Effective and last updated: 21 July 2026.
This Privacy Policy explains how Buseedo SAS handles personal data through the Sneakerdraws website, mobile application, partner enquiries and related services.
1. Who is responsible for your data?Data controller: Buseedo SAS, 140bis Rue de Rennes, 75006 Paris, France.
Privacy and rights requests: info@sneakerdraws.com.
2. Data we process, why, and for how long| Activity | Data and purpose | Legal basis | Retention |
|---|---|---|---|
| Website operation and security | Limited technical logs may include IP address, date and time, requested URL, device/browser information and security events. They are used to deliver, protect and troubleshoot the website. | Legitimate interests in providing a secure and reliable service (GDPR Art. 6(1)(f)). | Normally no more than 12 months, unless a security incident requires longer preservation. |
| Website analytics | Anonymous, aggregate page-view information: page path without query strings or fragments, timestamp, referrer, approximate location, browser, operating system and device type. This helps us understand aggregate traffic and improve the site. No custom events are sent. | Legitimate interests in measuring and improving the website (GDPR Art. 6(1)(f)). | Vercel’s visitor hash is reset after 24 hours. Anonymous aggregate reports remain available only for the period provided in the Vercel dashboard. |
| Partner enquiries | Name, work email, business website and enquiry text. We use them to respond, qualify a potential partnership and manage follow-up. | Steps taken at your request before a possible contract (Art. 6(1)(b)); legitimate interests for ordinary B2B follow-up where applicable (Art. 6(1)(f)). | We retain the enquiry in our partner-enquiry database for 24 months. Buseedo deletes the resulting enquiry and correspondence after that period if no partnership is formed, unless a longer period is required for an active relationship, legal claim or accounting record. |
| App account and raffle services | Depending on the feature used: name, email, profile image, phone number, IP address, approximate or supplied location, delivery address, store and size selections, entry history, wins and account events. These data provide the account and draw service, coordinate fulfilment and detect duplicate or fraudulent entries. | Performance of the service contract and requested pre-contractual steps (Art. 6(1)(b)); legitimate interests in fair draws, fraud prevention and security (Art. 6(1)(f)); legal obligations where applicable (Art. 6(1)(c)). | While the account is active. Following a valid deletion request, active account data are deleted or anonymised without undue delay, subject to legal, fraud-prevention and dispute records that must be retained. |
| Payments | Payment providers process payment credentials. We may receive email, transaction identifiers, amount, status and accounting information required to administer a purchase or subscription. | Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)). | Accounting and transaction evidence may be retained for up to 10 years where French law requires it. |
| Support and rights requests | Contact details, request content, identity-verification information only when reasonably necessary, and our response. | Legal obligations under data-protection law (Art. 6(1)(c)) and legitimate interests in demonstrating compliance (Art. 6(1)(f)). | Normally 2 years after closure; longer only where needed for a legal claim. |
| Video preference | Your choice to enable the Vimeo player is stored locally on your device. Sneakerdraws does not receive this preference. | Consent for third-party content and associated storage/access (Art. 6(1)(a) and applicable ePrivacy rules). | 6 months, or until you withdraw it through Privacy settings. |
| Privacy-notice acknowledgement | A local value records that you closed the privacy notice so we do not show it on every visit. Sneakerdraws does not receive this value. | Legitimate interests in a usable website and recording the display of the notice (Art. 6(1)(f)). | 12 months, or until you clear browser storage. |
Fields marked as required must be supplied so that we can respond or provide the requested service. Other fields are optional. Please do not submit sensitive personal data through free-text fields.
3. Recipients and service providersAccess is limited to authorised Buseedo SAS personnel who need the data for the purposes above. We may use infrastructure, hosting, database, email, security and support providers acting under appropriate contractual safeguards.
Vercel provides website hosting and anonymous Web Analytics. We configure the analytics integration to remove query strings and URL fragments before page-view data is sent.
Partner-form submissions are sent directly to Buseedo’s website and stored in a managed PostgreSQL database provided by Neon. Please do not include sensitive personal data in the form.
For app services, verified participating stores receive the minimum information needed to confirm a win, arrange payment, collection, shipping or fulfilment. Payment information is handled by providers such as Stripe or PayPal. The app may use Google Firebase services, including analytics or crash diagnostics, where enabled in the app configuration.
We do not sell personal data. We do not give partner-enquiry data to third parties for their own marketing.
4. Vercel Analytics, Vimeo and cookiesVercel Web Analytics does not use third-party cookies or track visitors across websites. It provides anonymous aggregate traffic statistics. Vercel uses an incoming-request hash that resets after 24 hours rather than a persistent browser identifier. We do not send custom events or query strings to Vercel Web Analytics.
The website does not load the Vimeo player until you actively choose “Allow Vimeo & play”. Before that choice, the video is represented by a local image and no request is made to Vimeo from the page. Once enabled, Vimeo may receive your IP address and device/browser information and may use cookies or similar technologies for security, player preferences, analytics or other purposes described in its policies.
You can withdraw the website’s stored choice at any time using the “Privacy settings” control in the footer. See our Cookie & Third-Party Content Notice, Vimeo Privacy Policy and Vimeo Cookie Policy.
No advertising or cross-site analytics tags are included in this website at the date of this notice. If that changes, non-essential technologies will not be activated before the required choice is obtained.
5. International transfersWe aim to store partner-enquiry data in the European Economic Area. Vercel provides hosting and anonymous Web Analytics, and Neon provides the partner-enquiry database. Either provider may process data outside the EEA depending on the services and regions configured for the website. If a service provider processes data outside the EEA, we use an applicable transfer mechanism and supplementary safeguards where required, such as an adequacy decision, the EU Standard Contractual Clauses, or another lawful mechanism.
Enabling Vimeo may result in transfers to the United States or other countries. Vimeo states that it participates in the EU–U.S. Data Privacy Framework and may also use Standard Contractual Clauses. Your choice is requested before its player is loaded.
6. SecurityWe use access controls, data minimisation, transport encryption, restricted database access, validation and anti-abuse controls appropriate to the risk. No internet service can guarantee absolute security. If a personal-data breach creates a risk requiring notification, we will notify the competent authority and affected individuals as required by law.
7. Automated checks and draw integritySneakerdraws may use automated signals to identify duplicate or suspicious entries and to operate drawings. These measures are intended to protect real participants and participating stores. Where an automated result significantly affects you, you may contact us to request information or human review where applicable.
8. Your rightsSubject to the conditions of the GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may also give instructions concerning your data after death where French law permits.
Send requests to info@sneakerdraws.com or to the postal address above. We normally respond within one month. We ask for additional identity evidence only where reasonable doubts exist, and only to the extent necessary.
If you believe your rights have not been respected after contacting us, you may complain to the Commission Nationale de l’Informatique et des Libertés (CNIL).
9. ChildrenThe website’s partner form is intended for adults acting professionally. The app is not directed to children under 16. Additional age rules may apply to individual releases and participating stores.
10. Changes to this noticeWe may update this notice when services, providers or legal requirements change. Material changes will be highlighted through an appropriate channel. The effective date at the top identifies the current version.