Privacy policy

Data controller

DIGIMART SAS, 58 rue de Monceau, CS 48756, 75008 Paris, France.

Contact: contact@ykela.com

Site hosting

The site is served by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, United States). Like any host, Cloudflare processes the technical connection data needed to deliver and secure the site, including the IP address and the time of the request. The site’s forms are received by a Cloudflare service (Worker) and stored in a Cloudflare database (D1).

Newsletter

Data

Email address, language, sign-up page, version of the consent text, consent date, confirmation date.

Purpose

Sending you the Ykela letter (news, one or two emails a month).

Legal basis

Your consent, given by ticking an unticked box, then confirmed by double opt-in (a confirmation email with a link).

Provider

Brevo (France), which hosts the mailing list in the European Union. Open tracking is switched off.

Retention

Until you unsubscribe (one click in every email), and at most 3 years after your last contact with us. Unconfirmed sign-ups are deleted after 30 days. A minimal suppression list is kept for 3 years to honour your refusal.

Sample, wholesale or pop-up enquiries

Data

What you enter in the form (name, company, email, pieces requested, message), the language, and a salted, irreversible hash of the IP address to limit abuse.

Purpose

Handling your request and replying.

Legal basis

Pre-contractual steps taken at your request, and our legitimate interest in replying to business contacts. If you tick the consent box you also agree that we write to you about it.

Storage

Cloudflare D1 database; an alert email is sent to the team through Brevo.

Retention

3 years from our last exchange, then deletion or a fresh request for your agreement.

Buying Jewellery Studio

Data

Email address, billing country and address, amount, currency, language, order number, VAT number if any, proof of your request for immediate access and of the waiver of the right of withdrawal (text, version, date). Card details are entered with Stripe and never pass through our servers.

Purpose

Taking payment, delivering the download, confirming the order on a durable medium, invoicing, meeting tax and accounting obligations, handling support requests.

Legal basis

Performance of the contract; legal obligation (accounting, VAT); legitimate interest (fraud prevention, proof).

Providers

Stripe Payments Europe (payment, tax, invoices); Brevo (confirmation email with the download link); Cloudflare (storage of the order and the file).

Retention

Accounting records are kept for 10 years. The rest of the order is kept for the duration of the business relationship and then 3 years.

Ykela account

Data

Email address; display name, company, country and language if you fill them in; with “Continue with Google”, the name and identifier Google sends; your purchases, requests and any pop-up space linked to the account; creation and last sign-in dates.

Purpose

Signing you in without a password (code or link sent by email, or Google), showing your purchases and downloads, your requests and your pop-up space.

Legal basis

Performance of the contract: the account you ask for.

Providers

Supabase (authentication and database, hosted in the European Union); Brevo (sign-in emails); Google, only if you choose “Continue with Google”.

Browser storage

Your sign-in session is kept in the browser’s local storage (key ykela-auth), along with the page to reopen after the sign-in link (ykela-auth-next, deleted right after). This storage is strictly necessary for the sign-in service you ask for: it needs no consent and is never used for audience measurement. It is cleared when you sign out.

Retention

As long as the account exists. Accounting records linked to a purchase are kept for 10 years.

Deletion

From My account, Profile, “Delete my account”, or by writing to contact@ykela.com.

Audience measurement (Google Analytics 4)

Only with your consent. Until you accept, the Google script is not loaded and no data is sent to Google. If you accept, Google Analytics 4 measures page views and traffic using _ga cookies (13 months at most, not renewed at each visit). The site shows no advertising: Google’s advertising signals stay denied.

GA4 data is kept for 25 months at most. Google LLC (United States) acts as processor; transfers outside the European Union rely on the safeguards Google provides (including the EU-US Data Privacy Framework). You can withdraw your consent at any time: see the Cookies page.

Consent log

To prove your cookie choice, each decision is recorded: a random identifier, the choice (accept, reject, custom), the banner version, the language and the date. No IP address or browser information is stored. Legal basis: the obligation to be able to demonstrate consent. Retention: 7 months (6 months of validity of the choice, plus 1 month).

If you write to contact@ykela.com

Messages sent to this address are received through Cloudflare Email Routing, which forwards them to an inbox. Do not send confidential files in your first message.

Data

Your email address, the content of your message and any attachments.

Purpose and legal basis

Replying to your request (pre-contractual steps or legitimate interest).

Retention

As long as needed to handle the request, then deletion.

Transfers outside the European Union

Cloudflare, Stripe and Google LLC are US companies or have US entities. Where data is transferred there, it is on the basis of appropriate safeguards (Data Privacy Framework adequacy decision, standard contractual clauses).

Your rights

Under Regulation (EU) 2016/679 (GDPR) you have the right to access, rectify, erase, object to, restrict and port your data, and to withdraw your consent at any time.

To exercise them, write to contact@ykela.com. You will get a reply within one month.

If, after contacting us, you believe your rights are not respected, you can lodge a complaint with the CNIL:

Commission nationale de l’informatique et des libertés
3 place de Fontenoy, TSA 80715
75334 Paris Cedex 07 — cnil.fr

Updates

Last updated: 20 October 2026. Any change to this policy will be published on this page with a new date.

The French version of this page is authoritative; the English and Chinese versions are translations.