Privacy policy

Last Updated: May 11, 2026

This Privacy Policy describes how Yavanica (the “Website,” “we,” “us,” or “our”) collects, uses, and shares your personal information when you visit our website, use our services, or make a purchase from Yavanica (collectively referred to as the “Services”), or otherwise interact with us.

For the purpose of this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether you are a customer, website visitor, or any other individual whose information we process under this notice.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the updated policy on the website, revise the “Last Updated” date, and take any other steps as required by law.

How We Collect and Use Your Personal Information

To provide our Services, we collect personal information from various sources as outlined below. The type of information we collect and use depends on how you interact with us.

In addition to the specific uses described below, we use the information we collect to communicate with you, provide and improve our Services, comply with legal obligations, enforce applicable terms of use, and protect our rights, the rights of our users, or others.

What Personal Information We Collect

The personal information we collect depends on how you interact with our website and services. “Personal information” means any information that identifies, relates to, describes, or could reasonably be linked to you.

Information You Provide to Us Directly:

This includes:

Contact information, such as your name, address, phone number, and email address.
Order details, such as name, billing and shipping address, payment confirmation, email, and phone number.
Account information, including username, password, security questions, and other security-related details.
Customer service data, including messages you send to us via the contact form or email.

Some features of the Services require this information. You may choose not to provide it, but this may limit your access to certain features.

Information from Website Use:

We automatically collect certain usage information (“Usage Data”) through cookies, pixels, and similar technologies, such as:

Website access and usage behavior
Device details
Browser information
Network connection and IP address
Technical interactions with our Services

Information from Third Parties:

We may also receive personal information from:

Service providers, such as Shopify, that support our website and services
Payment processors, for payment information like bank or card details and billing address
Marketing or tracking partners, if you visit our site, open our emails, or engage with ads

We treat information from third parties according to this Privacy Policy. See also: "Third-Party Sites and Links" below.

How We Use Your Personal Information

To Provide Products and Services:

We use your information to fulfill our contract with you, including payment processing, order fulfillment, returns, account management, shipping, notifications, and support. Shopify may use your account data to improve your experience.

For Marketing and Advertising:

We may send promotional materials by email, SMS, or post where legally allowed or with your consent. We may analyze your use of our services to better tailor offers to you.

If you are located in the European Economic Area (EEA), this processing is based on our legitimate interest under Article 6(1)(f) GDPR or your consent where required.

If you are located in certain U.S. states, including California, this may constitute “sharing” of personal information for cross-context behavioral advertising as defined under applicable state privacy laws. You have the right to opt out of such sharing as described below.

For Security and Fraud Prevention:

We process your data to detect and prevent fraud, abuse, and security risks. You are responsible for keeping your login credentials secure. Please notify us immediately of any suspicious activity.

For Communication and Service Improvements:

We use your data to respond to inquiries, improve our services, and maintain customer relationships. For EEA users, this is based on our legitimate interest under Article 6(1)(f) GDPR.

Cookies

We use cookies like many websites. Full details on Shopify's cookies can be found here:
https://www.shopify.com/legal/cookies

We use cookies to operate and improve our website and services, store preferences and activity, analyze performance, and better understand user behavior.

For users in the EEA and UK, non-essential cookies (such as marketing or analytics cookies) are placed only with your consent where required by law.

For users in certain U.S. states, the use of advertising or analytics cookies may constitute “sharing” of personal information. You may opt out of targeted advertising by:

• Adjusting your cookie preferences via our cookie banner (if available)
• Using browser privacy controls or Global Privacy Control (GPC) signals where supported
• Contacting us using the details below

Disabling Cookies:

Most browsers accept cookies by default, but you can set your browser to delete or block cookies. Please note that this may affect functionality. Blocking cookies may not fully prevent data sharing with advertising partners.

Sharing of Personal Information

We only share personal data with third parties under this Privacy Policy and when there is a legal basis to do so.

Situations may include:

Service providers that operate on our behalf (e.g., IT operations, payment processing, analytics, customer support, logistics)
Marketing and business partners for service offerings or promotional purposes (under their own privacy policies)
With your consent, such as for product deliveries, social media integrations, or third-party logins
Within our corporate group, where it supports our legitimate interest in operating successfully
During business transactions, such as mergers or insolvency proceedings, and for legal compliance or to protect our rights

Data Categories and Recipients:

CATEGORY	RECIPIENTS
Identifiers (name, contact, order, account info)	Service providers, hosting partners, payment processors, shipping and support services
Commercial info (order/purchase data, inquiries)	Marketing and business partners
Internet/network data (usage behavior, IP address)	Analytics and security partners, affiliates
Geolocation data (based on IP)	Technology and security providers

Third-Party Websites and Links

Our website may contain links to sites or platforms operated by third parties. By clicking these links, you leave our site. We are not responsible for the content, accuracy, or privacy practices of these external sites—please review their policies independently.

Information you post publicly (e.g., on social media or comment sections) may be visible to others. Linking to a site does not imply endorsement or partnership.

Children's Data

Our services are not intended for children, and we do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe your child has provided us with data, please contact us—we will delete it immediately.

As of the date above, we do not knowingly “sell” or “share” data of minors under 16 as defined by applicable law.

Data Security and Retention

Please note: No security system is 100% secure. Emails and forms may be insecure during transmission—avoid sending sensitive data via unsecured channels.

How long we retain personal data depends on:

Whether you maintain an active account
Legal obligations we must fulfill
Whether data is needed for queries, warranties, or legal claims

International Data Transfers

Please be aware that we may transfer, store, and process your data in countries outside your place of residence, including the United States and the European Union.

Where required under GDPR, we rely on appropriate safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms to protect your personal information.

Your Rights

For EEA and UK Residents:
You may have the following rights under GDPR:

Right to access the data we hold about you
Right to deletion of your data
Right to correction of inaccurate or incomplete data
Right to data portability (in a common format or to another party)
Right to restrict processing temporarily
Right to withdraw consent at any time (where applicable)
Right to object to processing based on legitimate interest
Right to file a complaint with a supervisory authority
Marketing preferences: You can unsubscribe from promotional emails at any time (link in email). Transactional emails are not affected.

For U.S. Residents (including California):
Subject to applicable state law, you may have the right to:

Know what personal information we collect and disclose
Request deletion of your personal information
Request correction of inaccurate information
Opt out of the sale or sharing of personal information
Limit the use of sensitive personal information (if applicable)
Not be discriminated against for exercising your privacy rights

We will verify your identity before processing your request as required by law.

Marketing preferences: You can unsubscribe from promotional emails at any time using the link in the email. Transactional emails are not affected.

How to Exercise Your Rights:

You can contact us at any time using the details below. We may request additional information to verify your identity (e.g., email address or account details). In some cases, you may appoint an authorized representative.

Complaints

If you have concerns about how we handle your personal information, please contact us first.

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

For users in the EEA, you can find a list of authorities here.

International Data Transfers

Please be aware that we may transfer, store, and process your data in countries outside your place of residence. These data transfers are handled by staff, service providers, and partners who support our operations.

We ensure all necessary safeguards and compliance with data protection laws are in place.