This policy explains how T-Pulse Archery processes personal data relating to visitors and customers. Last updated: 14 August 2026.
1. Data controller
[TO COMPLETE: legal identity and address of the controller], trading as T-Pulse Archery. Data enquiries: contact@t-pulse-archery.com.
2. Data processed
Depending on how you use the website: identity and contact details, billing and delivery addresses, basket and order contents, payment status, customer account, customer service messages, reviews and display name, language choice, IP address and technical security logs. T-Pulse Archery does not receive or store your full bank card number.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Basket, order, payment, delivery and after-sales service | Performance of a contract |
| Invoicing, accounting and tax duties | Legal obligation |
| Fraud prevention, security and legal claims | Legitimate interests |
| Review management and moderation | Legitimate interests |
| Email marketing, if enabled | Consent, except where legally permitted for existing customers |
| Non-essential cookies and non-exempt analytics | Consent |
4. Recipients and providers
Data may be accessed by authorised T-Pulse Archery personnel and, depending on enabled services, OVH, WooCommerce/Automattic, the payment provider [TO COMPLETE: Stripe and/or PayPal], the carrier [TO COMPLETE: Mondial Relay and/or others], invoicing/accounting provider [TO COMPLETE: Abby or other], email provider [TO COMPLETE: SMTP service name] and security/backup tools [TO COMPLETE: final list]. They receive only the data needed for their role.
5. Transfers outside the EEA
Some international providers may process data outside the EEA. Where applicable, transfers rely on an adequacy decision or recognised GDPR safeguards such as standard contractual clauses. [TO COMPLETE: check the providers actually enabled and their safeguards]
6. Retention
- Orders, invoices and accounting records: for the commercial relationship and then the statutory period, generally ten years for accounting records.
- Customer account: while active, then [TO COMPLETE: chosen period, for example three years after last activity], except where a legal duty applies.
- Contact and support requests: while handled and up to three years after the last exchange, unless needed for a legal claim.
- Reviews: while published and as needed for moderation or legal claims.
- Security logs: [TO COMPLETE: chosen period for the tool, internally recommended at 6 to 12 months].
- Cookie choices: for the period set in the consent tool and reviewed periodically.
7. Your rights
You may request access, rectification, erasure, restriction or portability, object to certain processing and withdraw consent at any time. Email contact@t-pulse-archery.com and describe your request. Proof of identity will be requested only if there is reasonable doubt. You may also complain to the French data protection authority (CNIL).
8. Cookies
Cookies strictly required for the basket, checkout, security and language choice may be used without consent. Non-essential trackers must remain disabled until you choose. Accepting, refusing and withdrawing consent must be equally easy. [TO COMPLETE: configure and audit the cookie banner after adding payment and analytics services]
9. Security and updates
Reasonable technical and organisational measures are used to protect data. This policy will be updated when a provider or processing purpose changes.