Privacy Center

What we collect, why, for how long — and every control you have.

Draft for the prototype — to be validated by legal counsel before launch.

Data controller: Bazin (demo entity — to be defined) · Privacy contact: dpo@bazin.example

Purposes & legal bases

Purpose	Legal basis	Data	Retention
Account & profile	Contract (Art. 6.1.b)	Name, email, display name	Account lifetime + 3 years
Orders & payments	Contract and legal obligation (Art. 6.1.b, 6.1.c)	Order, address, payment reference (held by the payment provider)	10 years (accounting)
Fit Passport	Consent (Art. 6.1.a)	Body measurements you enter yourself	Until you delete them
Language & region	Strictly necessary for the service	Language, country, currency, units	13 months
Audience measurement	Consent (Art. 6.1.a, ePrivacy)	Anonymous usage statistics	13 months maximum
Fraud & safety	Legitimate interest (Art. 6.1.f)	Message flags, reports	Up to 5 years

Recipients

Only what each needs: the other party to an order, the carrier, the payment provider and our hosting provider, all under contract.

International transfers

Buyers and sellers may be outside the EEA. Transfers rely on adequacy decisions or Standard Contractual Clauses; only the data needed to fulfil an order (name, shipping address) is shared.

Your rights

Under the GDPR you can access, rectify, erase, port, restrict and object to processing of your personal data, and withdraw consent at any time. You can also complain to your data protection authority (for example the CNIL in France).

Privacy by design

Language and country come from your browser settings only — no IP location, no GPS, no trackers before consent. Measurements are never guessed from photos and photo location data is removed.