Privacy Policy

Data controller

David Martins, GoHara micro-enterprise
150 allée de la Marine Royale, 06210 Mandelieu-la-Napoule, France
SIRET: 913 872 412 00014
Email: support@gohara.store

Data collected

We collect the following data as part of our business activity:

• When placing an order: name, email, phone, shipping address
• When creating a digital profile: username, bio, photo, social media links
• Browsing data: IP address, device type (for QR scan statistics)

Purposes of processing

Your data is used for:

• Processing and shipping your orders
• Managing your account and digital profile
• Sending confirmation and activation emails
• Providing statistics on your QR code scans
• Improving our services

Legal basis

The processing of your data is based on the performance of the contract (product orders) and your consent (digital profile creation).

Data sharing

Your data is never sold. It may only be shared with:

• Stripe (secure payment)
• Our hosting provider Hostinger (site storage)
• Our printing and shipping service provider (for delivery)

Retention period

Order data is kept for 3 years from the date of purchase (legal obligation). Digital profile data is kept as long as the account is active. You can request the deletion of your account at any time.

Your rights (GDPR)

In accordance with the General Data Protection Regulation, you have the following rights:

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure of your data
• Right to data portability
• Right to object to processing

To exercise these rights, contact us at support@gohara.store. You also have the right to lodge a complaint with the CNIL (the French data protection authority, cnil.fr).

Cookies and tracking technologies

In accordance with Article 82 of the French Data Protection Act and the ePrivacy Directive, we use different types of cookies on our site. The placement of certain cookies requires your express consent, which you can grant or refuse via our consent banner.

Essential cookies (no consent required)

These cookies are strictly necessary for the site to function and cannot be disabled:

• laravel_session: user session management (duration: 2 hours)
• XSRF-TOKEN: CSRF attack protection (duration: 2 hours)
• locale: language preference storage (duration: 1 year)
• gohara_consent: storage of your cookie choice (duration: 6 months)

Audience measurement cookies (consent required)

These cookies help us understand how visitors interact with the site, measure traffic, and improve your experience. No data is used for advertising purposes. These cookies are only placed with your explicit consent.

Marketing and personalization cookies (consent required)

These cookies may be used to personalize advertising on social networks and measure the effectiveness of our campaigns. No marketing cookies are placed until you have given your express consent.

How to manage your cookies

You can modify your preferences at any time by clicking the "Manage cookies" link in the footer of every page. You can also configure your browser to refuse all cookies, but this may affect the operation of the site.

For more information on cookies and your rights, you can visit the CNIL website: cnil.fr

Security

The site is protected by an SSL certificate (HTTPS). Payments are processed by Stripe, PCI DSS certified. We implement the necessary technical and organizational measures to protect your data.

Public digital profile

By creating a digital profile via GoHara, you agree that the information you enter (username, bio, photo, links) will be publicly accessible via your t-shirt's QR code. You can modify or delete this information at any time from your dashboard.

Last update

This policy was last updated on April 23, 2026.