AVALANCHE / POLICY DRAFT

Privacy policy

Draft privacy information for Avalanche.

Policy draft · Sales are not open. Seller identity, address and the live store settings must be completed before this becomes the published shop policy.

Who is responsible

Avalanche is a solo creative project in Denmark. Privacy enquiries: avalanchearchive@proton.me.

To complete: the controller’s legal name and contact/address details before collecting data through the live shop.

Email enquiries

When you email Avalanche, the mailbox receives your address, message and any attachments you choose to send. These are used to answer your enquiry and deal with purchase support. Email is received through Proton Mail.

Accounts and purchases

The intended WordPress/WooCommerce store processes account details, order information, billing details and download permissions to manage purchases and access. Payment processing will use separately configured providers; card and PayPal payments are planned. Their exact services and privacy information must be identified before sales open.

Browser storage and external resources

The storefront saves product selections and a checkout request identifier in browser local storage so the basket survives navigation. The custom basket does not store passwords or card numbers. Accessibility preferences are also saved in browser local storage when you choose them, so the same reading settings apply on your next visit. The current pages also request fonts from Google Fonts, which involves connections to Google’s font services.

The hosted WordPress and payment setup may add session cookies and other services. The final privacy and cookie information must describe the deployed configuration.

Purposes, legal bases and retention

Account/order processing is intended to support the purchase contract and applicable legal record-keeping obligations. Enquiry handling and site security require an appropriate legal basis for the actual circumstances. Final retention periods, any legitimate-interest assessment and consent-dependent services must be documented before launch.

Your rights

Where the GDPR applies, rights may include access, correction, erasure, restriction, objection and portability, subject to applicable conditions. Where processing relies on consent, it can be withdrawn. Contact avalanchearchive@proton.me to make a request.

You can also contact Datatilsynet, the Danish data protection authority.

Before publication

Confirm hosting and payment processors, international transfers/safeguards, retention periods, analytics/newsletter choices and all live cookies. This draft does not assert that those services have already been configured.