Privacy

Privacy Policy

Last updated: 21 May 2026

‍

Short version

We collect only what you give us. We don't track you, build profiles on you, or sell your data. If you ever want it deleted, write to us and we'll delete it.

What follows is the legally required version of the same thing.

Who we are

‍Riwaka builds Beer Club systems for craft breweries on Shopify. Our site is www.riwaka.xyz. The business is operated by Antoine Pottier, registered at 5 Allée de Beg Er Vil, 56170 Quiberon, France. For any privacy-related question or request, write to [email protected].

What we collect and why

We collect information in exactly two situations: when you contact us, and when our hosting infrastructure logs activity for security purposes. Nothing else.

When you contact us

‍When you fill out a form on our site or send us an email, we collect what you give us: your name, your brewery name, your email, and whatever details you share about your business. We use this only to respond, evaluate fit, and follow up if we agree to work together. Legal basis: consent (Article 6(1)(a) GDPR) and legitimate interest in responding to a business inquiry (Article 6(1)(f) GDPR).

Standard infrastructure logs

‍Our site is hosted on Webflow, and bot protection runs through Cloudflare. Both may briefly log IP addresses and basic request data for security and abuse prevention. This data is processed by Webflow and Cloudflare under their own policies. Riwaka does not analyze or use this data for any purpose. Legal basis: legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).

What we don't do

We don't use Google Analytics, Meta Pixel, advertising trackers, or any behavioral profiling. We don't build profiles of visitors. We don't sell, rent, or share your data with third parties for marketing purposes. We don't use AI training data from your information. If we ever change this, we'll update this page and tell you directly.

How long we keep your data

If you contact us and we don't end up working together, we delete your inquiry within 24 months of our last contact. If we do work together, we keep your data for the duration of the project plus 7 years after the final invoice, to meet legal accounting and tax obligations under French law. After that, it's deleted.

You can ask us to delete your data earlier at any time (see "Your rights" below).

Where your data lives

Form submissions and email exchanges are stored on services we use to run the business:

• Webflow (form submissions and website hosting) — based in the United States
• Google Workspace (email exchanges and call scheduling) — based in the United States
• Cloudflare (security and bot protection) — based in the United States

Transfers of your data to the United States rely on the EU-US Data Privacy Framework adequacy decision and Standard Contractual Clauses where applicable. If you'd like a copy of the safeguards in place, write to us.

Your rights

Under GDPR, you have the right to:

• Access the data we hold about you
• Correct any inaccuracies
• Delete your data (the "right to be forgotten")
• Restrict how we process it
• Object to processing based on legitimate interest
• Receive your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, write to [email protected]. We respond within 30 days.

If you believe we've mishandled your data, you have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority. Their site: cnil.fr.

Children

‍Our services are for business owners. We don't knowingly collect data from anyone under 18.

Updates to this policy

‍We'll update this page if we change how we handle data. The date at the top reflects the most recent change.

‍Questions?

‍If you have any questions about how we handle cookies, feel free to reach.