Privacybeleid
Last updated: 26-08-2026
This privacy policy explains which personal data Client Onboarding Kits collects, why, and what rights you have. The data controller is Adil Derral, 38 Rue la Bourdonnais, 93600 Aulnay-sous-Bois, France, lokan.unola@atomicmail.io.
1. What data we collect
| Category | Examples | When |
|---|---|---|
| Contact details | Name, email address | When ordering or contacting us |
| Order data | Order number, products purchased, amount | When you place an order |
| Payment data | Payment confirmation, last digits / bank | At checkout — we never see your full bank details |
| Billing data | Billing address, country, VAT status | At checkout |
| Technical data | IP address, browser type, pages visited | When you visit the website |
Note: anything you or your own clients write into a downloaded document stays on your device. We have no access to it and never receive it.
2. Why we use your data, and on what legal basis
- Fulfilling your order and delivering the download — basis: performance of the contract.
- Providing customer support — basis: performance of the contract and our legitimate interest.
- Processing payments and preventing fraud — basis: legal obligation and legitimate interest.
- Accounting and tax reporting — basis: legal obligation.
- Improving the website (analytics) — basis: your consent via the cookie banner.
- Sending a newsletter — basis: your consent. You can unsubscribe using the link in any email.
3. Who we share data with
We never sell your data. We share it only with service providers needed to run the store:
- Shopify — hosting the store and processing orders. Shopify's privacy policy.
- Payment providers (including Shopify Payments and the bank behind iDEAL) — to process your payment.
- Email and delivery services — to send your order confirmation and download link.
- Our accountant and the tax authorities — where legally required.
4. Transfers outside the EEA
Some of our service providers process data outside the European Economic Area. Where that happens, it is based on Standard Contractual Clauses approved by the European Commission or on an adequacy decision.
5. How long we keep data
- Order and invoice data: 10 years (statutory record-keeping obligation).
- Support correspondence: 3 years after the last contact.
- Newsletter data: until you unsubscribe.
- Analytics: a maximum of 14 months.
6. Cookies
We use two kinds of cookies:
- Necessary cookies — to remember your cart and let you check out securely. These cannot be switched off.
- Analytics and marketing cookies — only placed if you consent via the cookie banner. You can decline without any effect on your order.
You can also delete cookies at any time through your browser settings.
7. Your rights
Under the GDPR you have the right to:
- access your data;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- receive your data in a readable format (portability);
- withdraw consent you previously gave.
Send your request to lokan.unola@atomicmail.io. We respond within 30 days.
8. Filing a complaint
If you are unhappy with how we handle your data, you can lodge a complaint with the French supervisory authority CNIL (cnil.fr) or with the authority in your own country — in the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
9. Security
The website uses an encrypted connection (SSL/TLS). Payments are handled by PCI-DSS certified payment providers. We do not store full bank or card details ourselves.
10. Changes
We may update this privacy policy. The date at the top shows when it was last changed.