PRIVACY POLICY
Brand YOU Day
BY VISITING www.brandyouday.com YOU ARE CONSENTING TO OUR PRIVACY POLICY.
(Updated: 15 October 2025)
This policy replaces all previous versions of our privacy statement. Please read it carefully. By visiting or using www.brandyouday.com (the “Site”) or purchasing any services or digital products from us, you accept this Privacy Policy. Brand YOU Day (also referred to as “we,” “us” or “our”) acts as the data controller for the personal information collected through this Site.
1 – DATA WE COLLECT
We collect the following types of personal data from you when you interact with the Site, complete forms, send us messages, buy our products or services, or participate in our events:
1.1 Contact and Identity Data
• Identifiers such as your name, postal address, email address and telephone number when you sign up for newsletters, download free resources, participate in webinars or purchase products or services.
• Payment data (e.g., the last four digits of your credit card number) when you make a purchase. Payments are processed securely by third‑party payment processors—we do not store your full credit‑card details.
• Social media usernames or similar identifiers when you interact with our pages on social networks.
1.2 Usage and Technical Data
We collect information about how you use the Site, including IP addresses, browser type, device type, operating system, referral source, pages viewed and session length. This information is collected automatically through cookies and analytics tools (e.g., Google Analytics, Facebook/Instagram pixels, and Kajabi). We use this data to analyse website traffic, deliver relevant content and advertising, and improve our services. The legal basis for this processing is our legitimate interest in understanding how users use the Site and improving it.
1.3 Customer Data
If you purchase products or services from us, we collect additional information such as billing address, shipping address, order history, and other details necessary to fulfil your order and comply with tax and accounting obligations. The legal basis for processing this data is your consent and our contractual obligation to deliver the services you requested.
1.4 Communications and User‑Generated Content
We collect the information you share with us when you send emails, fill in contact forms, comment on our blog or social channels, or participate in surveys. This may include personal stories, business information, feedback and other content. We process this data to respond to your requests, deliver customer support and engage with our audience. The legal basis for this processing is consent or our legitimate interest in growing our business and keeping records.
1.5 Data from Third Parties
We may receive personal data from service providers such as payment processors, advertising networks, analytics providers and social media platforms. We use this information to maintain accurate records, deliver targeted advertising and analyse the effectiveness of our marketing.
2 – HOW WE USE YOUR DATA
We use personal data for the following purposes:
1. Service delivery and customer care. To process orders, deliver products and services, manage subscriptions and respond to customer enquiries.
2. Marketing and advertising. To send newsletters, updates, promotional messages and invitations to webinars or events if you have consented to receive such communications. We may use your browsing behaviour and purchase history to tailor our marketing. You can opt out of receiving marketing emails at any time via the “unsubscribe” link or by contacting us.
3. Analytics and service improvement. To analyse trends, administer the Site, track user movements and gather demographic information to improve our content and services.
4. Compliance and legal obligations. To comply with legal, regulatory and tax obligations, enforce our terms and prevent fraud or abuse.
5. Development and optimisation of AI‑assisted tools. We may use artificial intelligence or automated tools to help draft content (e.g., blog posts, marketing copy), summarise responses, translate text or provide recommendations. These systems may analyse information (such as your inquiries or comments) to deliver the requested content or to help us improve the relevance of our communications. We do not rely solely on automated decision‑making to make decisions that produce legal or similarly significant effects for you, and we do not use your personal information to train our own AI models. When personal data is used to train AI models and may potentially be memorised, individuals must be informed; therefore, if we intend to use your data for such training, we will seek your explicit consent in advance.
3 – COOKIES AND TRACKING TECHNOLOGIES
Cookies are small text files stored on your device. We use session cookies and persistent cookies to remember your preferences, understand how you navigate the Site and deliver relevant advertising. You can accept or decline cookies in your browser settings. Disabling cookies may affect the functionality of the Site.
4 – AUTOMATED DECISION‑MAKING AND PROFILING
We may use profiling to segment audiences and tailor marketing messages based on your interactions with our content and services. We do not use profiling or automated decision‑making in a way that produces legal or similarly significant effects. Some U.S. states (e.g., Colorado, Connecticut, Virginia and forthcoming rules in California, Delaware, New Jersey, Oregon and Texas) require companies to inform users about automated processing and provide mechanisms to opt out. If you reside in those states and do not wish us to use automated tools for marketing or analytics, please contact us using the details in section 14.
5 – SHARING YOUR DATA
We share your information with trusted third parties that help us operate the Site and deliver our services:
• Service providers who assist with payment processing, website hosting, email delivery, marketing automation, customer relationship management, analytics and AI‑assisted content generation. These providers process your data only on our instructions and are bound by confidentiality and data‑protection agreements.
• Professional advisers such as lawyers, auditors, accountants or insurers where necessary for the purposes of compliance, legal claims or debt collection.
• Regulators or authorities when required by law, to prevent fraud, protect our rights or the rights of others, or respond to legal processes.
• Business transfers. In the event of a merger, acquisition, sale of assets or insolvency, personal data may be transferred to another organisation as part of the transaction.
We do not sell your personal information. We may deliver advertising through platforms such as Facebook and Instagram; however, we never share your personal data with unrelated third parties and we take steps to ensure that our partners respect privacy requirements.
6 – DATA SECURITY
We take reasonable and appropriate measures to protect your personal data against unauthorised access, loss, misuse or alteration. We use secure servers, encryption, strong passwords and restrict access to those employees and contractors who need to know your information to perform their duties. However, no method of transmission over the Internet or electronic storage is completely secure; you acknowledge that information you voluntarily share could be intercepted by a third party and that we cannot guarantee absolute security. If you believe your data has been compromised, please notify us immediately using the contact details below.
7 – DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. We may anonymise certain data for research or statistical purposes and use it indefinitely without further notice to you. Once data is no longer needed, we will securely delete or anonymise it.
8 – INTERNATIONAL TRANSFERS
Our servers and service providers may be located in France, the United States or other countries. When we transfer personal data outside the European Economic Area (EEA), we rely on lawful transfer mechanisms such as the EU–U.S. Data Privacy Framework, Standard Contractual Clauses or equivalent safeguards. The EU General Court recently upheld the EU–U.S. Data Privacy Framework, confirming that U.S. organisations certified under the framework can receive personal data without additional authorization. We monitor developments and will update our practices if adequacy decisions change.
9 – YOUR RIGHTS
9.1 Rights Under European Law
Under the General Data Protection Regulation (GDPR), you have the right to:
1. Access – Request a copy of the personal data we hold about you.
2. Rectification – Ask us to correct inaccurate or incomplete personal data.
3. Erasure – Request deletion of your personal data when there is no legitimate reason for us to continue processing it.
4. Restrict processing – Ask us to limit the processing of your personal data in certain circumstances.
5. Object – Object to processing based on legitimate interests, direct marketing or profiling.
6. Portability – Receive your data in a machine‑readable format or request its direct transfer to another controller.
7. Withdraw consent – If processing is based on consent, you may withdraw your consent at any time.
To exercise any of these rights, please contact us at the email address listed in section 14. We may require proof of identity and may charge a small fee where permitted by law.
9.2 Rights Under U.S. State Laws
Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia and others) have additional rights, including the right to opt out of targeted advertising, the sale or sharing of personal data, and certain automated decision‑making. We honour these rights by providing clear links or mechanisms to opt out.
10 – ANTI‑SPAM POLICY
We comply with anti‑spam laws. Every marketing email includes an unsubscribe link. If we transfer or sell our business, we will notify you of any changes to this policy.
11 – THIRD‑PARTY LINKS
Our Site may contain links to other websites. We are not responsible for the privacy practices of third‑party sites. Please review the privacy policy of any website you visit via our links.
12 – CHILDREN’S PRIVACY
We do not knowingly collect personal data from children under 13 years of age. If you believe that we have collected such data, please contact us and we will promptly delete it.
13 – CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in law, technology or our practices. Material changes (e.g., new ways of using your data, significant AI‑related processing) may require us to notify you or obtain additional consent. The date of the most recent update will always appear at the top of this document. We encourage you to review this policy regularly to stay informed.
14 – CONTACT INFORMATION
If you have any questions, wish to exercise your data‑protection rights, or want to make a complaint, please contact us at:
Brand YOU Day
10 rue de l’Eglise, 33420 France
Email: info@brandyouday.com
For matters relating specifically to data protection in the United States, you can also contact us at info@brandyouday.com.
If you are an EU resident and believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) or your local supervisory authority.