Privacy Policy

1. Introduction

Yofi & Grace (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit yofiandgrace.com or purchase our products. By using our site, you consent to the practices described below.

2. Information We Collect

• Information you provide: name, shipping/billing address, email, phone, and order details.
• Payment information: processed securely by our payment processors (e.g., PayPal, PayHip, Stripe). We do not store full card numbers.
• Automatically collected: IP address, browser type, device identifiers, pages viewed, and referral source via cookies and similar technologies.
• Affiliate & referral data: referral codes and clicks used to attribute commissions.

3. How We Use Your Information

• Process and ship orders, send order confirmations and shipping updates.
• Provide customer service and respond to inquiries.
• Send marketing communications (only with your consent — you can unsubscribe at any time).
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Comply with legal obligations and enforce our Terms.

4. How We Share Information

We do not sell your personal information. We share data only with:

• Service providers (payment processors, shipping carriers, email and analytics providers) under contract.
• Government authorities when required by law, subpoena, or to protect rights and safety.
• Successors in a merger, acquisition, or asset sale, with notice to you.

5. Cookies & Tracking

We use cookies and similar technologies for site functionality, analytics, and affiliate attribution. You may disable cookies in your browser settings; some features may not work without them.

6. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, restrict or object to processing, and withdraw consent.

• California (CCPA/CPRA): right to know, delete, correct, and opt-out of “sale” or “sharing” of personal information. We do not sell personal information.
• EU/UK (GDPR/UK GDPR): lawful bases include consent, contract performance, and legitimate interests. You may lodge a complaint with your supervisory authority.
• Other U.S. states (VA, CO, CT, UT, etc.): similar rights as outlined under applicable state law.

To exercise any right, email privacy@yofiandgrace.com. We will verify your request and respond within the timeframe required by law.

7. Children's Privacy

Our site is not directed to children under 13, and we do not knowingly collect personal information from children. Contact us to request deletion of any such data.

8. Data Security & Retention

We use commercially reasonable safeguards (TLS encryption in transit, role-based access, audit logging). No method of transmission is 100% secure. We retain personal information only as long as necessary for the purposes described or as required by law.

9. International Transfers

We operate in the United States. If you access our site from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision. Material changes will be highlighted on our site.

11. Contact Us