@extends('front.layout.master')
@section('title', __('Privacy Policy'))
@section('content')
<main id="main-content" class="container py-4" role="main">
    <h1>{{ __('Privacy Policy') }}</h1>
    <p class="text-muted"><small>{{ __('Policy version') }}: {{ config('gdpr.policy_version', '1.0') }} &middot; {{ __('Last updated') }}: {{ now()->format('Y-m-d') }}</small></p>

    <section>
        <h2>{{ __('1. Who we are') }}</h2>
        <p>
            {{ config('gdpr.controller_name') }} ({{ __('the "Controller"') }}).<br>
            {{ __('Privacy inquiries') }}: <a href="mailto:{{ config('gdpr.controller_email') }}">{{ config('gdpr.controller_email') }}</a><br>
            {{ __('Data Protection Officer') }}: <a href="mailto:{{ config('gdpr.dpo_email') }}">{{ config('gdpr.dpo_email') }}</a>
        </p>
    </section>

    <section>
        <h2>{{ __('2. What we collect') }}</h2>
        <p><em>[PLACEHOLDER — have your counsel confirm this matches what you actually collect]</em></p>
        <ul>
            <li>{{ __('Account data: name, email, phone, password hash.') }}</li>
            <li>{{ __('Order history, shipping and billing addresses.') }}</li>
            <li>{{ __('Device / log data: IP address, browser, pages visited.') }}</li>
            <li>{{ __('Marketing consents and preferences.') }}</li>
        </ul>
    </section>

    <section>
        <h2>{{ __('3. Lawful basis') }}</h2>
        <p><em>[PLACEHOLDER — counsel must state the lawful basis per processing purpose: contract, consent, legitimate interest, legal obligation.]</em></p>
    </section>

    <section>
        <h2>{{ __('4. How long we keep data') }}</h2>
        <p><em>[PLACEHOLDER — retention periods per data category.]</em></p>
    </section>

    <section>
        <h2>{{ __('5. Your rights') }}</h2>
        <ul>
            <li>{{ __('Access a copy of your data') }} — <a href="{{ url('/gdpr/preferences') }}">{{ __('Request an export') }}</a></li>
            <li>{{ __('Correction of inaccurate data') }}</li>
            <li>{{ __('Erasure of your account') }} — <a href="{{ url('/gdpr/preferences') }}">{{ __('Delete my account') }}</a></li>
            <li>{{ __('Withdraw consent at any time') }}</li>
            <li>{{ __('Lodge a complaint with your supervisory authority') }}</li>
        </ul>
    </section>

    <section>
        <h2>{{ __('6. Cookies') }}</h2>
        <p>{{ __('We use four categories of cookies. You can manage your choices below.') }}</p>
        <button type="button" class="btn btn-outline-primary" onclick="window.gdprConsent && window.gdprConsent.reset()">{{ __('Change cookie preferences') }}</button>
    </section>

    <section>
        <h2>{{ __('7. Third parties') }}</h2>
        <p><em>[PLACEHOLDER — list payment processors, shipping carriers, analytics vendors, and email providers.]</em></p>
    </section>
</main>
@endsection