Privacy Policy
Last updated: 9 septembre 2026 · YDOL is committed to protecting your personal data.
Who processes your data
YDOL, 25 rue de Ponthieu, 75008 Paris, France, hello@ydol.co. We have not appointed a data protection officer; every request goes through that address.
What we collect, why, and on what basis
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Identity, company name, VAT number | Open and maintain your account | Performance of the contract | 3 years after the last contact |
| Addresses, phone, e-mail | Process and deliver orders | Performance of the contract | 3 years after the last contact |
| Orders, invoices, payments | Invoice and keep accounts | Legal obligation | 10 years |
| E-mail, if you agree to it | Send you our offers | Consent, or legitimate interest if you are already a customer | 3 years, or until you withdraw |
| Date of birth, if you give it | Birthday offer | Consent | Until you withdraw |
| Browsing, audience measurement | Understand and improve the site | Consent for non-essential cookies | 13 months |
| Exchanges with customer service, including WhatsApp | Answer and follow up | Legitimate interest | 3 years |
| Conversations with Lucy | Give you technical advice | Legitimate interest | 12 months |
Who your data is shared with
We neither sell nor rent your data. It is entrusted only to the providers needed for those purposes: site hosting, sending our e-mails, collecting payments, shipping and parcel preparation, invoicing, customer service messaging and online technical support. Each one only accesses what it needs, and cannot use your data for its own purposes.
Transfers outside the European Union, some of these providers process data in the United States. Those transfers rely on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework. The named list of our processors is provided on simple request to hello@ydol.co.
Cookies
Cookies needed to run the site (basket, session, security) do not require your agreement. Audience measurement and personalisation cookies are only set with your consent, which you can withdraw at any time.
Your rights
You have a right of access, rectification, erasure, restriction, objection and portability, as well as the right to set instructions on what happens to your data after your death. Write to hello@ydol.co; we reply within one month.
Erasure cannot cover invoices, which the law requires us to keep for ten years.
Complaints
If our answer does not satisfy you, you can refer the matter to the CNIL (3 place de Fontenoy, 75007 Paris, France, cnil.fr), or to the data protection authority of your country of residence, of your place of work, or of the place where you believe your rights have been breached.
| Country | Supervisory authority |
|---|---|
| Germany | Bundesbeauftragte für den Datenschutz und die Informationsfreiheit |
| Austria | Datenschutzbehörde |
| Belgium | Autorité de protection des données · Gegevensbeschermingsautoriteit |
| Cyprus | Επίτροπος Προστασίας Δεδομένων Προσωπικού Χαρακτήρα |
| Denmark | Datatilsynet |
| Spain | Agencia Española de Protección de Datos |
| France | Commission nationale de l'informatique et des libertés (CNIL) |
| Ireland | Data Protection Commission |
| Italy | Garante per la protezione dei dati personali |
| Luxembourg | Commission nationale pour la protection des données |
| Malta | Information and Data Protection Commissioner |
| Netherlands | Autoriteit Persoonsgegevens |
| Poland | Urząd Ochrony Danych Osobowych |
| Portugal | Comissão Nacional de Proteção de Dados |
| Romania | Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal |
| Sweden | Integritetsskyddsmyndigheten |
| Switzerland | Préposé fédéral à la protection des données et à la transparence |
