Privacy Policy

2stepdesigns, 80 Rue Victor Hugo, 94700 Maisons-Alfort, France, is the data controller for the personal data described in this policy. Contact for any privacy question: support@2stepdesigns.com.

Depending on how you use the site: (a) contact-form data — name, email, phone, and the message you write; (b) order and checkout data — name, email, phone, company, billing address, VAT number if provided, and the project details you enter; (c) technical and usage data — collected only through Google Analytics 4, and only after you accept analytics cookies (see our Cookie Policy).

Contact and order data is collected to reply to your enquiry or process your order (performance of a contract, or steps taken at your request before entering one — Article 6(1)(b) GDPR). Analytics data is collected only with your consent (Article 6(1)(a) GDPR) to understand how the site is used and improve it.

Contact-form submissions: up to 3 years from our last contact with you, unless a contract results, in which case contract-related data is kept for the applicable commercial and accounting retention period. Order data: for the duration required by French commercial and tax law. Analytics data: as configured in Google Analytics 4, currently 14 months.

Our hosting provider, which stores the site's data. This site is published on shared hosting arranged by the publisher. The hosting provider's company name, registered address and telephone number are supplied on request at support@2stepdesigns.com. Google Ireland Limited, as the processor of Google Analytics 4 data, only if you've accepted analytics cookies. We do not sell personal data, and no payment processor currently receives your data — the checkout on this site is a demonstration flow (see the notice at the payment step) and no card data is collected, stored or transmitted by us or by any third party.

Where Google processes analytics data outside the European Economic Area, it does so under the European Commission's Standard Contractual Clauses. You can review Google's own privacy documentation for details of that transfer mechanism.

Under the GDPR, you can ask us to access, correct, delete, or restrict the use of your personal data, ask for a portable copy of data you provided us, and object to processing based on legitimate interest or consent (including withdrawing consent for analytics at any time via "Cookie preferences" in the footer). To exercise any of these rights, write to support@2stepdesigns.com. You also have the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr), 3 Place de Fontenoy, 75007 Paris.

Full detail, including the cookie table and how to change your choice, is in our Cookie Policy.

We apply reasonable technical measures (HTTPS, security headers, restricted access to hosting) appropriate to a small-business site handling contact and order data.

We'll update the date at the top of this page when this policy changes. Material changes will be reflected here before they take effect.