Privacy Policy

Who is responsible

Paladex ("we", "us") is responsible for the personal data described in this policy. You can reach us at infopaladex@gmail.com for anything related to privacy.

To confirm: Add the data controller's legal name (person or company), postal address and, if applicable, company registration number. If an EU representative or a data protection officer is required, add their details too.

The short version

You can use the whole site without an account and without giving us any personal information.

We don't use advertising, social media pixels or third-party tracking scripts, and we never sell data.

Anonymous usage statistics are only collected if you agree to them in the cookie banner, and you can change your mind at any time.

Usage statistics (only with your consent)

If you choose "Accept" (or switch on "Usage statistics" in the cookie settings), the site records anonymous events to help us understand which rackets and features people use. Each event stores only:

• the event name, for example "page viewed", "racket viewed", "3D view changed", "Racket Finder completed" or "filter used";
• a few non-identifying details, such as the racket's name in our catalogue, the 3D view selected, the number of search results or the length of a search (never the text you typed);
• whether you're on a phone, a tablet or a computer; and, for the first page of a visit only, the site you came from (just its name, for example google.com or instagram.com, or the campaign name in the link) and your country, which our host works out from your connection (we keep only the country, never the IP address);
• the page path (without the query string) and the time.

To confirm: Set a retention period for usage events (for example 13 months) and add it here.

What we never collect in those statistics

No cookies, no IP address, no browser fingerprint, no user or device identifier and no information that lets us recognise you or link two visits together. If your browser sends a Global Privacy Control signal, we treat it as a refusal and collect nothing.

The legal basis is your consent (GDPR Article 6(1)(a)). You can withdraw it at any time with "Cookie settings" at the bottom of every page; this stops collection from that moment.

Clicks on retailer links

Links to shops go through a short redirect on our own domain (/go/…). When you use one, we count the click against the offer, the racket and the page it came from, with the time. We don't store your IP address or any identifier, and we don't set cookies. We count these clicks to understand which retailers are useful and, once affiliate programmes are active, to reconcile commissions. Legal basis: our legitimate interest in running and financing the site (GDPR Article 6(1)(f)).

Once you arrive at a retailer's site, that retailer (and any affiliate network it uses) is responsible for what it collects. See its own privacy policy.

Technical data needed to run the site

Like every website, our servers receive your IP address and basic request information (such as the page requested and your browser type) in order to deliver pages. We use the IP address only briefly, in memory, to limit abusive traffic (rate limiting); we don't store it.

Our hosting provider keeps short-lived server and security logs. Legal basis: our legitimate interest in keeping the site secure and available (GDPR Article 6(1)(f)).

To confirm: Confirm your hosting provider's log retention period (Netlify, if you keep it) and add it here.

When you contact us

If you use the contact form or write to infopaladex@gmail.com, we receive your email address, your name if you give it, the topic you choose and the content of your message. The contact form also records the language of the page you sent it from. We use this only to reply and to keep a record of the conversation, never for marketing. Legal basis: our legitimate interest in answering you, or steps you ask us to take (GDPR Article 6(1)(b) and (f)).

Messages sent through the contact form are stored by Netlify Forms, which also filters spam, and forwarded to our inbox.

To confirm: Set how long messages are kept (for example 2 years after the last message, in Netlify Forms and in the inbox) and add it here.

Information stored only in your browser

Some preferences are kept in your browser's local storage so the site works the way you left it. They stay on your device and are never sent to us:

• paladex:consent: your cookie and statistics choice, and when you made it.
• paladex:3d-quality: the 3D quality setting you picked, if you changed it.
• paladex:hint-seen: that you have already seen the "drag to rotate" tip.
• paladex:compare: the rackets you picked to compare, if you use that feature.
• paladex:visit (session storage, only if you allow statistics): marks that your visit has started, so we count visits rather than single pages. Your browser deletes it when you close the tab.
• paladex:no-webgl: set only if your device can't display 3D, so we show images instead.

Who else processes data for us

We only use providers we need to run the site:

• Netlify, Inc. (hosting, content delivery and the contact form): processes request data and server logs, and stores contact-form messages.
• Google LLC (Gmail): hosts our email inbox, used only when you write to us.
• Turso (database hosting): stores the anonymous usage statistics and shop-link click counts described above. These contain no personal data.

To confirm: Confirm this list before launch: Turso's exact legal entity and the region your database is in (choose an EU region), and add Plausible if you switch to it. Sign or accept each provider's data processing agreement.

International transfers

Netlify and Google are based in the United States, so data handled by them may be processed outside the European Economic Area. Where that happens, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses offered by these providers.

To confirm: Check each provider's current transfer mechanism (DPF certification or SCCs) and keep a record of it.

How we protect data

We collect as little as possible. The site is served only over HTTPS, uses strict security headers, has no user accounts, and keeps its administration area behind a password-protected, signed session. Access to stored data is limited to the people who run the site.

Your rights

Under the EU and UK GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its use, to data portability, and to withdraw consent at any time without affecting earlier processing. You also have the right to complain to a data protection authority, in particular in the country where you live or work.

To exercise a right, email infopaladex@gmail.com. Because usage statistics and link clicks contain no identifiers, we can't find a particular person in them; email is the only place where we hold data that we can link to you.

To confirm: Name your lead supervisory authority (for example the AEPD if the controller is established in Spain).

Children

The site is a general product catalogue and is not directed at children. We don't knowingly collect personal data from children.

Changes to this policy

If the way we handle data changes, we will update this page and the date at the top. Significant changes, such as a new analytics provider, will be reflected in the cookie banner, which will ask for your choice again.