Legal

Privacy Policy

Last updated: December 2024 Jurisdiction: EU / France (CNIL)

This privacy policy applies to kyotovibe.com, operated by KyotoVibe SAS, registered in France (FR-KV-2021-86333). This policy is governed by the General Data Protection Regulation (GDPR) and applicable French law. The relevant supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, 75007 Paris, France.

1. Who we are

Data controller: KyotoVibe SAS
Address: Centre Commercial Intermarché Beaulieu, 3 Av. de Lafayette, 86344 Poitiers, France
Email: [email protected]
Phone: +33 5 79 65 05 69

2. What data we collect

We collect only contact data, specifically:

Name and email address (when you use our contact form or order form)
Organisation name (optional, when provided in order forms)
Message content you choose to send us
Technical data: IP address (logged by our hosting provider for security purposes), browser type, and pages visited — only if analytics cookies are accepted

We do not collect payment card details directly. If payment processing is introduced in future, it will be handled by a compliant third-party processor and this policy will be updated accordingly.

3. How we use your data

Contact and order data is used only to:

Reply to your message or process your review order enquiry
Manage our commercial relationship if you become a client

We do not use your data for marketing, we do not sell it to third parties, and we do not use it for profiling.

Analytics data (if you consent via the cookie banner) is used to understand how visitors read our content, so we can improve it. This data is anonymised and aggregated. We do not use advertising cookies.

4. Legal basis for processing

Contact and order forms: Legitimate interests (responding to enquiries) and pre-contractual measures.
Analytics cookies: Consent (opt-in via cookie banner).
Hosting/security logs: Legitimate interests (security and fraud prevention).

5. Data retention

Contact form data is retained for up to 3 years from the date of last contact, or for the duration of any commercial relationship plus the applicable legal limitation period. Analytics data is retained in aggregated form only, with no personal identifiers retained beyond 13 months.

6. Third parties

Your data may be processed by:

Our hosting provider — for server infrastructure. [Replace with real hosting provider name before publishing.]
Analytics provider (if analytics consent is given) — [Replace with real analytics provider name before publishing.]

We do not share your data with any other third parties.

7. Your rights (GDPR)

Under the GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate data
Request erasure of your data (right to be forgotten)
Restrict or object to processing
Data portability
Withdraw consent at any time (where processing is consent-based)
Lodge a complaint with the CNIL

To exercise any of these rights, email [email protected]. We will respond within one month.

8. Cookies

We use a granular cookie consent mechanism. Necessary cookies are always active. Analytics cookies require opt-in. No advertising or tracking cookies are used. See our full Cookie Policy for details.

9. Changes to this policy

We will update this policy as needed. The "last updated" date at the top of this page will reflect the most recent change. Significant changes will be noted on the site.

10. Contact and complaints

Privacy questions: [email protected].
CNIL complaints: www.cnil.fr