This policy explains how Built for Europe handles personal data under the EU General Data Protection Regulation (GDPR) and comparable US state privacy laws.
Controller
Levi Goncalves, trading as Built for Europe (BFE), Brockton, Massachusetts, United States. Contact: builtforeurope@gmail.com. We have not appointed a data protection officer, as we are not required to do so.
Data we collect
Order data: name, email address, shipping and billing address, order contents, and payment status (payment card details are handled by our payment providers and are never stored by us). Newsletter data: your email address and consent timestamp. Review data: your name or display name, rating, review text, and verification that the associated order exists. Technical data: IP address, device and browser type, pages viewed, and performance metrics.
How and why we use it
To process, ship, and support your order; to answer your enquiries; to publish verified customer reviews; to send newsletters where you have opted in; to measure and improve site performance; and to prevent fraud and abuse.
Legal bases (GDPR Art. 6)
Art. 6(1)(b) performance of a contract for orders and order communication; Art. 6(1)(a) consent for the newsletter and for analytics cookies; Art. 6(1)(f) legitimate interests for site security, fraud prevention, and aggregate analytics; Art. 6(1)(c) legal obligation for tax and accounting records. Consent can be withdrawn at any time with effect for the future.
Processors and recipients
Stripe (checkout and payments) and our own order system, our fulfilment partner in France, carriers used to deliver your parcel, Supabase (database and authentication for newsletter, reviews, and analytics records), Lovable (application hosting), and Google Analytics 4 (site usage measurement, only after cookie consent). Each acts under a data processing agreement or equivalent contractual terms.
International transfers
We are established in the United States, so personal data of EU and EEA customers is transferred to the US. These transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, our providers' certification under the EU-US Data Privacy Framework, together with additional technical and organisational safeguards.
Retention
Order and invoice records are retained for as long as required by applicable tax and commercial law (generally up to 10 years). Newsletter data is retained until you unsubscribe, plus a short suppression record so we do not email you again. Published reviews are retained until you ask us to remove them. Analytics data is retained in aggregated or pseudonymised form for up to 14 months.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests, as well as the right to withdraw consent at any time. Email builtforeurope@gmail.com and we will respond within one month. EU and EEA residents may also lodge a complaint with their national data protection authority. California residents may request disclosure or deletion of personal information; we do not sell personal information.
Cookies
Strictly necessary cookies keep your cart and session working. Analytics cookies are only set after you consent and can be declined without affecting your ability to shop.
Children
Our store is not directed at children under 16. If you believe a child has given us personal data, contact us and we will delete it.