Skip to Content

Privacy Policy

KraftyU.com – KraftyU by UNITY SAS / UNITY IS THE KEY SAS

Last updated: June 10, 2026

This Privacy Policy is intended to inform users of KraftyU.com about how their personal data is collected, used, stored, and protected when browsing the website, creating a customer account, placing orders, downloading digital files, contacting customer service, and in connection with shipping, billing, and business operations.

By using KraftyU.com, users acknowledge that they have read this Privacy Policy.

Article 1 – Data Controller

The data controller responsible for the personal data collected through KraftyU.com is:

UNITY IS THE KEY SAS, operating under the trade name KraftyU

Simplified joint-stock company

Registered office: 9 Avenue d’Italie, 68110 Illzach, France

SIREN: 837 659 523

Mulhouse Trade and Companies Register (RCS)

APE Code: 5811Z

E-mail: unityisthekeysas@gmail.com

Phone: +33 7 82 98 98 81

The data controller determines the purposes and means of processing personal data in connection with the operation of KraftyU.com.

Article 2 – Personal Data Collected

When using KraftyU.com, the following personal data may be collected:

2.1 Identification Data

  • last name;
  • first name;
  • e-mail address;
  • phone number;
  • postal address;
  • billing address;
  • shipping address;
  • country of residence or delivery.

2.2 Order Data

  • products ordered;
  • fichiers numériques achetés;
  • selected customization options;
  • specific customer requests;
  • order history;
  • order amounts;
  • shipping method;
  • tracking number;
  • order status;
  • customer service communications.

2.3 Data Related to Customized Products

For custom orders, customers may voluntarily submit certain materials, including:

  • images;
  • texts;
  • logos;
  • 3D files;
  • models;
  • manufacturing instructions;
  • color, format, size, or customization specifications.

The customer is responsible for any content submitted to KraftyU for customization purposes.

2.4 Payment Data

Payments are processed through secure payment service providers, including PayPal or a credit card payment provider.

KraftyU does not store customers’ full credit card numbers.

Payment service providers may process the data required to authorize the transaction, including:

  • name of the payment method holder;
  • e-mail address;
  • amount paid;
  • payment date;
  • transaction ID;
  • payment status.

2.5 Browsing Data

When browsing the website, certain technical data may be collected automatically, including:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • pages viewed;
  • date and time of access;
  • data related to cookies and tracking technologies;
  • website traffic statistics.

Article 3 – Purposes of Data Processing

The personal data collected is used for the following purposes:

  • to enable browsing on the website;
  • to create and manage a customer account;
  • to process orders;
  • to process payments;
  • to send order confirmations;
  • to enable the downloading of purchased digital files;
  • to manufacture the products ordered;
  • to carry out the customizations requested by the customer;
  • to arrange the delivery of physical products;
  • to provide carriers with the information required for delivery;
  • to manage pre-orders;
  • to track orders;
  • to respond to customer service inquiries;
  • to manage claims, returns, warranties, and disputes;
  • to issue and retain invoices;
  • to comply with accounting, tax, and legal obligations;
  • to secure the website and prevent fraud;
  • to improve the operation of the website;
  • to measure website traffic when analytics tools are used;
  • to send marketing communications only when permitted by applicable regulations.

Article 4 – Legal Bases for Data Processing

The data processing activities carried out by KraftyU are based on the following legal grounds:

4.1 Performance of the Contract

The data is necessary to process orders, deliver products, provide access to digital files, customize items, process payments, and provide customer support.

4.2 Legal Obligations

Certain data must be retained to comply with the accounting, tax, administrative, or legal obligations applicable to KraftyU.

4.3 Consent

Customer consent may be requested, in particular, for:

  • subscribing to a newsletter;
  • certain cookies or tracking technologies that are not strictly necessary;
  • certain marketing communications;
  • the use of certain content voluntarily submitted by the customer for a specific purpose, when necessary.

4.4 Legitimate Interest

KraftyU may process certain data based on its legitimate interests, in particular, to:

  • ensure the security of the website;
  • prevent fraud;
  • improve its services;
  • respond to customer inquiries;
  • retain evidence of communications and transactions;
  • defend its rights in the event of a dispute.

Article 5 – Recipients of the Data

The personal data collected may be accessed, to the extent necessary for their respective purposes, by the following recipients:

  • authorized personnel or representatives of UNITY IS THE KEY SAS;
  • technical service providers responsible for hosting, maintaining, or operating the website;
  • payment service providers, including PayPal or credit card payment providers;
  • carriers, including Mondial Relay, FedEx, or any other carrier used for shipping;
  • service providers responsible for sending transactional emails;
  • billing or accounting service providers;
  • administrative, tax, or judicial authorities when required by law.

KraftyU does not sell its customers’ personal data to third parties.

Article 6 – Transfers Outside the European Union

KraftyU may sell and ship products internationally.

In certain cases, the data required for delivery or payment may be transferred outside the European Union, particularly when the customer resides in a country outside the European Union or when the carrier, payment service provider, or technical service provider involved processes data internationally.

When necessary, KraftyU ensures that these transfers are handled in accordance with applicable regulations, including through the use of appropriate safeguards when required.

Article 7 – Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, subject to applicable legal retention requirements.

As a general guideline:

  • customer account data is retained for as long as the account remains active, then deleted or archived after a reasonable period of inactivity;
  • lorder-related data is retained for as long as necessary to fulfill the order, provide customer service, honor warranties, and maintain proof of the transaction;
  • invoices and accounting records are retained for the applicable statutory period;
  • prospect or newsletter data is retained until the user unsubscribes or withdraws consent;
  • data required to manage a dispute may be retained for the applicable statute of limitations;
  • - files submitted for customization are retained for as long as necessary to fulfill the order, then deleted or archived as needed for follow-up, record-keeping, or reproduction requested by the customer.

Article 8 – Data Submitted for Customizations

For custom 3D or UV printing orders, customers may submit files, images, text, logos, or models to KraftyU.

These materials are used solely to review, prepare, manufacture, and deliver the custom order, unless otherwise agreed by the customer.

The customer warrants that they hold all necessary rights to the submitted content and that it does not infringe upon the rights of any third party.

KraftyU may refuse a customization request if the submitted content is clearly unlawful, infringing, offensive, defamatory, hateful, discriminatory, or otherwise contrary to these terms.

Article 9 – Cookies and Tracking Technologies

KraftyU.com may use cookies or similar technologies.

Certain cookies are strictly necessary for the website to function, particularly to:

  • enable browsing;
  • retain the contents of the shopping cart;
  • secure the session;
  • enable payment processing;
  • ensure the proper operation of the online store.

Other cookies may be used, subject to the user’s consent when required, particularly to:

  • measure website traffic;
  • improve the user experience;
  • personalize certain content;
  • provide features related to social media;
  • carry out marketing or advertising activities.

During their first visit, users may be asked to accept, reject, or configure non-essential cookies.

Users may also configure their browser to block or delete certain cookies. However, rejecting certain cookies may limit some of the website’s features.

Article 10 – Newsletter and Marketing Communications

KraftyU may offer users the option to subscribe to a newsletter or receive marketing communications.

Subscription is based on the user’s consent when such consent is required.

Users may unsubscribe at any time by clicking the unsubscribe link included in the relevant emails or by contacting KraftyU at the following address:

unityisthekeysas@gmail.com

Article 11 – Data Security

KraftyU implements reasonable security measures to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction.

These measures may include:

  • the use of a secure website;
  • restricted access to data;
  • the use of secure payment service providers;
  • limiting access to authorized personnel only;
  • reasonably maintaining and updating the technical tools used;
  • backing up or archiving data when necessary.

Despite these measures, no computer system can guarantee absolute security. Users are encouraged to protect their login credentials and refrain from sharing them with third parties.

Article 12 – Droits des utilisateurs

In accordance with applicable regulations, users have the following rights regarding their personal data:

  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to object;
  • the right to restrict processing;
  • the right to data portability when applicable;
  • the right to withdraw consent at any time when processing is based on consent;
  • the right to provide instructions regarding the handling of their data after their death when provided for by applicable regulations.

To exercise these rights, users may contact KraftyU at the following address:

unityisthekeysas@gmail.com

The request must specify the right being exercised and provide sufficient information to identify the person making the request. If there is reasonable doubt regarding the requester’s identity, KraftyU may request additional information necessary to verify their identity.

Article 13 – Filing a Complaint With the CNIL

If users believe that their rights have not been respected or that the processing of their personal data does not comply with applicable regulations, they may file a complaint with the French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL).

Website: https://www.cnil.fr.

Article 14 – Children’s Data

The products offered on KraftyU.com may include collectibles, minifigures, printed bricks, merchandise, digital files, or items intended for collectors.

The website is not intended to knowingly collect personal data from minors without the consent of their legal guardian.

If a legal guardian believes that data concerning a minor has been collected without authorization, they may contact KraftyU to request its deletion.

Article 15 – Links to Third-Party Websites

KraftyU.com may contain links to third-party websites, including payment platforms, carriers, social media platforms, or partner services.

KraftyU is not responsible for the privacy practices of these third-party websites. Users are encouraged to review the privacy policies of each external service.

Article 16 – Social Media

KraftyU may maintain a presence on various social media platforms.

When users interact with KraftyU through these platforms, certain data may be processed directly by the relevant social media platform in accordance with its own terms of use and privacy policy.

KraftyU is not responsible for data processing activities carried out independently by social media platforms.

Article 17 – Changes to the Privacy Policy

KraftyU reserves the right to modify this Privacy Policy at any time, particularly to reflect legal, technical, commercial, or organizational developments.

The applicable version is the version published on the website at the time it is accessed.

Users are encouraged to review this Privacy Policy regularly.

Article 18 – Contact

For any questions regarding this Privacy Policy or the processing of personal data, users may contact KraftyU:

UNITY IS THE KEY SAS – KraftyU

9 avenue d’Italie - 68110 Illzach - France

E-mail: unityisthekeysas@gmail.com

Phone: +33 7 82 98 98 81