Compliance

GDPR / DSAR

Data Subject Access Requests. Export or redact all personal data tied to a customer email. Required to fulfil within 30 days under GDPR Art. 15/17.

Coming soon

The request form works but submitted requests are not processed yet. Do not use this for real customer data requests until this notice is removed.

New DSAR request

Customer email

Retention policy

90 days raw payload PII (auto-redacted by pg_cron)
7 years canonical orders (Belgian fiscal requirement, customer block redacted on DSAR)
Audit log retained permanently for compliance evidence