We collectnothing.

In one word

This site sets no cookies, uses no analytics tool, loads no resource from a third-party server and contains no form.

It does keep, on your device, a copy of the pages you have viewed, so that it stays readable when the network fails. That copy holds nothing about you and never leaves your phone.

It asks you for nothing and records nothing about you. This document explains the little that remains nonetheless, and what you are entitled to demand.

Data controller

Entity

G-Fashion Empire

Address

Mbalngong, derrière le lycée bilingue, Yaoundé, Cameroun

Telephone

+237 675 75 27 25 (MTN) / +237 699 03 23 64 (Orange)

No data protection officer has been appointed: the site carries out neither large-scale monitoring nor processing of sensitive data, the two cases that would make such an appointment mandatory.

No cookies, no trackers

The site writes to your device no cookie, no local storage, no session storage and no browser database.

One single thing is kept: a cache, in the strict sense of the word. When you open a page, your browser keeps a copy of it, along with the site’s typefaces and stylesheets. Nothing else. That cache holds no identifier, no trace of your visit, and it is never read by us — it does not leave your device. Its only purpose is to show you again what you have already seen when the connection fails, and to spare you downloading it twice.

You can clear it at any time, like any other site data, from your browser settings. The site will keep working normally, simply without its offline mode.

Typefaces are installed on our own server, never fetched from Google Fonts. No map is embedded, no social network button is loaded from a third party. No ad network, no pixel, no browser fingerprinting.

• No consent banner. Consent is required in order to write or read information on your device, except where that writing is strictly necessary for the service you asked for — which is the case of a purely technical cache, with no identifier and no measurement. That is the only thing this site writes, and it serves only to show you its own pages again.
• A Content Security Policy is declared as “default-src none”: it is your browser itself that refuses any request to a third party, even if a mistake were to introduce one.
• An automated test fails on every build of the site if a storage API or a third-party origin were to appear anywhere other than in the offline-mode file, whose content runs to about fifty lines. This page describes the code, and the code is checked.

What is recorded nonetheless: server logs

Like any web server, the one hosting this site keeps a technical log of the requests it receives. We do not consult it routinely and draw no traffic statistics from it.

• Data concerned: IP address, date and time, address of the page requested, browser type, response code.
• Purpose: keeping the site running, protecting it from attacks and abuse, diagnosing a failure.
• Legal basis: legitimate interest, within the meaning of Article 6(1)(f) of the GDPR, in operating a secure service.
• Retention: the short period the host applies to its technical logs, then deletion.
• This data is neither cross-referenced, nor sold, nor used to profile you.

When you write to us

The WhatsApp button takes you off this site and into the WhatsApp application, operated by the Meta group. From that point on, it is that service’s privacy policy that applies, not ours.

What you send us — message, number, photograph — reaches us and stays in the conversation. We keep it for as long as it takes to answer you and follow your order through, then we delete it on request.

The same applies to a telephone call or a message on our social network pages: the service used is its operator’s, and how it works is outside our control.

Outbound links and referrer

The site links out to WhatsApp, to a mapping service and to our social networks. A “Referrer-Policy” header limits what those services learn of your visit: they receive at most our domain name, never the specific page you were reading.

No sale, no sharing, no advertising

We do not sell, rent or share any personal data, with anyone, in any form and for any consideration.

To California residents: there is therefore nothing to opt out of under the right to refuse the sale or sharing of personal information. We carry out neither targeted advertising nor processing of sensitive data.

No automated decision-making

No automated processing produces legal effects concerning you, or significantly affects you. No profiling is carried out.

Children

The site is not directed at children and knowingly collects no data concerning them. If you believe a child’s data has reached us, report it: it will be deleted.

Your rights

Wherever you live, you may exercise the following rights with us. Most will have nothing to act on, for want of data — but the right exists and the answer is owed to you.

• Know what data we hold about you, and obtain a copy of it.
• Have inaccurate or incomplete data corrected.
• Have your data erased.
• Ask for processing to be restricted, or object to it.
• Receive your data in a machine-readable format, or have it sent elsewhere.
• Withdraw your consent at any time, where processing depended on it.
• Suffer no discrimination for having exercised any of these rights.
• Refer the matter to a supervisory authority if our answer does not satisfy you.

How to exercise them

Write to us on WhatsApp or call +237 675 75 27 25 (MTN) / +237 699 03 23 64 (Orange). We answer within one month of the request at the latest, and free of charge.

We may need to verify your identity before disclosing data — that is a protection for you, not an obstacle.

If you live in the European Union or the United Kingdom, you may refer the matter to the data protection authority of your country of residence. Residents of other countries have equivalent remedies before their own authority.

Applicable frameworks

This policy is written to satisfy, in substance, the following regimes: the European GDPR and the ePrivacy Directive, the UK GDPR, the Swiss Federal Act on Data Protection, the Californian CCPA as amended by the CPRA, the Canadian PIPEDA, the Brazilian LGPD, the South African POPIA, as well as applicable Cameroonian law.

No text is cited to make up the numbers: since the site processes no data, compliance rests on an established fact, not on a declaration.

Transfers outside Europe

The server that delivers this site belongs to a United States host with points of presence worldwide, Africa included. The resulting transfers are governed by that host’s contractual safeguards — standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

Changes

Any change to this document is dated at the top of the page. Should data processing of any kind ever be introduced — analytics, a form — it would be announced here before being put into service.