Privacy policy

Privacy policy in force as of 1 October 2026.

1. Data controller

Your personal data is processed by Safesurf, a sole proprietorship operating the YUMIKA brand, 2 rue Coysevox, 69001 Lyon, France (Lyon Trade and Companies Register 951 138 775). For any question or to exercise your rights: contact@yumika.fr.

2. Data collected, purposes and retention periods

Purpose	Data	Legal basis	Retention period
Processing and delivering your order, handling returns and guarantees	Name, addresses, email, phone, items ordered, payment information (handled by the payment provider)	Performance of the contract	Duration of the business relationship; accounting records 10 years
Customer account and wishlist	Email, name, order history, favourites	Performance of the contract	Until the account is deleted, or after 3 years of inactivity
Answering your messages (email, form, chat)	Name, email, content of the exchanges	Legitimate interest	3 years after the last exchange
Newsletter, private sales, basket reminders	Email, first name, interactions with our emails, browsing on the site	Consent (or legitimate interest for products similar to those purchased)	3 years after the last contact; you can unsubscribe at any time
Customer reviews	First name, initial, rating, comment, any photos	Consent	As long as the review is published
Audience measurement and advertising	Browsing data, cookie identifiers, IP address	Consent (cookie banner)	13 months maximum for cookies
Fraud prevention	Order and payment data	Legitimate interest	As long as needed for the analysis

3. Recipients

Your data is never sold. It is shared only with the providers we need:

• Shopify (site hosting, order management, Shopify Payments);
• our logistics partners and carriers (name, address, phone for delivery);
• Klaviyo (emails and newsletter);
• Judge.me (collecting and displaying reviews);
• Tidio (site chat, if you use it);
• Google, Meta (Facebook, Instagram), Pinterest and TikTok (audience measurement and advertising, only if you agree).

4. Transfers outside the European Union

Some providers are located or process data outside the European Union (notably in Canada, the United States and, for shipping, Asia). These transfers are covered by a European Commission adequacy decision or by the Commission's standard contractual clauses.

5. Cookies

Non-essential cookies are only set with your consent, given through the banner shown on your first visit. Details and settings: cookie policy.

6. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time and the right to give instructions on what happens to your data after your death. Write to contact@yumika.fr; we reply within one month. You may also lodge a complaint with the CNIL (www.cnil.fr).

7. Security

The site is encrypted (HTTPS) and payments are processed by certified providers. Access to your data is limited to the people who need it.

8. Changes

This policy may change; the date of the latest update is shown at the top of the page.