Privacy policy
Bazin (demo entity — to be defined) · DPO: dpo@bazin.example · v2026-10-21
Draft for the prototype — to be validated by legal counsel before launch.
This legal notice is published in English only. A reviewed translation is still to come; the text above is the version that binds us.
| Purpose | Legal basis | Data | Retention |
|---|---|---|---|
| Account & profile | Contract (Art. 6.1.b) | Name, email, handle | Account lifetime + 3 years |
| Orders & payments | Contract / legal obligation (6.1.b, 6.1.c) | Order, address, payment reference (processed by payment provider) | 10 years (accounting) |
| Fit Passport | Explicit consent (6.1.a) | Body measurements you enter | Until you delete them |
| Language & region | Legitimate interest — strictly necessary | Locale, country, currency, units | 13 months |
| Audience measurement | Consent (6.1.a, ePrivacy 82) | Anonymous usage | 13 months max |
| Fraud & safety | Legitimate interest (6.1.f) | Message flags, reports | Up to 5 years |
Your rights
Under the GDPR you can access, rectify, erase, port, restrict and object to processing of your personal data, and withdraw consent at any time. Contact dpo@bazin.example. You may also lodge a complaint with your supervisory authority (e.g. CNIL in France).
International transfers
Buyers and sellers may be outside the EEA. Transfers rely on adequacy decisions or Standard Contractual Clauses; only the data needed to fulfil an order (name, shipping address) is shared with the counterparty and carrier.
Privacy by design
Language and country are detected from your browser settings only — no IP geolocation, no third-party trackers before consent. Measurements are never inferred from photos.
Security
Access is scoped row by row in the database: a buyer sees their own orders, a seller their own listings, and only an administrator can moderate, suspend or read the audit trail. Passwords are hashed by the authentication service and never stored by this application. Card data is never touched here — it stays with the payment provider, and only its reference is kept on the order. Body measurements are stored in a private table that is not exposed to any other user, and deleting them is immediate.
Exercising your rights here
You do not need to write to us for the routine ones. Export your account data downloads it as JSON, Settings edits or clears the Fit Passport, Privacy toggles marketing e-mails, and Delete account files the erasure request. Every other request — rectification, restriction, objection — goes through the Privacy Center and is answered by a named administrator, in the audit log.