The purpose of this confidentiality policy is to inform users of the site about:

  • The way in which their personal data is collected; Any information allowing a user to be identified is considered personal data. As such, this may include: their first and last names, their age, their postal or email address, their location or even their IP address (non-exhaustive list); 
  • The rights they have regarding this data; 
  • The recipients of this personal data; 
  • The site's cookie policy. 

This confidentiality policy supplements the legal notices and the general conditions of use which can be consulted by following the link: legal notices , CGV . 


In accordance with article 5 of European Regulation 2016/679, personal data are:   

  • Processed in a lawful, fair and transparent manner with regard to the person concerned  ; 
  • Collected for specific, explicit and legitimate purposes, 
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; 
  • Accurate and, where necessary, kept up to date. All reasonable measures must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay; 
  • Kept in a form allowing the identification of the persons concerned for a period not exceeding that necessary for the purposes for which they are processed; 
  • Processed in a manner that ensures appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures. 

Processing is only lawful if and to the extent that at least one of the following conditions is met: 

  • The data subject has consented to the processing of his or her personal data for one or more specific purposes;
  • The processing is necessary for the performance of a contract to which the data subject is party or for the execution of pre-contractual measures taken at the request of the data subject; 
  • The processing is necessary for compliance with a legal obligation to which the data controller is subject; 
  • The processing is necessary to safeguard the vital interests of the data subject or another natural person; 
  • The processing is necessary for the performance of a mission of public interest or relating to the exercise of public authority vested in the controller; 
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the the person concerned is a minor. 


Data collected by our site:

We collect, via the site, two types of information:

1. Your personal information collected when you place an order or when you contact us by email or messaging;

In accordance with article 4 of the General Data Protection Regulation 2016/679 of April 27, 2016, the terms “Data” or “Personal Data” designate any information relating to an identified or identifiable natural person (hereinafter referred to as " Concerned person ") ; is deemed to be an “identifiable natural person” a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to their physical, physiological, genetic, psychological, economic, cultural or social identity.

These data are mostly collected directly from the people concerned, when they, in a non-limiting manner:

  • Browse our website,
  • Create a personal account on our site,
  • Place an order on our site,
  • Make a request for information via live chat or contact customer service by email at ,
  • Apply for our job offers,
  • Participate in a game or competition,

2. The use of Cookies;

During your navigation on our website, we may collect, in accordance with the applicable legislation in force and with your consent, navigation data. To collect this information, we use cookies.

A “Cookie”: is a text file placed on your hard drive by the server of the site you are visiting. It generally contains the name of the server that deposited it, an identifier in the form of a unique number and an expiration date. Its purpose is to collect information relating to your browsing in order to offer you services adapted to your terminal (computer, mobile, or tablet).

In accordance with CNIL recommendations, the maximum lifespan of cookies or tracers is 13 months. Functional and technical cookies do not require the collection of user consent.

If you do not wish to use cookies, you are free not to accept them when you log in, or to deactivate them from your browser subsequently, by going to your browser settings, in the browsing history, section “cookies and website data”, and checking the “delete” box.

Please note that certain information is mandatory and necessary to process your application. Failure to respond to a mandatory field may compromise the proper follow-up of your file.

The personal information communicated is recorded and stored on our server hosted at Shopify Inc, located at 151 O'Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8 (CANADA) and is kept on a secure server protected by a privacy shield. fire.

Your payment card information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). 

Information relating to your purchase transaction is retained for as long as necessary to complete your order. Once your order is finalized, the information relating to the purchase transaction is deleted.

We will only process or use your data to the extent necessary to contact you, process your requests, create and manage your user profile, as well as your access to our online services and finally carry out statistical studies. .

Your personal information is kept for a period which cannot exceed 3 years unless: 

- You exercise your right to delete data concerning you, under the conditions described below; 

- A longer retention period is authorized or imposed under a legal or regulatory obligation.

During this period, we put in place all means capable of ensuring the confidentiality and security of your personal data, so as to prevent their damage, deletion or access by unauthorized third parties.

Access to your personal data is strictly limited to our staff and, where applicable, our subcontractors. 

The subcontractors in question are subject to an obligation of confidentiality and may only use your data in accordance with our contractual provisions and applicable legislation. 

Apart from the cases set out above, we undertake not to sell, rent, transfer or give third parties access to your data without your prior consent, unless we are obliged to do so for a legitimate reason (obligation legal, fight against fraud or abuse, exercise of defense rights, etc.).

Some of the recipients of your data are located outside the European Union. The following guarantees have been taken to ensure a sufficient level of protection of your information: 

- Either the country of the recipient(s) offers an adequate level of protection by decision of the European Commission;

- Either the recipient(s) adhere to the principles of the “Privacy Shield”; 

- Either the transfer is supervised, in accordance with the requirements of European Regulation No. 2016/679/EU of April 27, 2016 (standard protection clauses adopted by the European Commission or the CNIL, binding corporate rules validated by the CNIL, code of conduct approved by the CNIL or certification issued by an approved certification body).

In accordance with the “information technology and freedoms” law of January 6, 1978 as amended and European Regulation No. 2016/679/EU of April 27, 2016 (applicable from May 25, 2018), you have the right to access and rectify , portability and erasure of your data or even limitation of processing. You can also, for legitimate reasons, object to the processing of data concerning you.

You can, subject to the production of valid proof of identity, exercise your rights by contacting:

Online at: ,


By mail : 

SAS KYS (Karma Yoga Shop)

84 Avenue de la République

75011 PARIS

If you no longer wish to receive our news and requests (by telephone, SMS, postal or electronic mail) and invitations, you have the option of telling us via the link reserved for this purpose, or of modifying your choices by contacting us under the conditions mentioned above or, where applicable, by modifying the parameters of your online profile. The same applies if you do not wish to receive news, invitations or promotional offers from our partners.


Any user concerned by the processing of their personal data can avail themselves of the following rights, in application of European regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):   

  • Right of access, rectification and right to erasure of data (set out respectively in Articles 15, 16 and 17 of the GDPR); 
  • Right to data portability (article 20 of the GDPR);
  • Right to limitation (article 18 of the GDPR) and to object to data processing (article 21 of the GDPR); 
  • Right not to be the subject of a decision based exclusively on an automated process; 
  • Right to determine the fate of data after death; 
  • Right to refer the matter to the competent supervisory authority (article 77 of the GDPR). 

To exercise your rights, please send your letter to:

SAS KYS (Karma-Yoga-Shop)

84 Avenue de la République

75011 PARIS

Or by email to: ,

In order for the data controller to grant his request, the user may be required to provide him with certain information such as: his first and last names, his email address and his account number.


The publisher of the site reserves the right to modify this confidentiality policy at any time so that its content complies with the legal and regulatory provisions in force.

Any modifications cannot have an impact on purchases previously made on the site, which remain subject to the Policy in force at the time of the purchase and as accepted by the user upon validation of the purchase. 

The user is invited to read this Policy each time he uses our services, without it being necessary to formally notify him. 

Practical Links:

For any additional information or complaints, you can contact the National Commission for Informatics and Liberties (more information on

Finally, we inform you of the existence of the “Bloctel” telephone canvassing opposition list, on which you can register (