Privacy policy

YERA — secondary self-employed activity, company number 0775.404.934. Contact: hello@yera.care.

• Account: email, password (hashed), first name.
• Diagnostic: skin type, concerns, routine preferences.
• Orders: name, delivery address, cart contents, order history.
• Journal & ritual: tracking entries, notes, photos you choose to add.
• Technical: functional cookies, server logs (truncated IP, user agent).

• Contract performance: management of your account, orders and customer service.
• Legitimate interest: site security, fraud prevention, aggregated statistics.
• Consent: non-essential audience measurement cookies, marketing communications.
• Legal obligation: retention of invoices and accounting records.

• Account: until deletion by the user, then anonymization.
• Orders & invoices: 10 years (accounting obligation).
• Inactive prospects: 3 years from last contact.
• Cookies: 13 months maximum.

We use service providers strictly bound by contract:

• Hosting & infrastructure: Netlify, Supabase.
• Payment: Stripe Payments Europe, Ltd.
• Shipping: logistics carrier.
• Analytics tools: only after consent.

Some processors (in particular our host) may process data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses.

In accordance with the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability, as well as the right to define instructions regarding the fate of your data after your death.

To exercise these rights: hello@yera.care. You may also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).

We implement appropriate technical and organizational measures (HTTPS encryption, access control, logging) to protect your data against unauthorized access, loss or alteration.