Privacy policy
Last updated: 10 October 2026
Your privacy matters. This page explains what personal data we collect, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and Belgian law.
1. Data controller
Data is processed by Kelly Poivre (The KayKay Universe), company number BE1038.465.667, Hombeekseweg 17 A08, 1880 Kapelle-op-den-Bos, Belgium.
Contact for any question or request about your data: thekaykayuniverse@gmail.com.
2. What data and why?
| Data | Purpose | Legal basis |
|---|---|---|
| Email address (newsletter sign-up) | Sending you news, illustrations and launches | Your consent |
| Name, email, order details (purchase of a kit) | Processing the order, delivering the file, keeping accounts | Performance of the contract + legal obligation (accounting) |
| Technical data (IP address, hosting logs) | Keeping the website running and secure | Legitimate interest |
We do not collect any sensitive data and never ask for more than necessary.
3. Who has access to your data?
Your data is never sold or rented. It may be processed by technical service providers, only to make the service work:
- Netlify, Inc. — website hosting and collection of newsletter sign-ups (servers may be located in the United States, with appropriate contractual safeguards).
- Ko-fi — our online shop platform: it records orders and delivers the files. We can see your name, your email address and the product you bought.
- Stripe and PayPal — secure payment processing. Your payment details are processed directly by these providers, under their own privacy policies; we have no access to them.
- Google Fonts — a font may be loaded from Google's servers, which involves the technical transfer of your IP address.
- Google (Gmail) — for our email communication.
Some of these providers are located outside the European Union (United States, United Kingdom); these transfers rely on the safeguards provided by the GDPR.
4. How long do we keep your data?
- Newsletter: until you unsubscribe.
- Orders and invoices: for as long as Belgian accounting and tax obligations require (up to 7 years).
5. Cookies
The website does not use advertising cookies or tracking tools. Only technical elements strictly necessary for the website to work may be used. When you visit the Ko-fi shop, Ko-fi's own cookies and policy apply. If an audience measurement tool is added in the future, this page will be updated and your consent requested where required.
6. Your rights
Under the GDPR, you have the following rights: access, rectification, erasure, restriction, objection, data portability, and the right to withdraw your consent at any time (without retroactive effect). To exercise them, write to us at thekaykayuniverse@gmail.com. We will reply as soon as possible.
A complaint?
If you believe your rights are not being respected, you can contact the Belgian Data Protection Authority: Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels — contact@apd-gba.be — dataprotectionauthority.be.
7. Security
We take reasonable measures to protect your data against loss, unauthorised access or disclosure. As no transmission over the internet is completely secure, we cannot guarantee absolute security.
8. Changes
This policy may change, in particular when the printed books are released. The date of the last update is shown at the top of this page.