Privacy Policy

Data Controller

The data controller for this website is [Your company name], located at [Your address]. For any questions regarding your personal data, contact us at [contact@yld.clothing].

Data We Collect

This website does not collect personal data directly. We do not use contact forms, newsletter signups, or account creation. However, the following data may be processed by our service providers:

• Payment data: When you make a purchase, you are redirected to Stripe's hosted checkout. Stripe collects your payment information (name, email, card details, billing address) as an independent data controller. See Stripe's Privacy Policy.
• Hosting logs: Our hosting provider Netlify may collect technical data such as IP addresses, browser type, and access timestamps for security and performance purposes. See Netlify's Privacy Policy.

Cookies

This website does not set any cookies. No analytics or tracking tools are used. When you click a "Buy Now" button and are redirected to Stripe, Stripe may set cookies on its own domain as part of the checkout process.

Legal Basis for Processing

Under GDPR Article 6, the legal bases for any data processing are:

• Contract performance (Article 6(1)(b)) — processing necessary to fulfill your purchase
• Legal obligation (Article 6(1)(c)) — compliance with tax and accounting requirements
• Legitimate interest (Article 6(1)(f)) — website security and fraud prevention

Data Retention

Transaction records are retained for the duration required by French tax law (10 years for accounting documents). Hosting logs are retained according to Netlify's retention policy.

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest

To exercise any of these rights, contact us at [contact@yld.clothing]. You also have the right to lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.

International Transfers

Our hosting provider (Netlify) and payment processor (Stripe) are US-based companies. Data transfers to the US are covered by the EU-US Data Privacy Framework. Both companies maintain appropriate safeguards for the protection of personal data.