Last updated: 19 October 2026
Short version
I collect what I need to answer you, run your free trial and bill your plan. I don't sell your data and I don't build advertising profiles. When I set up RIWAKA inside your Shopify store, your trade accounts' data stays in your store and stays yours: I only work on it on your instructions. If you ever want your data deleted, write to me and I'll delete it.
What follows is the legally required version of the same thing.
Who I am
RIWAKA builds pre-order and trade ordering systems for breweries on Shopify. The site is www.riwaka.xyz. RIWAKA is run by Antoine Pottier as a sole proprietorship (entreprise individuelle), SIRET 105 843 031 00011, registered at 5 Allée de Beg Er Vil, 56170 Quiberon, France. For any privacy question or request, write to antoine@riwaka.xyz.
Two roles
I handle personal data in two different roles, with different rules.
What I collect and why
When you contact me or book a call. I collect what you give me: your name, your brewery name, your email and whatever you share about your business. I use it to reply, see whether RIWAKA fits your brewery and follow up. Legal basis: steps taken at your request before a contract (Article 6(1)(b) GDPR) and my legitimate interest in answering business inquiries (Article 6(1)(f) GDPR).
When you request a free trial. The request form collects your name, your brewery name, your email and the details it asks about your store and your trade accounts. I use them to plan and build your installation. Legal basis: steps taken at your request before a contract (Article 6(1)(b) GDPR).
When you become a client. I keep the contact details of the people I work with at your brewery, your billing details (company name, address, VAT number), your invoices and payment records, and our email exchanges. I bill through Stripe, which handles your payment details, and the money then reaches my business bank, Qonto. I never see or store your full card or bank account number. Legal basis: performance of our contract (Article 6(1)(b) GDPR) and my accounting and tax obligations under French law (Article 6(1)(c) GDPR).
Standard infrastructure logs. The site is hosted on Webflow, and bot protection runs through Cloudflare. Both may briefly log IP addresses and basic request data for security and abuse prevention, under their own policies. I don't analyze or use this data. Legal basis: my legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).
The live demo. The demo at demo.riwaka.xyz is a sample brewery with fictional beers and prices. It runs on Cloudflare. Nothing you enter in it is sent to me or stored, and orders placed there go nowhere.
When I work inside your Shopify store
To install and support RIWAKA, I need collaborator access to your Shopify store. With it, I can see your trade accounts' data: company names, contact names, email addresses, phone numbers, delivery and billing addresses, price lists and order history. During installation, I also import your trade accounts and price lists from the lists you send me.
For this data, your brewery is the controller and I am your processor under Article 28 GDPR. In practice:
The full terms are in the data processing section of our contract.
I open your trade store from my Shopify Partner account and transfer ownership to your brewery once it's ready. Until the transfer, I hold that store and everything in it on your behalf, under the same terms. Shopify processes the store's data under its own Data Processing Addendum.
If you are a trade customer of a brewery that uses RIWAKA, that brewery is responsible for your data. To exercise your rights, write to them. If you write to me, I'll pass your request on to them.
What I don't do
I don't use Google Analytics, Meta Pixel or any behavioral profiling. I don't sell, rent or share your data with third parties for their marketing. I don't use your data, or your trade accounts' data, to train AI models. If this ever changes, I'll update this page and tell clients directly.
How long I keep your data
You can ask me to delete your data earlier at any time, except what the law requires me to keep (see "Your rights" below).
Where your data lives
I use these services to run RIWAKA:
Transfers of your data to the United States rely on the EU-US Data Privacy Framework adequacy decision and Standard Contractual Clauses where applicable. If you'd like a copy of the safeguards in place, write to me.
Your rights
Under GDPR, you have the right to:
To exercise any of these rights, write to antoine@riwaka.xyz. I reply within one month.
If you believe I've mishandled your data, you have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority, at cnil.fr.
Children
My services are for breweries. I don't knowingly collect data from anyone under 18.
Updates to this policy
I'll update this page whenever I change how I handle data. The date at the top shows the most recent change. If a change affects clients, I'll also tell them by email.
Questions
If you have any question about this policy, write to antoine@riwaka.xyz.