Legal
Privacy
PLACEHOLDER — draft scaffolding. Have a GDPR-aware adviser review this before launch and confirm your lawful bases, retention periods, and the identity of the data controller. See README → “Human follow-up”.
Controller
The data controller is STOPNICKI [insert legal entity]. Contact: atelier@stopnicki.shoes.
What we collect
Information you provide when reserving a pair, joining the waitlist, or contacting us: name, email, phone (optional), shipping details, shoe size and fitting measurements, and your message. Payment is handled by Stripe — we do not store full card details.
Why we use it
To take and fulfil your reservation, make your boots to measure, arrange delivery, answer enquiries, and — only with your consent — to tell you when new numbers in the series open.
Processors
We use Supabase (database & storage), Stripe (payments), Cloudflare (network, anti-bot), and Vercel (hosting). [Confirm and list any email provider, e.g. Resend, and data locations.]
Your rights
You may request access, correction, deletion, or portability of your data, and object to certain processing. [Insert how to exercise rights and your supervisory authority.]
Retention
[Insert retention periods for orders, enquiries, and waitlist data.]
Last updated: [date].