Privacy
Contact and privacy requests: contact@ruleshift.eu
Draft updated 30 October 2026 · France / European Union
1. Data controller
Bastien Dalle, entrepreneur individuel (EI), trading as Akiyoeiko; Résidence du Champ de Mars, 89 avenue Jean Moulin, 34500 Béziers, France. Email and data protection contact: contact@ruleshift.eu. Telephone: +33 6 30 15 69 20
This policy distinguishes the current demonstration from processing that must be configured for an active shop.
2. How the site currently works
The demonstration offers no customer account, order form, payment or marketing signup. Selected demonstration items are stored locally in your browser, without your name, postal address or email. The application does not transmit this selection to a supplier.
Hosting may involve technical processing for security, IP addresses and connection logs. The providers and retention periods must be identified for the production configuration.
3. Processing planned for sales
| Purpose | Required data | Basis to document |
|---|---|---|
| Orders, dispatch and tracking | Identity, delivery details, purchases and order references | Contract performance |
| Invoices and accounts | Invoice details and supporting records | Legal obligation |
| Enquiries, guarantees and withdrawals | Contact details, order and relevant request content | Contract, legal obligation or legitimate interest depending on the processing |
| Service security | Strictly necessary technical logs | Legitimate interest, subject to assessment |
| Marketing or optional trackers | Contact and data strictly related to the purpose | Consent where required |
4. Suppliers and international transfers
Only information needed to prepare, deliver and track an order should be shared with carriers and service providers. Providers, roles and processing countries must be established before launch. Transfers outside the European Economic Area require an appropriate transfer mechanism and must be described here.
Current providers: Cloudflare, Inc. (hosting), Google (forms and emails), Squarespace/Mailgun (email forwarding) — see Forms.
To complete before sales: payment, carriers, order system
5. Retention periods
The demonstration selection stays in this browser until you delete it or clear site storage. You can clear it on the cookies and storage page.
For active sales, retention periods must be specified by purpose: contractual relationship, guarantees and disputes, invoicing obligations and any marketing. Data must not be retained indefinitely. Invoices are subject to a ten-year statutory retention period. Marketing periods must be separate from accounting archives and contractual evidence.
To complete: approved retention schedule, log retention periods and deletion procedures
6. Your rights
Subject to GDPR conditions, you can request access, rectification, erasure, restriction and portability, and object to certain processing. You can withdraw consent when processing relies on it. The seller must generally respond within one month, subject to extensions permitted by the GDPR.
Rights contact: contact@ruleshift.eu. Identity verification will only be requested when there is reasonable doubt. You can complain to the CNIL or your competent supervisory authority.
7. Security and updates
Access must be limited to authorised people and exchanges protected. This policy will be updated before adding payments, accounts, analytics or advertising. Bank details must not be stored in the code repository or local cart storage.
Contact and return forms
Data: name, email address, request type and, if you provide them, order reference, reason and message. A reason is never required to exercise the right of withdrawal. Do not include sensitive data or payment details.
Purposes and legal bases: answering your question (legitimate interest in handling enquiries); handling a return, withdrawal, guarantee claim or reshipment and sending you an acknowledgment of receipt (performance of the contract and legal obligations under French consumer law). No marketing, no profiling.
Recipients and processors: Bastien Dalle (RULESHIFT) only, supported by: Cloudflare, Inc. (site hosting and secure form transmission; your IP address is only used as an encrypted fingerprint to prevent abuse and is not kept by RULESHIFT); Google (Google Sheets for storage, Gmail for sending emails); Squarespace and its provider Mailgun for forwarding emails sent to contact@ruleshift.eu.
Transfers outside the European Union: these providers may process data in the United States. Transfers rely on the European Commission adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), under which Cloudflare, Google and Squarespace are certified, supplemented where relevant by the Commission’s standard contractual clauses.
Retention: general questions: 3 years from the request; order-related requests (return, withdrawal, guarantee, reshipment): 5 years, the applicable limitation period, so that the request and its handling can be evidenced. Rows are then deleted automatically every month.