Privacy policy

1) Data controller

Cityscootlab is published by E-Com Shop (SASU), registered in France.

• Company: E-Com Shop (SASU)
• SIREN: 934 934 308
• Address: 60 rue François 1er, 75008 Paris, France
• Email: contact.ecomshopfrance@gmail.com
• Website: cityscootlab.com

2) What data we process

We operate a lightweight website focused on product curation. We do not run user accounts or comment systems. Depending on your choices and interactions, we may process:

• Technical data: pages viewed, approximate geolocation by country/region, device & browser information, referral source (when available).
• Consent preferences: your cookie choices stored in a first-party cookie/localStorage key (see "Cookies" below).
• Contact data (only if you email us): your email address and the content of your message.

3) Purposes & legal bases

• Basic site operation (essential cookies, static hosting, security): legitimate interests (Art. 6(1)(f) GDPR).
• Audience measurement via GA4 (non-essential): consent (Art. 6(1)(a) GDPR). Disabled by default until you accept.
• Affiliate redirection (adding parameters to outbound links): legitimate interests (performance measurement and fraud prevention). We do not store payment data; purchases occur on third-party sites.
• Responding to queries (emails you send us): legitimate interests or pre-contractual steps as applicable.

4) Cookies & Consent Mode v2

On your first visit, our banner lets you accept or decline analytics. We respect your choice using Consent Mode v2 and do not activate analytics cookies until you consent.

You can change your choice anytime using the cookie settings link in the footer banner when visible, or by clearing your browser storage and reloading the page.

5) Google Analytics 4

• GA4 is loaded from googletagmanager.com only after explicit consent. Until then, we send "denied" signals for analytics, ads, and personalization.
• GA4 does not log IP addresses and relies on on-device estimation for coarse geolocation.
• We use first-party measurement and do not combine GA4 data with personally identifying information.
• Retention for non-aggregated events is configured to the shortest available period (e.g., 2 months).

6) Retention

• Consent records: up to 12 months.
• Analytics events (if consented): GA4's shortest non-aggregated retention window (e.g., 2 months), with only aggregated reports kept longer.
• Emails you send us: for the time needed to handle your request, then archived if necessary to establish, exercise or defend legal claims.

7) Sharing & transfers

• Hosting: Netlify (static hosting, CDN, security). Technical logs may be processed for reliability and abuse prevention.
• Analytics (if consented): Google (GA4). Data may be transferred outside the EEA with appropriate safeguards (e.g., EU Standard Contractual Clauses).
• Affiliation: when you click an outbound offer, you are redirected to the relevant retailer (.fr for FR visitors, .com for international). Their own privacy policies apply.

8) Your rights

Subject to conditions set out in the GDPR, you have the right to access, rectify, erase, restrict or object to processing, and to data portability. Where processing is based on your consent, you can withdraw it at any time (this does not affect prior lawful processing).

To exercise your rights, email us at contact.ecomshopfrance@gmail.com. Please specify which right you wish to exercise and provide information enabling us to confirm your identity.

You also have the right to lodge a complaint with your local supervisory authority. In France, this is the CNIL: cnil.fr.

9) Children

Our content targets adult consumers. We do not knowingly collect data from children under 16. If you believe a child has provided us information, contact us to delete it.

10) Changes

We may update this policy to reflect legal or technical changes. We will adjust the date at the top and, where appropriate, provide additional notice.

11) Contact

For any privacy question, email contact.ecomshopfrance@gmail.com.