What this notice covers

Universal Yums operates this Shopify-powered website and store, together with the information, content, functions, tools, products, and customer services connected with it (collectively, the “Services”). This notice explains the collection, use, and disclosure of personal information when a person visits or uses the Services, completes a purchase or another transaction, or communicates with us. For any inconsistency concerning the collection, processing, or disclosure of personal information, this Privacy Policy takes precedence over the Terms of Service.

Please review the notice carefully. Accessing or using any Service acknowledges that you have read it and understand the practices described here.

Personal information we collect or process

“Personal information” means data that identifies a person or can reasonably be linked to one. It excludes information gathered anonymously or de-identified so that a person cannot reasonably be identified or linked. What we process depends on the interaction, residence, and applicable law, and may include inferences drawn from the categories below:

• contact and delivery details, such as name, residential, billing, and shipping addresses, telephone number, and email;
• financial and payment details, including card or account numbers, method of payment, confirmations, transaction information, and related records;
• account credentials, security questions, preferences, settings, usernames, and passwords;
• shopping and transaction history, including products viewed, saved, carted, purchased, returned, exchanged, or cancelled;
• the contents of support inquiries and other communications sent to us;
• device, browser, network, IP-address, and other unique-identifier information; and
• usage data showing how and when a visitor interacts with or moves through the Services.

Sources of information

Information can come directly from you when you create an account, browse, transact, ask for help, or otherwise submit data. It can be collected automatically from a device through the Services, cookies, and comparable technology. We may also receive it from providers performing technology or processing work for us and from business partners or other third parties.

Reasons we use information

Delivering, personalizing, and improving the Services

We use relevant data to carry out our agreement with you; accept payment; fulfill, ship, and notify you about orders; remember interests and preferences; administer an account; handle purchases, returns, exchanges, and other transactions; enable reviews; recommend related products; and refine or tailor the shopping experience.

Advertising and promotions

Information may support promotional messages by email, text, or post and advertisements on our Services or elsewhere, including advertising informed by prior purchases, cart activity, and other online interaction.

Security and fraud prevention

We use data to authenticate accounts, protect checkout and payments, keep systems secure, protect public safety, and detect, investigate, prevent, or respond to activity that may be fraudulent, illegal, unsafe, or malicious. Account holders must safeguard access credentials and should not disclose usernames, passwords, or other sign-in details.

Customer communications

Information lets us answer questions, provide support and effective service, and maintain our customer relationship.

Legal purposes

We may process information to obey applicable law, respond to valid government or law-enforcement process, participate in civil discovery or actual or potential litigation, and investigate or enforce our terms and policies.

When information is disclosed

For legitimate purposes consistent with this notice, disclosure may occur:

• to Shopify and providers performing IT, payment, analytics, support, storage, fulfillment, or shipping work for us;
• to advertising, marketing, and business partners, who apply their own privacy notices, including partners supporting activity-based advertising;
• when you instruct, request, or consent to a disclosure, such as delivery to a carrier or use of a social-media widget or login integration;
• among our affiliates or corporate group;
• in a merger, bankruptcy, restructuring, or comparable business transaction; or
• to meet legal obligations, answer subpoenas or search warrants, enforce policies, or protect the Services, our rights, or the rights of customers and other people.

Where residence-based law supplies a right to reject the sale or sharing of information used for targeted advertising, the controls described below may be used.

Shopify’s role

Shopify hosts the Services and processes access and usage information to provide and improve them. Information submitted here is transmitted to Shopify and relevant providers, potentially in countries other than the one where the customer lives. We may use Shopify enhancements that combine interactions with Universal Yums, other Shopify merchants, and Shopify to protect, develop, and improve commerce. For processing associated with those enhanced functions, Shopify is responsible for handling personal information and applicable rights requests. More information is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-party sites and public posts

The Services may link to a website or online platform that we neither operate nor control. Before using it, review that party’s privacy, security, and other terms. We do not warrant or accept responsibility for the privacy, security, accuracy, completeness, or reliability of unaffiliated sites. Material shared in a public or semi-public forum, including a third-party social network, may be visible and usable by us, platform users, and third parties without limitation. A link alone does not endorse the linked content or its owner unless the Services expressly say otherwise.

Children’s data

The Services are not directed to children. We do not knowingly collect personal information from anyone below the age of majority in the person’s jurisdiction. A parent or guardian may contact us to request deletion of information supplied by a child. As of the effective date, we do not actually know that we sell or share, as those terms are defined by applicable law, personal information of people younger than 16.

Security and retention

No safeguard is perfect or impenetrable, and we cannot promise perfect security. Data sent in transit can be insecure, so sensitive or confidential material should not be transmitted through an unsecured channel.

Retention varies according to whether information is needed to maintain an account, furnish the Services, satisfy a legal obligation, resolve a dispute, or enforce a contract or policy.

Your rights and choices

Depending on residence, circumstances, and law, some or all of the following rights may be available. They are not absolute and a request may lawfully be declined:

• access to or knowledge of personal information we hold;
• deletion of personal information we maintain;
• correction of inaccurate information;
• a portable copy and, in qualifying cases, transfer to a third party; and
• an opt-out from sale, sharing, or processing treated as targeted advertising under applicable privacy law.

Available Service controls can be used for opt-out requests. A Global Privacy Control signal will be treated, where required, as an opt-out for the browser and device sending it and, when Shopify can associate the device with an account, for that account. See globalprivacycontrol.org. Apart from Global Privacy Control, we do not recognize browser or device “Do Not Track” signals.

Promotional emails can be stopped through the unsubscribe control in the message. Even after opting out, you may continue to receive non-promotional correspondence about an account or order.

Requests, verification, and complaints

Submit an available right through a control provided by the Services or the contact information below. Shopify’s practices and rights are described at privacy.shopify.com/en. We do not discriminate against a person for exercising a privacy right.

As the law permits or requires, we may verify identity before acting. An authorized agent must show that the requester authorized the agent, and direct identity confirmation may also be required. We respond within the time required by applicable law.

A complaint about our processing may be sent through the contact details below. Where available, you may appeal our response with us or lodge the matter with the appropriate local data-protection authority.

International transfers

Personal information may be transferred, stored, or processed outside the country where you live. A transfer from the European Economic Area or United Kingdom relies on a recognized mechanism, such as European Commission Standard Contractual Clauses or an equivalent instrument issued by the competent UK authority, unless the destination has been found to offer adequate protection.

Changes to this notice

Practices, operational needs, legal obligations, or regulations may lead us to revise this Privacy Policy. We will publish the revised version here, update the “Last updated” date, and provide any notice required by applicable law.

Contact Universal Yums

For a question about this notice or our privacy practices, or to exercise an available right, call (859) 555-4862, email konlovemum884@gmail.com, or write to Universal Yums, 2976 N 13th St, Kansas City, Kansas 66104, United States.