Privacy policy
Last updated: 25 October 2026
The site has no accounts, no online payment and no cookies. We only receive personal data when you write to us.
Who we are
This site is published by KLEIN & CO (SAS), 25 rue des Fêtes, 75019 Paris, France, which is responsible for your data. Contact: contact@yaelandabi.com.
Visiting the site
Our host, Cloudflare, processes the technical data needed to deliver and protect the site (IP address, browser type, pages requested). Product pictures and melodies load from Sanity's image service, which receives the same technical data. We do not use this data to identify you.
Audience measurement
We use Cloudflare Web Analytics, which counts visits without cookies and without fingerprinting. We only see totals (pages viewed, countries, devices).
Ordering on WhatsApp
The "Order on WhatsApp" button first counts the click (product, language and version only: no IP address, no identifier), then opens WhatsApp. Our conversation takes place on WhatsApp, operated by Meta under its own privacy policy. We use your number and messages only to answer you and handle your order, and keep them for up to 3 years after our last exchange. If you place an order, its invoice is kept for 10 years, as French accounting law requires.
Contact form
When you send the form, your name, email address and message go to Web3Forms, a form service, which forwards them to our mailbox (Gmail, Google). Web3Forms keeps a copy for 30 days. We use your message only to reply, and keep it for up to 3 years after our last exchange.
Cookies and local storage
We set no cookies. If you use the accessibility menu, your choices (text size, contrast and so on) are saved in your browser's local storage. They never leave your device, and clearing your browser data removes them.
Legal basis
Answering your messages and orders: steps taken at your request before an order, and our legitimate interest in replying (GDPR, art. 6(1)(b) and (f)). Delivering, protecting and measuring the site: our legitimate interest (art. 6(1)(f)).
Service providers and transfers
Cloudflare (hosting, audience measurement), Sanity (images and sound), Web3Forms (contact form), Google (mailbox) and Meta (WhatsApp) may process data outside the European Union, including in the United States and India. These transfers are protected by the EU–US Data Privacy Framework (Cloudflare, Google, Meta) and by the European Commission's standard contractual clauses (Cloudflare, Sanity, Web3Forms).
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to contact@yaelandabi.com; we reply within one month. You can also complain to the CNIL (www.cnil.fr). Residents of Israel may also contact the Privacy Protection Authority.
Changes
We will update this page if the site changes how it handles data, and change the date above.