22 Routes Club

Your information

Privacy

This policy describes the data processed when you browse this store, request a sign-in link or contact 22routes. Customer accounts operate independently of whether direct sales are open.

Last updated:

Data controller: Clervie Fournier, Individual entrepreneur (EI), 22 rue du Docteur Laennec, 56300 Pontivy, France. SIREN 929472314 · SIRET 92947231400012. Contact: contact@22routes.com.

Etsy purchases and messages remain on Etsy under the applicable roles and policies. Their history is not automatically imported into your 22routes account.

At your request, we use your email address to send a sign-in link and find orders associated with that address. Your email address is required for this service: without it, we cannot send a link. We do not ask for or store a password.

The system stores your email address, the language of the link, protected representations of sign-in and session tokens, and their validity and use timestamps. You can sign in without an order; your account will then be empty. This processing provides the service you request and, for orders, performs the contract.

If you cannot find a template, you can select a newspaper and provide your email address. The occasion, desired date and additional details are optional. This free request is not an order or reservation and does not guarantee that a template will be made or become available by a particular date.

We use this information to review your request and, if the template becomes available, send one availability email after our team confirms it. You are not subscribed to a newsletter. Only authorized 22routes staff access the details. Cloudflare provides storage, form protection and email delivery.

Personal details for unresolved requests are kept for no more than 12 months, with scheduled cleanup. Email contact@22routes.com to withdraw your request or exercise your rights. Website cleanup does not delete messages already received or provider backups. Do not include sensitive information or other people’s personal information in your notes.

Journey measurement may record opening or starting the form, confirmed receipt or an error, and the newspaper selected from our list. It receives no email address, search text, occasion, desired date or notes. An Etsy outbound click is measured separately and is not proof of an Etsy purchase.

Cloudflare protects the hosting service and verifies sign-in requests with Turnstile. Your IP address and technical information about your browser and request are processed for these checks. Your IP address is also sent to the Turnstile verification service.

To limit repeated requests, 22routes stores identifiers derived from an IP address or email, a counter and an expiration time. These identifiers are not anonymous data. Application logs record request paths, error codes and incident references. We process this information for our legitimate interest in protecting the website and accounts. A technical anomaly is not proof of fraud; contact us if a check prevents access.

When you email contact@22routes.com, we use your address, message and any attachments you choose to provide to answer your request. Do not send card details or information unrelated to your request. Only people authorized to operate 22routes access these exchanges for this purpose.

If you use direct payment when available, Stripe processes it on its hosted page. 22routes stores payment references and status, order details, the agreements needed for digital supply and delivery information; complete card details are not recorded in our database. Required accounting records are retained to meet applicable legal obligations.

A sign-in link expires after 15 minutes and can be confirmed only once. A session expires after no more than 7 days. Signing out removes the active session from our database and its cookie from that browser. Signing in again in the same browser replaces the previous session.

Scheduled cleanup deletes expired links, sessions and rate-limit counters. Expiration already prevents their use; it does not guarantee deletion at that exact moment, because a technical failure may delay cleanup.

This cleanup does not delete emails already received, provider backups or order documents. No uniform automatic deletion deadline is currently configured for support messages, other logs, backups or contractual records. You can request erasure of your data; information still needed for a legal obligation or to establish or defend legal claims may be retained.

Cloudflare provides hosting, storage, security and sign-in email delivery. Contact messages are forwarded to the mailboxes of authorized 22routes team members. Email providers also process messages delivered to their mailboxes. Stripe is involved when you open its payment flow.

Cloudflare and Stripe operate international infrastructure. Some processing may take place outside the European Economic Area; we do not promise exclusively European hosting. Their privacy policies and data-protection commitments describe the applicable mechanisms, including standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

Canva, Etsy and social networks are separate services. Their own policies apply when you use them after following a link.

Email contact@22routes.com to request access, correction, erasure or restriction of your data and, where the conditions apply, portability. You may object to processing based on our legitimate interests. We may request the information needed to verify your identity without requiring unrelated details.

You may also complain to the CNIL or the competent supervisory authority. Applicable rights and any limits arising from legal obligations will be considered for your request.

Google Analytics 4 (GA4), through Cloudflare Zaraz, PostHog statistics and Pinterest visit measurement activate automatically when an eligible public page opens, unless a rejection is saved. This automatic activation does not represent your explicit acceptance. Reject in preferences stops new measurements. The Pinterest tag measures public-page visits only and may associate them with Pinterest advertising. It receives no email or enhanced matching data. Social links and videos hosted by 22routes do not load embedded social players; sign-in emails provide access, not marketing.

Google Ads measurement is a separate choice, disabled by default. It requires your explicit opt-in in cookie preferences and enabled statistics. It connects an advertising visit with a verified paid order, its amount, currency and pseudonymized transaction reference. Google click identifiers may be sent to Google for this attribution; our code does not send them to PostHog or Pinterest or keep them in local storage. No email is sent for this measurement. Remarketing and advertising personalization remain disabled. You can withdraw this choice at any time; withdrawal does not erase data already transmitted.

Configured measurements cover page views, product or product-list views and clicks, checkout starts, and orders marked paid after server verification. Product events may contain product IDs and names, price, quantity and list position; a confirmed order may include amount, currency and a pseudonymized transaction reference. These configured events do not include your email, name, postal address, account ID, payment details, raw Stripe or order ID, or private link. GA4 may also process browsing and technical information sent by your browser. The Cookies page explains how the measurement works and how to manage your choice.

Email us at contact@22routes.com. For an Etsy order, message the 22routes Etsy shop with your order number.