Privacy Policy

1. Data Controller

Dripform is the data controller for personal data collected through dripform.com. Contact: privacy@dripform.com.

2. Data We Collect

Account data: Name, email address, password (hashed)
Order data: Billing address, shipping address, order history, payment method type
Technical data: IP address, browser type, cookies, pages visited
Marketing data: Email consent status (only if you opted in)

3. Legal Basis for Processing

Contract performance (Art. 6(1)(b) GDPR): Processing your order, managing your account, delivery
Legal obligation (Art. 6(1)(c) GDPR): Tax records and accounting (French law: 5 years)
Consent (Art. 6(1)(a) GDPR): Marketing emails, analytics cookies (only if you opt in)
Legitimate interest (Art. 6(1)(f) GDPR): Fraud prevention, website security

4. Data Sharing

We share personal data with:

Printful — name and shipping address to fulfil your order
Stripe — billing details for payment processing
PayPal — order amount and contact details for payment processing

We do not sell your personal data to third parties.

5. Data Retention

Order data: 5 years (French accounting obligation)
Account data: Until you request deletion, plus 1 year
Marketing consent: Until you withdraw consent

6. Your Rights

Under GDPR you have the right to access, correct, erase, object to processing of, and port your data. You may also withdraw consent at any time. To exercise these rights, email privacy@dripform.com or use My Account → Privacy → Data Requests.

7. Cookies

See our Cookie Policy for full details on the cookies we use.

8. Complaints

You have the right to lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.

Last updated: June 2026