1. Data Controller

Akpan.fr / URC Solutions is responsible for personal data processed through Akpan.fr.

· Address: 4 rue Gouverneur Général Félix Éboué, 35200 Rennes, France

· SIRET: 941 383 135 00014

· Website: https://www.akpan.fr

· Email: support@akpan.fr

· Telephone: +33 77 422 1414

If the registered legal name or registered office differs from the information above, it must be corrected before publication.

2. Scope and Purpose

This Policy explains how Akpan.fr collects, uses, stores, protects and shares personal data when customers browse products, create accounts, use the shopping cart and checkout, place orders, arrange delivery, contact support, subscribe to communications or otherwise use our services. It also explains our use of cookies and similar technologies.

3. Personal Data We Collect

3.1 Account data

· Name and username

· Email address and telephone number

· Password and account credentials

· Billing and delivery addresses

· Account preferences and settings

3.2 Order data

· Order number, date, products, quantities and prices

· Delivery details and instructions

· Payment status

· Invoices, cancellations, refunds and returns

· Communications concerning an order

3.3 Technical data

· IP address

· Browser, device and operating system information

· Pages/products viewed and referring website

· Date/time of access

· Security, diagnostic and cookie information

3.4 Communications

If you contact us, we may retain your name, contact details, order reference, enquiry, attachments and correspondence to provide customer support and resolve disputes.

3.5 Marketing

If you subscribe to marketing communications, we may use your email address and preferences for promotions, discounts, new products and service announcements. You can unsubscribe at any time.

4. How We Use Personal Data

· Create and manage customer accounts.

· Process orders, payments, deliveries, returns and refunds.

· Provide customer support and respond to enquiries.

· Maintain invoices, accounting and tax records.

· Prevent fraud, abuse and unauthorised access.

· Secure, maintain and improve the website.

· Send marketing communications where legally permitted.

· Measure website traffic and performance using Google Analytics, subject to applicable consent requirements.

5. Legal Bases

Akpan relies, as applicable, on: (1) performance of a contract, for accounts and orders; (2) legal obligations, including accounting and tax requirements; (3) legitimate interests, such as security, fraud prevention and defending legal claims; and (4) consent where the law requires it, including certain marketing and non-essential tracking.

Consent must be freely given, specific, informed and unambiguous. It may be withdrawn at any time without affecting processing already carried out lawfully before withdrawal.

6. Payment Information

Payments are processed through secured platforms, we use Stripe and Paypal for secured payments. Akpan.fr does not store full payment-card numbers or CVV/CVC security codes in its ordinary customer database. Payment provider: STRIPE

7. Who Receives Personal Data

· Authorised Akpan personnel who need the data for their duties.

· Payment providers for transaction processing.

· Delivery/logistics providers for order fulfilment.

· Hostinger and other authorised hosting/IT providers.

· Email/communication providers.

· Google Analytics, for audience measurement where enabled.

· Professional advisers where necessary.

· Public authorities where disclosure is legally required.

Akpan does not currently use third-party advertising or marketing cookies.

8. Hosting and Storage

Akpan.fr is hosted using Hostinger. Personal data may be stored in databases, website infrastructure, backups, email systems, order-management systems and other systems required to operate the service.

Hosting provider: Hostinger.

9. Security

Akpan applies appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, disclosure and other unlawful processing.

· HTTPS/TLS encryption

· Secure password hashing; passwords would never be stored in plain text

· Access controls and least-privilege permissions

· Administrator security controls and, where available, MFA

· Software/security updates and monitoring

· Secure backups

· Incident-response procedures

· Confidentiality obligations for personnel and processors

No internet service can guarantee absolute security. Akpan will nevertheless take proportionate measures to reduce security risks.

10. Data Retention

Akpan does not retain personal data indefinitely. Data is kept only for as long as reasonably necessary for its purpose, unless a longer period is required by law.

Category	Indicative retention
Account data	While the account remains active, subject to legal requirements.
Orders/customer service	During the relationship and thereafter as necessary for legal claims and statutory obligations.
Invoices/accounting	Generally 10 years where required by French accounting rules.
Marketing data	During the commercial relationship and, where applicable, up to 3 years from the end of the relationship or last relevant contact.
Security logs	For a period appropriate to security, troubleshooting and legal requirements.
Cookie consent records	For the period necessary to demonstrate and administer consent.

Information no longer needed operationally but legally required may be archived with restricted access.

11. Your GDPR Rights

· Access your personal data.

· Correct inaccurate or incomplete data.

· Request erasure where legally applicable.

· Request restriction of processing where applicable.

· Request data portability where the GDPR conditions are met.

· Object to certain processing based on legitimate interests.

· Object at any time to direct marketing.

· Withdraw consent where processing is based on consent.

· Exercise applicable rights concerning solely automated decision-making.

To exercise your rights, email support@akpan.fr with the subject “GDPR Data Request – Akpan.fr” or write to 4 rue Gouverneur Général Félix Éboué, 35200 Rennes, France. We may request reasonable identity verification. We normally respond within one month; the GDPR permits an extension of up to two additional months for complex requests, with notice.

12. Complaints

Please contact us first so we can investigate. You may also complain to the French data protection authority, the CNIL: https://www.cnil.fr/.

13. Cookies and Similar Technologies

Akpan uses strictly necessary technologies for functions such as sessions, authentication, security and the shopping cart. Under French rules, trackers that are not strictly necessary generally require prior consent. Consent must be obtained before applicable cookies are deposited/read, and refusing must be as easy as accepting.

13.1 Google Analytics

Akpan currently uses Google Analytics for website audience measurement and performance analysis. Depending on configuration, Google Analytics may process information such as pages viewed, interactions, device/browser information and usage identifiers.

Akpan will use privacy-protective settings and limit unnecessary data collection. Google Analytics will not be activated before consent where consent is required. Akpan will rely on a CNIL exemption only if the actual implementation satisfies all exemption conditions, including strict audience measurement for Akpan, anonymous statistical output and no cross-site tracking or unrelated data combination.

Google may process data under its own contractual/privacy framework. Akpan will assess international transfers and implement appropriate GDPR safeguards where required.

13.2 No third-party advertising cookies

Akpan currently does not use third-party advertising cookies, social-media advertising pixels or third-party marketing cookies. If these are introduced, this Policy and the cookie-consent mechanism will be updated as appropriate.

13.3 Cookie choices

Where consent is required, the consent interface should provide clear Accept, Reject and Manage Preferences choices. Users must be able to withdraw or change consent as easily as they gave it. Akpan should provide a persistent Cookie Settings control.

14. Cookie Register

Technology	Provider	Purpose	Category	Duration	Consent
Essential session/cart cookies	Akpan/site infrastructure	Account, checkout, cart, security	Strictly necessary	Confirm	Generally no if strictly necessary
Google Analytics	Google	Audience measurement	Analytics	Confirm current configuration	Yes unless a valid CNIL exemption applies

Akpan should run a production cookie/tracker audit and replace the indicated duration with the exact cookie names, providers, purposes and lifetimes actually deployed.

15. International Transfers

Where a service provider processes personal data outside the EEA, Akpan will use a lawful GDPR transfer mechanism where required, such as an adequacy decision, Standard Contractual Clauses or another recognised safeguard.

16. Children

Akpan.fr is intended for customers legally able to purchase products online. We do not knowingly collect children’s personal data for marketing purposes. If you believe a child has provided data without appropriate authorisation, contact us.

17. Third-Party Websites

Links to external websites are subject to those websites’ own privacy practices. Akpan is not responsible for external sites.

18. Data Breaches

Akpan maintains procedures intended to detect, investigate and respond to personal-data incidents. Where legally required, Akpan will notify the competent authority and/or affected individuals within the applicable GDPR requirements.

19. Profiling and Automated Decision-Making

Akpan does not currently intend to make decisions based solely on automated processing that produce legal or similarly significant effects. If this changes, required information and safeguards will be provided.

20. Data Accuracy

We seek to keep personal data accurate. Customers may update information through their account where available or contact support@akpan.fr to request correction.

21. Changes to this Policy

We may update this Policy when our services, technologies, suppliers, legal obligations or processing practices change. The Last updated date will be amended when material revisions are made.

22. Contact

Akpan.fr / URC Solutions
4 rue Gouverneur Général Félix Éboué
35200 Rennes, France
SIRET: 941 383 135 00014
Email: support@akpan.fr
Telephone: +33 77 422 1414
Website: https://www.akpan.fr

23. Legal Framework

· EU Regulation 2016/679 (GDPR)

· French Loi Informatique et Libertés

· Article 82 of the French Loi Informatique et Libertés

· Directive 2002/58/EC (ePrivacy), as implemented in France

· Applicable French consumer and e-commerce legislation

· Applicable CNIL guidance and recommendations