Privacy policy - Issanka

Last updated: 9 October 2026

This policy explains what personal data we collect on issanka.com, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Who is responsible for your data?

The data controller is:

Dix-5 (trading as Issanka), a French SARL with a share capital of €1,000
460 rue Pasteur, 34790 Grabels, France
SIREN 952 129 997 – Montpellier Trade and Companies Register (RCS)

For any question about your data: sophie@issanka.com
Personal data contact: Sophie Saint Blancat

2. What data do we collect, and why?

We only collect the data needed for each purpose.

Contact form

Data: name, email address, subject of the request, message
Purpose: to answer your request and, where relevant, send you a proposal.
Legal basis: our legitimate interest in answering the requests we receive, or pre-contractual steps taken at your request.
Retention: 3 years after our last exchange, unless a business relationship is ongoing.

Data: email address.
Purpose: to send you our news.
Legal basis: your consent, given when you subscribe.
Retention: until you unsubscribe. Every email contains an unsubscribe link.

Appointments and studio bookings

Data: name, email address and the information you enter when booking (time slot, chosen offer, optional message).
Purpose: to organise the appointment or the studio booking.
Legal basis: pre-contractual steps or performance of the booking contract.
Retention: 3 years after the appointment; 10 years for accounting documents (invoices), as required by law.
Payment: online payment is handled directly by Stripe, through Cal.com; Issanka never has access to your bank details.

Audience measurement (Google Analytics)

Data: pages viewed, visit duration, type of device and browser, approximate location, truncated IP address.
Purpose: to understand how the website is used in order to improve it.
Legal basis: your consent. Google Analytics is only loaded if you accept the “Statistics” category in the cookie banner.
Retention: 14 months. Google Analytics cookies expire after 13 months at most.

Embedded videos, podcasts and calendar

YouTube videos, Spotify podcasts and the Cal.com booking calendar are only loaded if you click on them. Before that click, no data is sent to these services. After the click, they may collect data and set cookies according to their own privacy policies.

Browsing and security

Like any website, our host records technical logs (IP address, date and time, requested page) to keep the website secure and running properly. These logs are kept for 12 months maximum.

3. Who receives your data?

Your data is intended for the Issanka team. It is never sold. It is also processed by our service providers, only for the purposes described above:

4. Transfers outside the European Union

Some providers (Google, Cal.com) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework when the provider is certified, or by the European Commission’s Standard Contractual Clauses.

5. Cookies

Details of the cookies used and how to manage your choices are available in our Cookie Policy (EU). You can change or withdraw your consent at any time from that page.

6. Your rights

You have the following rights over your data:

access: find out what data we hold about you;
rectification: correct inaccurate data;
erasure: ask for your data to be deleted;
restriction of and objection to processing;
portability: receive your data in a readable format;
withdrawal of consent at any time, for the newsletter or cookies;
set instructions regarding the fate of your data after your death.

To exercise these rights, write to us at sophie@issanka.com or by post to the address given in section 1. We reply within one month. Proof of identity may be requested if there is any doubt about your identity.

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the CNIL (French data protection authority): www.cnil.fr.

7. Security

We implement appropriate technical and organisational measures to protect your data: secure connection (HTTPS), restricted access to the website administration, regular backups.

8. Changes

This policy may be updated, for example when a new service is added to the website. The date of the last update is shown at the top of the page.