Yekum Privacy Policy

Last revised: 2026-07-23

(English version of politica-privacidad.md. Both say the same thing. If the two ever differ, the Spanish version is the reference one.)

1. Who is responsible for your data

Yekum is a project run by a United States company. We are located in, and we operate from, the United States. That means your data is stored and processed there, whether you are in Spain, in another European Union country, or anywhere else.

Why we comply with the GDPR even though we are a US company: because we offer our content and our mailing list to people located in the European Union. Article 3.2 of the GDPR says that in that case the European regulation applies to us anyway. So you get the same guarantees and the same rights you would get from a European company, even though your data is processed outside Europe.

2. What data we collect

Only what you give us when you sign up, plus the record that it was you who signed up:

We keep that proof for one specific reason: the GDPR requires us to be able to demonstrate that you gave us your consent (Article 7.1). Without that record we could not demonstrate it, and you would have no way of checking exactly what you accepted.

We do not ask for, and do not want, any more data than that. We do not ask for your phone number, your age, or your postal address.

3. What we use your data for

We do not use your data for anything else, we do not profile you, and we never sell or share your email with third parties for their own advertising.

4. Our legal basis

The only legal basis is your consent (Article 6.1.a GDPR): you sign up yourself, by ticking the form's checkbox freely and voluntarily.

That consent also covers something worth saying plainly: by signing up you accept that your data is sent to the United States and processed there, because that is where the company is and where its tools are. We explain this in section 5.

How we prove that consent existed. We do not use a confirmation email. Instead, at the moment you submit the form we automatically record the proof described in section 2: date and time, the literal text accepted, page, language, IP, country and browser. That record is attached to your contact record and we can show it to you if you ask.

You can withdraw your consent at any time, no questions asked: every email includes an unsubscribe link, and you can also ask us by writing to the contact address. Unsubscribing has no consequences for you.

5. Where your data is processed, and who else sees it

This is the part that matters most to you, so we will say it clearly: if you are in the European Union, your data leaves the EU and is processed in the United States. This is not an exception or a one-off transfer: it is how the project normally works, because the responsible company is American and so are its tools.

The United States does not have a general data protection law equivalent to the European one, and US authorities may, in certain circumstances provided for by their legislation, access data held there. We are telling you because you have the right to know before you leave us your email.

We do not sell or share your data. To run the list we use these providers, acting as data processors:

Beyond those technical providers, we would only disclose data if required to do so by law or by a competent authority.

6. Cookies, measurement, and what we store in your browser

This website uses no cookies. Not ours, not anyone else's. That is why you will not see a cookie banner: there is nothing to accept.

What does exist is the following, and we would rather tell you:

7. How long we keep your data

8. Your rights and how to exercise them

Even though we are in the United States, if you are in the European Union you have these rights and we respect them just the same:

To exercise any of them, write to the contact address in section 1 stating which right you want to exercise. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can complain to the data protection authority of your own country of residence in the European Union. Each EU country has one, and it is yours that is competent: for example, the Agencia Española de Protección de Datos if you live in Spain, the CNIL if you live in France, the Garante if you live in Italy. The full list is published by the European Data Protection Board at edpb.europa.eu.

If you are outside the European Union, write to us anyway: we handle the requests that reach us, wherever you write from.

9. Minimum age

This mailing list is for people aged 18 or over only. Yekum is a project about children and young people, but the people we write to are adults: anyone over 18 who has a child or a young person in their life.

The 18 threshold is Yekum's own decision, not a legal minimum. It is stricter than any rule that applies to us, and we keep it on purpose.

So you can see where those legal minimums would come from, if we had not decided the above:

We stay above both: 18.

By ticking the form's checkbox you confirm that you are 18 or over. If we find that a minor has signed up, we will delete their data from the list. If you are a parent or guardian and you believe a minor in your care has subscribed, write to the contact address and we will delete it.

10. Changes to this policy

If anything relevant changes (for example, the sending provider, or the representative in the European Union), we will update this page and show the date of the last revision.

© 2026 Yekum · YEKUM LLC