Legal notice

Last updated: September 13, 2025

1. Publisher

EasyShopBuilder is an information and affiliate website focused on the Shopify platform.

If you operate as a registered business, complete your identification details (registered name, legal form, share capital, business register number, registered office, EU VAT). If you publish as a private individual, consult your local laws regarding disclosure obligations.

2. Hosting provider

The website is hosted by Netlify, Inc., 44 Montgomery St STE 300, San Francisco, CA 94104, United States. See Netlify’s Cookie Policy and GDPR/DPA page for data protection information.

3. Intellectual property

Editorial content (texts, layout, styles) is the property of EasyShopBuilder unless otherwise stated. Trademarks, logos and visuals cited (e.g., “Shopify”, “Shop Pay”) are the property of their respective owners. No rights are granted over these elements.

4. Links & affiliation

Some links on this website are affiliate links. We may receive a commission if you make a purchase after clicking those links. This does not affect the price you pay. Action links point to Shopify domains and use the rel="sponsored" attribute.

5. Liability

Information is provided for general guidance and may change. Despite careful verification, EasyShopBuilder cannot be held liable for errors or omissions, nor for how the information is used. For the most up-to-date details (pricing, feature availability), please refer to Shopify’s official websites.

6. Data protection (GDPR)

6.1. Controller

EasyShopBuilder (contact: contact.ecomshopfrance@gmail.com) is the data controller for data collected via this website (newsletter form, cookie consent).

6.2. Purposes & lawful bases

  • Newsletter delivery: lawful basis consent (Art. 6-1 a GDPR). You may withdraw consent at any time (unsubscribe link and/or email).
  • Audience measurement (GA4): lawful basis consent (Art. 6-1 a). GA4 is not triggered until you opt in.
  • Anti-bot security (reCAPTCHA v3): lawful basis legitimate interest (Art. 6-1 f) to secure forms. This service may involve transfers outside the EU—see 6.4.
  • Consent log: lawful basis legal obligation (Art. 6-1 c) and legitimate interest to demonstrate compliance.

6.3. Data processed

  • Newsletter: email address, subscription date/time, IP address (anti-abuse), double opt-in status if applicable.
  • Cookie consent: preferences (necessary/analytics), timestamp, session identifier stored in localStorage.
  • reCAPTCHA v3: technical/functional data collected by Google for traffic assessment (see Google’s policy).

6.4. Recipients & transfers

  • Hosting & delivery: Netlify (United States) — DPA available; Netlify advertises GDPR/CCPA commitments.
  • Newsletter form: Google Apps Script & Google Sheets (Google Ireland/LLC). Data may be processed in the EU and/or the United States depending on the Google account configuration.
  • reCAPTCHA v3 / GA4: Google (see Google policies). reCAPTCHA v3 may involve transfers outside the EU; consider Google’s compliance notices and contractual mechanisms if you enable it.

6.5. Retention

  • Newsletter: until consent withdrawal or prolonged inactivity (24 months without interaction), then deletion/anonymization.
  • Consent log: 13 months (common period) then purge.
  • Security technical logs: up to 12 months if necessary for incident prevention/investigation.

6.6. Your rights

Under GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. To exercise these rights: contact.ecomshopfrance@gmail.com. You may also lodge a complaint with your local supervisory authority (e.g., CNIL in France).

6.7. Data Protection Officer (DPO)

No DPO appointed at this time (not required given our current activities). Single contact: contact.ecomshopfrance@gmail.com.

7. Cookies & trackers

This site uses only necessary cookies/trackers and, subject to your consent, Analytics (GA4) cookies/trackers. By default, GA4 is blocked. Your choices are managed via the consent banner and recorded locally (timestamped log).

  • Necessary: consent preferences (localStorage), anti-spam (honeypot/delay), language/redirect.
  • Analytics (optional): Google Analytics 4 via www.googletagmanager.com; loaded only after opt-in.
  • Security reCAPTCHA v3 (if enabled): a Google service that may set cookies/trackers and transfer data outside the EU; use it transparently and proportionately to its security purpose.

Specialist sources point out that reCAPTCHA v3 is not “GDPR compliant by default” without clear information and user choice; implement it transparently and proportionately.

8. Security

The site applies technical measures including TLS/HTTPS, security headers (HSTS, restrictive CSP, Referrer-Policy, minimal Permissions-Policy), reduced attack surface (lazy-load, YouTube nocookie iframes sandboxed), and separation of script categories (analytics blocked until consent).

9. Governing law

These legal notices are governed by French law. Disputes fall under the jurisdiction of French courts.