Privacy Policy
Last updated: not published yet
Structure follows the wireframe. The section on embed analytics is missing on purpose: no embeds are live yet. It has to be added before the first shop embed ships.
1 · Who we are & scope
Todo Eike
Controller identity and what this policy covers. Today that is the website only, later also app, scanner and embeds.
2 · Data we collect
Todo Eike
Describe the data the website processes. Account, order, payment, scanner telemetry and scan data do not exist yet and belong here once checkout, app and scanner ship.
Facts from the build
- · The talk-to-us form stores the email address, an optional message and a timestamp.
- · No other data is collected on the site, and no data is read from visitors' devices.
- · Server logs at the hosting provider are the only further record. Their content and retention need to be confirmed against Vercel's documentation.
3 · How we use data
Todo Eike
Purposes and legal basis for each purpose.
Facts from the build
- · Form submissions are used to get back in touch, nothing else.
5 · International transfers
Todo Eike
Where data is processed and which transfer mechanism applies, for example standard contractual clauses.
Facts from the build
- · The database is in the EU. Resend and Vercel are US companies, so their processing locations have to be checked.
6 · Retention & deletion
Todo Eike
How long form submissions are kept and when they get deleted. No automatic deletion is implemented yet, so either set a rule here and implement it, or state the manual process.
7 · Your rights
Todo Eike
Rights under GDPR, and under Singapore's PDPA if that applies to the pilot, plus how to exercise them.
9 · Contact & changes
Todo Eike
Privacy contact and how changes to this policy are announced.
Facts from the build
- · The site currently names hello@commonform.xyz as the contact address.