detect, investigate, and prevent fraudulent or illegal activity.</li>
      </ul>
    </section>

    <section id="sharing">
      <h2>6. How are shared personal datas</h2>
      <ul>
        <li><strong>Payment processors:</strong> I share necessary data to complete transactions; they process data under their own privacy policies. (Stripe, PayPal, etc.)</li>
        <li><strong>Shipping and logistics:</strong> Shipping company (To be defined among UPS, DHL, etc.) to deliver your orders and manage returns.</li>
        <li><strong>Analytics and tools:</strong> Analytics service (To be defined), Email service provider (To be defined) for site metrics, communications, and marketing (with consent where required).</li>
        <li><strong>IT and hosting:</strong> Hosting provider (currently GitHub), backups, and security services.</li>
        <li><strong>Legal and compliance:</strong> Where required by law or to protect rights, safety, and property.</li>
        <li><strong>Business transfers:</strong> In connection with mergers, acquisitions, or asset sales, subject to appropriate safeguards.</li>
      </ul>
    </section>

    <section id="cookies">
      <h2>7. Cookies and tracking</h2>
      <p>I use cookies and similar technologies for the purposes below. You can manage preferences via your account page or your browser settings. Disabling certain cookies may affect site functionality.</p>
      <ul>
        <li><strong>Strictly necessary:</strong> Core features such as cart, checkout, account login, and security.</li>
        <li><strong>Performance and analytics:</strong> To measure traffic and improve content (e.g., Analytics services).</li>
        <li><strong>Functional:</strong> Remembering settings like language and region.</li>
        <li><strong>Advertising/retargeting:</strong> To show relevant ads and measure campaigns (used only with consent).</li>
      </ul>
    </section>

    <section id="data-retention">
      <h2>8. Data retention</h2>
      <p>I keep personal data only as long as necessary for the purposes described above:</p>
      <ul>
        <li><strong>Orders and invoices:</strong> Retained for the period required by applicable tax and accounting laws.</li>
        <li><strong>Customer support:</strong> Retained for up to [X months/years] after resolution.</li>
        <li><strong>Marketing:</strong> Retained until you unsubscribe or withdraw consent.</li>
        <li><strong>Analytics:</strong> Retained for up to [X months/years], or as configured with our providers.</li>
      </ul>
    </section>

    <section id="security">
      <h2>9. Security</h2>
      <p>I use appropriate technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure. If you believe your account or data has been compromised, contact me immediately.</p>
    </section>

    <section id="international-transfers">
      <h2>10. International data transfers</h2>
      <p>Where data is transferred outside the European Economic Area (EEA), I rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses, and additional measures where necessary.</p>
    </section>

    <section id="your-rights">
      <h2>11. Your rights under GDPR</h2>
      <p>Subject to conditions and exceptions, you have the right to:</p>
      <ul>
        <li><strong>Access:</strong> Use the account page to request a copy of your personal data.</li>
        <li><strong>Rectification:</strong> Use the account page to correct inaccurate or incomplete data.</li>
        <li><strong>Erasure:</strong> Use the account page to delete your data (“right to be forgotten”).</li>
        <li><strong>Restriction:</strong> Request limited processing of your data.</li>
        <li><strong>Portability:</strong> Use the account page to receive your data in a structured, commonly used, machine‑readable format.</li>
        <li><strong>Objection:</strong> Object to processing based on legitimate interests or direct marketing.</li>
        <li><strong>Withdraw consent:</strong> Where processing is based on consent, you can withdraw it at any time.</li>
      </ul>
      <p>To exercise your rights, contact me at harg2001+privacy@gmail.com. I may need to verify your identity before responding.</p>
      <p>You also have the right to lodge a complaint with the Belgian Data Protection Authority: www.autoriteprotectiondonnees.be | Rue de la Presse 35, 1000 Bruxelles, Belgium.</p>
    </section>

    <section id="childrens-privacy">
      <h2>12. Children’s privacy</h2>
      <p>Our services are not directed to children under 16. I do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact me to delete it.</p>
    </section>

    <section id="third-party-links">
      <h2>13. Third‑party websites</h2>
      <p>Our site may contain links to third‑party websites. I am not responsible for their privacy practices. I encourage you to review their privacy policies.</p>
    </section>

    <section id="changes">
      <h2>14. Changes to this policy</h2>
      <p>I may update this policy from time to time. I will post the new version on this page and update the “Effective date.” If changes are material, I will provide additional notice as required by law.</p>
    </section>

    <section id="contact">
      <h2>15. How to contact me</h2>
      <p>If you have questions about this policy or our data practices, contact:</p>
      <address>
        Jérémy Harris<br>
        <!-- No office address <br>-->
        1348 Louvain-la-neuve, Belgium<br>
        Email: harg2001+privacy@gmail.com<br>
        Phone: 🇧🇪 +32 474 28 55 67
      </address>
    </section>

    <section id="annex">
      <h2>Annex: Key service providers</h2>
      <p>Below are our primary processors :</p>
      <ul>
        <li><strong>Payments:</strong> [Stripe] – Privacy: [https://stripe.com/privacy]; [PayPal] – Privacy: [https://www.paypal.com/privacy]</li>
        <li><strong>Analytics:</strong> [Google Analytics] – Privacy: [https://policies.google.com/privacy]</li>
        <li><strong>Email/CRM:</strong> [To be defined] – Privacy: [link]</li>
        <li><strong>Hosting/CDN:</strong> [GitHub] – Privacy: [https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement]</li>
        <li><strong>Shipping:</strong> [To be defined] – Privacy: [links]</li>
      </ul>
    </section>
  </main>
  
  <div id="footer-placeholder"></div>
</body>
</html>