Privacy Policy & Legal Notice

1. Legal Notice (Mentions Légales)

In accordance with Article 6 of Law No. 2004-575 of June 21, 2004, for confidence in the digital economy (LCEN), users of ponotocats.com are informed of the identity of the various parties involved in its creation and monitoring:

• Owner: Ponoto, an Entreprise Individuelle (EI), located in France.
• Registration: Registered with the RCS Gironde under number 822 363 040.
• SIRET: 822 363 040 00012.
• Contact Email: privacy@ponotocats.com
• Web Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. (Contact: https://vercel.com/contact).
• Website: ponotocats.com

2. Introduction

ponotocats.com ("Website") respects your privacy and complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés). This Privacy Policy explains what data we collect, how we use it, and your rights.

3. Data We Collect

• Account & Order Data: Email address, first name, last name, delivery address, phone number (if required for shipping updates), and transactional details.
• Newsletter Form: Email address.
• Technical Data: IP address, browser type, device type, referral pages, and operating system.
• Usage Data: Pages visited, time spent on site.
• Location Data: Approximate location (IP-based).
• Marketing Data: Data related to your interaction with our advertising campaigns (e.g., if you clicked an ad to reach our site).

4. Third-Party Services & Data Transfers

We use third-party tools to improve our service, process transactions, and manage our logistics/communications. These services may place cookies on your device if you provide consent.

• EasyShip: Used to automate shipping, labels, and order logistics. Your shipping and contact details are securely transmitted to EasyShip and shared with their partner regional or international couriers to dispatch and track your physical products.
• Resend: Used as our transactional and marketing email infrastructure to dispatch order confirmation emails, shop alerts, and newsletters.
• Google Analytics (GA4): Used for traffic measurement and advertising. Data is processed by Google. IP addresses are anonymized where possible.
• Google Ads (Remarketing & Conversion): We use Google Ads to advertise Ponoto across the internet. This service uses cookies to display relevant ads to you on other websites based on your past visits to ponotocats.com. Data is processed by Google.
• Vercel: Our website is hosted on Vercel infrastructure.
• WooCommerce: We use WooCommerce to manage our online store. Data is processed by WooCommerce.
• Hetzner: Our store databases and backend infrastructure are hosted on Hetzner servers.
• Stripe: We use Stripe to securely process payments. Financial transaction data is directly processed by Stripe under bank-grade encryption.

International Transfers: Some processed data (such as emails, IP addresses, or delivery identifiers) is transferred to and handled in the United States (via providers like Vercel, Resend, and EasyShip frameworks). These transfers are protected by the EU-U.S. Data Privacy Framework or via Standard Contractual Clauses (SCCs) to ensure equivalent GDPR compliance standards.

You can opt-out of personalized Google advertising by visiting Google Ad Center.

5. Legal Basis for Processing

Depending on the context, data processing (GDPR art. 6) is based on:

• Consent: For targeted marketing cookies, location settings, and email newsletter enrollment.
• Contract: To execute your e-commerce orders, handle transaction steps, and facilitate physical package courier handoffs.
• Our legitimate interest: For security monitoring, anomaly oversight, fraud prevention, and system maintenance.
• Compliance with a legal obligation: To comply with transactional data preservation laws, corporate tax regulations, or active court requests.

6. Cookie Management

We use a custom-built cookie consent banner integrated with Google Consent Mode.

• Strictly Necessary: Always active. Required for basic e-commerce operations (e.g., remembering checkout baskets and account status).
• Analytics & Marketing: Disabled by default. Activated strictly if you explicitly select "Accept" on our dynamic banner UI.

You can alter or completely clear your processing consents anytime within your local browser configuration options.

7. Data Retention

We retain personal data only as long as necessary:

• Account Data: Until you submit a direct request for deletion or after 3 consecutive years of relative account inactivity.
• Order & Invoicing History: Retained for the statutory duration required under French commercial and tax legislation.
• Analytics Data: Retained for 14 months (Google Analytics default configuration).
• Cookies: Valid for a maximum window of 13 months from point of entry.

8. Your Rights

Under the GDPR and the French Data Protection Act, you have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to processing.
• Data portability (receive your data in a structured format).
• Post-mortem instructions: Define directives concerning the storage, deletion, and communication of your personal data after your death.
• Lodge a complaint with the CNIL (French Data Protection Authority) via cnil.fr.

9. Contact

For privacy questions, to exercise your rights, or to contact the Data Controller:

Email: privacy@ponotocats.com