Antony Bessala
FR 0

Privacy policy

Last updated: 22 October 2026 (draft)

Who is responsible for your data

The data controller is {company_name}, {address} ("we"). For any question about your data: {email}. We have not appointed a Data Protection Officer because the law does not require one for our activity.

What we collect, why, and on what legal basis

  • Orders on The Gear: name, delivery address, email, phone (for the carrier), items ordered, amount, country, date. Purpose: process and deliver the order, send the confirmation and tracking, handle returns, keep our accounts. Legal bases: performance of the contract and legal obligation.
  • Payment: your card details are typed on Stripe's secure page. We never see or store your card number; we only receive the payment confirmation and a transaction identifier. Legal bases: performance of the contract, legal obligation.
  • Contact form (appearances, press, partnerships, sponsors, order, other): name, email, organisation (optional), message, language. Purpose: answer your request. Legal basis: your request (pre-contract steps) and our legitimate interest in replying.
  • Newsletter: email address and language. Purpose: send news about Antony Bessala and The Gear and, when you sign up, a single-use welcome discount code valid for 60 days. Legal basis: your consent (box not pre-ticked), which you can withdraw at any time.
  • Security and operation: IP address and technical logs kept by the host; request limits against abuse; anti-bot check (Cloudflare Turnstile) on checkout and the contact form when it is switched on. Legal basis: our legitimate interest in protecting the Site, and the legal duty to keep logs that applies to the host.

We make no automated decisions with legal effects on you, we do no advertising profiling, and we never sell your data. The Site uses no analytics tool and no advertising pixel. Fonts are hosted on our own server: no data goes to Google Fonts.

How long we keep it

  • Orders, invoices and payments: 10 years (accounting rules and the retention of distance contracts above EUR 120).
  • Contact requests: up to 3 years after the last exchange.
  • Newsletter subscribers: until you unsubscribe, then deleted; we review the list at least every 3 years.
  • Welcome discount codes: linked to your email for 60 days, then kept with the order if used.
  • Host technical logs: 12 months at most.
  • Session and cart: 8 hours (session cookie).

Who receives your data

  • Stripe Payments Europe, Ltd (Ireland) and its parent Stripe, Inc. (USA): payment. Transfers outside the European Union rely on the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.
  • {pod_partner}: making and shipping made-to-order clothing (name and delivery address, items).
  • Carriers: {carriers} (name, address, phone for delivery).
  • {mail_provider}: sending our order, contact and newsletter emails.
  • {host_name}: hosting of the Site and its database.
  • Cloudflare, Inc.: Turnstile anti-bot check, only when it is switched on (IP address and browser technical data).
  • Our advisers (accountant, lawyer) and public authorities when the law requires it.

These providers act on our instructions, or on their own account where the law allows it (Stripe, carriers). We pass on only what is needed.

Your rights

At any time and free of charge you may: access your data, have it corrected or erased, restrict its use, object to it, ask for portability, withdraw your consent (for example unsubscribe from the newsletter) and give instructions about your data after your death (French law). Write to {email} saying what you need; we answer within one month. We may ask for proof of identity if in doubt. Some data (invoices) must be kept even after an erasure request.

If you think your rights are not respected, you may complain to the CNIL (Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr) or to your local data protection authority.

Minors

The newsletter and orders are for people aged 15 or over. If you are younger, please ask a parent before writing to us or ordering.

Security

Encrypted connection (HTTPS), hashed administrator passwords, restricted administrator access, login attempt limits, regular backups. No system is perfect: if a data breach puts you at risk, we will tell you and notify the CNIL within the legal deadlines.

Cookies

The Site uses only strictly necessary cookies. See the cookies page.

Changes

We may update this policy; the date at the top shows the latest version.