Privacy policy — Gondo waiting list

Last updated: 12 October 2026.

This page explains what Gondo does with the information you share when you join its waiting list. It is written to be read in full in three minutes.

Who is responsible

The data controller is Nicolas Ryckelynck, in his own name, publisher of Gondo. Contact: contact@gondosearch.com.

Gondo is an independent software vendor, not affiliated with PrestaShop.

What we collect, and why

When you fill in the form, we record:

• your e-mail address;
• your answers to the form questions: the number of products in your store (as a range), your PrestaShop version, the search you use today, and, if you give it, the monthly price you would find fair;
• the language of the page you used;
• proof of your consent: the exact text of the box you ticked, the date and time of your sign-up, and the date and time of your click on the confirmation e-mail;
• where you came from: the utm_source, utm_medium and utm_campaign parameters of the page address, and the domain name of the site that brought you here. Never the full address of the originating page.

We do not record your IP address, and the page sets no cookie.

This information serves two purposes:

1. telling you about Gondo's launch and progress by e-mail, and offering you early access. Legal basis: your consent (Article 6(1)(a) GDPR);
2. understanding who signs up (store size, search in use, fair price) and through which channel, to decide what to build next. Legal basis: our legitimate interest in measuring interest in a product before building it (Article 6(1)(f)). This analysis is done on aggregate figures.

We use it for nothing else: no targeted advertising, no resale, no profiling, no automated decision.

Double opt-in

Your sign-up only takes effect after you click the link in the confirmation e-mail. Without confirmation, your data is deleted automatically after 7 days.

Who has access

The only person with access to this data is Nicolas Ryckelynck, and, for technical needs, two providers:

• the site's hosting provider: OVH SAS, simplified joint-stock company, 2 rue Kellermann, 59100 Roubaix, France (Lille Métropole trade register 424 761 419), telephone +33 9 72 10 10 07, website www.ovhcloud.com. The server is in its Gravelines data centre, in France;
• the e-mail delivery service: Scaleway SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France (Paris trade register 433 115 904), website www.scaleway.com, Transactional Email service, Paris region. It processes your e-mail address to deliver our messages and may record technical delivery data.

These providers act on our instructions, under contract. Data is hosted in the European Union: the server is in Gravelines, France, and the e-mail service is used in its Paris region. We do not transfer it outside the European Union; if a provider ever required it, we would say so here, with the safeguards the GDPR requires.

We share your data with no one else.

For how long

• As long as you remain subscribed, and at the latest 12 months after Gondo's public launch or 24 months without any interaction from you, whichever comes first;
• proof of consent is kept as long as your subscription;
• channel data (utm_*, origin domain) is kept only as aggregate figures beyond 6 months.

At the end of these periods, or as soon as you unsubscribe, your data is deleted.

Your rights

At any time you can:

• unsubscribe: every e-mail contains a one-click unsubscribe link, effective immediately;
• withdraw your consent, which amounts to the same thing;
• request access to your data, its rectification, erasure, the restriction of its processing, or its portability;
• object to processing based on our legitimate interest.

Just write to contact@gondosearch.com from the subscribed address. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or with the authority of your own country.

Security

The page is served over HTTPS. To limit abusive submissions, your IP address is held in memory for a few minutes, then forgotten; it is never written down. Access to the data is protected by a strong password and two-factor authentication at each provider. In the event of a data breach concerning you, we inform you as the GDPR requires.

Audience measurement

This page uses no audience measurement tool.

Changes

If this policy changes, the date at the top of the page is updated. A change that would widen the use of your data would be announced to you by e-mail before taking effect.