Privacy Policy
Last updated: June 6, 2026
1. Data Controller
The data controller is: Clubdirect (trade name) Status: Sole trader (French micro-entrepreneur regime) Address: 58 rue de Monceau, CS 48756, 75380 Paris Cedex 08, France SIRET: [SIRET NUMBER] Email: contact@clubdirect.io
2. Data Collected
When using the site, Clubdirect collects the following data: • User account: email address • Club information: name, sport, description, logo, cover photo, location, content of published sections • Order: first name, last name, shipping address, phone (optional), order history • Payment: handled directly by Stripe — Clubdirect stores no banking data • Navigation: technical server logs (IP address, browser type), kept temporarily for security purposes
3. Purposes
Data collected is used to: • Create and manage the user account • Process, produce and ship orders • Host and display the club's public page • Send transactional emails (order confirmation, mockup approval, shipping) • Provide customer support • Comply with our legal and tax obligations
4. Legal Basis
Processing is based on: • Performance of the contract (account creation, order processing, shipping) • Compliance with legal obligations (invoicing, accounting, retention periods) • Legitimate interest (site security, fraud prevention)
5. Retention Period
• Account data: for the entire duration of service use, then 3 years after last login • Order data: 10 years (accounting obligations) • Technical navigation data: 13 months maximum When the retention period expires, data is deleted or anonymized.
6. Recipients
Clubdirect does not sell or rent your data. It is shared only with subcontractors strictly necessary for service operation: • Stripe Inc. (payment) — privacy.stripe.com • Supabase Inc. (database hosting and authentication) — supabase.com/privacy • Resend Inc. (transactional emails) — resend.com/legal/privacy-policy • Vercel Inc. (application hosting) — vercel.com/legal/privacy-policy Some of these subcontractors may be located outside the European Union. In that case, appropriate safeguards are in place (European Commission Standard Contractual Clauses).
7. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights: • Right of access to your data • Right to rectification • Right to erasure ("right to be forgotten") • Right to restriction of processing • Right to object • Right to data portability • Right to define post-mortem directives To exercise these rights, write to contact@clubdirect.io specifying your request and including a copy of an ID. A response will be provided within one (1) month.
8. Complaint to the Supervisory Authority
If you believe your rights are not respected, you have the right to lodge a complaint with the French data protection authority (CNIL): CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France www.cnil.fr
9. Security
Clubdirect implements appropriate technical and organizational measures to ensure the security of your data: TLS encryption, passwords stored in hashed and salted form (never in plain text), access restricted to authorized personnel, regular backups.
10. Cookies
The site uses a limited number of cookies, detailed in our Cookie Policy.
11. Changes
Clubdirect may update this policy. The version in force is the one published on this page at the time of your visit.