Privacy Policy

Yidemak SARL (hereinafter "we", "our" or "Yidemak") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, share and protect your personal data. This policy applies to all services provided by Yidemak, including our website, applications, platforms and any other services we offer. By using our services, you accept the practices described in this privacy policy. If you do not agree with this policy, please do not use our services.

The data controller for your personal data is: Yidemak SARL 123 Innovation Avenue 75001 Paris, France SIRET: 123 456 789 00012 Email: privacy@yidemak.com Phone: +33 1 23 45 67 89 For any questions regarding the processing of your personal data, you can contact our Data Protection Officer (DPO) at: dpo@yidemak.com

We collect different types of personal data: ● Identification data: last name, first name, email address, phone number ● Professional data: company, position, industry sector ● Connection data: IP address, browser type, operating system ● Navigation data: pages visited, visit duration, traffic source ● Project data: information related to your requests and projects ● Payment data: banking information (processed securely by our providers) We also collect data via cookies and similar technologies. For more information, see our Cookie Policy.

We process your personal data on the following legal bases: ● Consent: for sending newsletters and marketing communications ● Contract performance: to provide our services and manage your projects ● Legitimate interest: to improve our services, analyze usage and ensure security ● Legal obligation: to comply with tax and accounting laws You can withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

We use your personal data to: ● Provide and manage our services ● Process your requests and answer your questions ● Manage your projects and ensure follow-up ● Send important communications about our services ● Send newsletters and marketing offers (with your consent) ● Improve our services and develop new features ● Analyze service usage and optimize user experience ● Ensure system security and prevent fraud ● Comply with our legal and regulatory obligations We never sell your personal data to third parties.

We may share your data with: ● Service providers: hosting (AWS, Azure), payment (Stripe), analytics (Google Analytics), email (SendGrid) ● Technology partners: only as part of providing our services ● Legal authorities: if required by law or to protect our rights All our providers are contracted to guarantee the protection of your data and can only use it for specific purposes we have authorized. We do not transfer your data outside the European Union without appropriate safeguards (standard contractual clauses, Privacy Shield, etc.).

We retain your personal data only for as long as necessary for the purposes for which it was collected: ● Prospect data: 3 years from last contact ● Customer data: duration of contractual relationship + 5 years (accounting obligations) ● Navigation data: 13 months maximum ● Marketing data: until consent withdrawal + 3 years After these periods, your data is deleted or irreversibly anonymized.

In accordance with GDPR, you have the following rights: ● Right of access: obtain a copy of your personal data ● Right to rectification: correct inaccurate or incomplete data ● Right to erasure: delete your data under certain conditions ● Right to restriction: restrict processing of your data ● Right to portability: receive your data in a structured format ● Right to object: object to processing of your data ● Right to withdraw consent: at any time for consent-based processing To exercise your rights, contact us at: privacy@yidemak.com We will respond to your request within 30 days. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

We implement appropriate technical and organizational measures to protect your personal data: ● SSL/TLS encryption for all data transmissions ● Encryption of data at rest (AES-256) ● Multi-factor authentication for system access ● Regular security audits and penetration testing ● Strict access controls and principle of least privilege ● 24/7 threat monitoring and detection ● Encrypted backups and business continuity plan ● Regular training of our teams in security best practices In case of data breach, we will inform you within 72 hours in accordance with GDPR.

We use cookies and similar technologies to improve your experience: ● Essential cookies: necessary for site operation ● Performance cookies: analyze usage and improve performance ● Functional cookies: remember your preferences ● Marketing cookies: personalize ads (with your consent) You can manage your cookie preferences via your browser settings or our consent banner. For more information, see our detailed Cookie Policy.

Our services are not intended for persons under 16 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. We will delete this data as soon as possible.

We may update this privacy policy occasionally to reflect changes in our practices or for other operational, legal or regulatory reasons. We will notify you of any significant changes by email or via a notification on our website. The "last updated" date at the top of this page indicates when the policy was last revised. We encourage you to regularly review this policy to stay informed about how we protect your data.

For any questions regarding this privacy policy or the processing of your personal data: Email: privacy@yidemak.com Data Protection Officer: dpo@yidemak.com Postal address: Yidemak SARL Data Protection Department 123 Innovation Avenue 75001 Paris, France We are committed to responding to your questions within 48 business hours.