Privacy Policy

The controller of your data is Ektaya LLC, a U.S. limited liability company established outside the European Union, represented by Sébastien Robinet, who runs the Ektaya site.

Registered in the State of Wyoming (USA).

Address: Northwest Registered Agent Service Inc, 30 N Gould St, Ste N, Sheridan, WY 82801, USA

Website: https://ektaya.com

Contact: contact@ektaya.com

Because Ektaya LLC is established outside the European Union, it has appointed a representative within the Union, in accordance with Article 27 of the GDPR. This representative is your point of contact, in addition to our direct contact, for any question about your data.

Representative in the Union: Denis Robinet, based in France, reachable at contact@ektaya.com.

Contact form: your name, your email address, the subject and the content of your message. We use this only to read your request and reply to it.

Newsletter signup: your email address, to send you our news and content.

Session request: your first name, your email address, whatever you choose to share about what brings you here (this may touch on your health; you never have to say more than you want to), and your availability. This information reaches us by email (through Brevo) and we use it only to answer your request and organize the session.

Payment: payment of contributions (after the session, through a payment link) is handled by Stripe, our payment provider. Payment data (bank card in particular) is entered and processed directly by Stripe, in its secure environment. We never store your bank details. If you give a session as a gift, you also tell us the first name of the person you are giving it to.

To reply to your message and follow up on your request.

To send you the newsletter, only if you are subscribed.

To organize your session and collect your contribution.

We never sell your data and we do not use it for advertising.

Contact form: our legitimate interest in replying to people who write to us, as well as the steps you take before a contract by reaching out to us (pre-contractual measures).

Newsletter: your consent, freely given when you sign up. You can withdraw it at any time through the unsubscribe link in every email.

Session request and payment: the preliminary steps taken at your request (pre-contractual measures), then the performance of the contract for your session. If you share information about your health in your request, we process it on the basis of your explicit consent, given by ticking the box provided in the form. You can withdraw it at any time by writing to us.

Messages received through the contact form: kept for a maximum of 3 years after our last exchange, then deleted.

Newsletter signup: kept as long as you are subscribed. As soon as you unsubscribe, your address is removed from the mailing list.

Session requests that go no further: deleted after 2 months.

Data tied to a completed session and its payment: kept for the legal periods that apply to accounting records (generally up to 10 years), then deleted.

Brevo: email-sending service (based in France, within the European Union). It processes your email address to deliver contact messages, session requests and the newsletter.

Stripe: payment provider (based in the United States, certified under the EU-US Data Privacy Framework). It processes your payment data to collect your contributions.

Hostinger International Ltd.: website host (61 Lordou Vironos Street, 6023 Larnaca, Cyprus), with servers located in Frankfurt, Germany.

Data from the contact form, session requests and the newsletter is processed within the European Union, through Brevo (based in France).

Some data is transferred to the United States: the data entrusted to Stripe (payment). This transfer is covered by appropriate safeguards: the EU-US Data Privacy Framework (Stripe is certified) and/or standard contractual clauses approved by the European Commission. These safeguards are meant to give your data a level of protection equivalent to that of the European Union.

The site itself is hosted in the European Union, in Frankfurt (Germany).

Under the GDPR, you have the following rights over your data at any time: the right of access, rectification, erasure, objection, restriction of processing and portability.

To exercise any of these rights, simply write to us at contact@ektaya.com. We commit to replying within one month.

If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission nationale de l'informatique et des libertés), the French data protection authority, or the data protection authority of the country where you live: www.cnil.fr.

This site uses no audience-measurement or advertising cookies. We do not track your browsing and we install no marketing trackers.

The only storage used is strictly necessary for the site to work properly (for example, remembering that the loading screen has already been shown during your visit). This type of storage is exempt from consent under the regulations. That is why you are not asked to accept a cookie banner.