Privacy Policy

01Information We Collect

Depending on how you use the Services, we may collect:

• Account and identity information: username, email address, password hash, account identifiers, and sign-in preferences.
• Social sign-in information: if you choose Google sign-in, your Google account identifier, verified email address, display name, and profile image; if you choose Facebook sign-in, your Facebook account identifier, email address, display name, and profile image.
• Order and delivery information: recipient name, phone number, shipping address, order details, bracelet designs, order history, fulfillment status, carrier, and tracking information.
• Payment records: PayPal order and capture identifiers, payment status, amount, and related transaction records. PayPal processes your payment credentials. We do not store your PayPal password or full payment-card number.
• Design and shopping information: saved bracelet designs, bead and material selections, cart contents, quantities, prices, and customization notes.
• Communications: feedback, support requests, contact email, messages, and our responses.
• Technical and usage information: IP address, browser or device information, session and security events, pages requested, and diagnostic logs. If you consent to analytics, we also collect information about page visits, traffic sources, and interactions with the design and checkout experience.

02Sources of Information

We collect information directly from you; automatically from your browser or device; from Google or Meta when you choose social sign-in; from PayPal in connection with payments; and from service providers that help us operate, secure, fulfill, and support the Services.

03How We Use Information

We use personal information to:

• create and secure accounts, authenticate users, and connect or disconnect sign-in methods;
• save designs and carts, process orders, manage inventory, arrange shipping, and provide order support;
• process and reconcile payments and help prevent fraud;
• respond to questions, feedback, privacy requests, returns, and service requests;
• operate, maintain, troubleshoot, and improve the Services;
• measure site performance and shopping interactions when analytics consent is granted;
• comply with legal, tax, accounting, security, and enforcement obligations; and
• protect the rights, safety, and integrity of customers, YMORL, and others.

04Google and Facebook Sign-In

Social sign-in is optional. YMORL requests only the information needed to identify you and create or access your account. We do not receive your Google or Facebook password. We do not use social sign-in to access Gmail, Google Drive, Facebook posts, friends, or advertising accounts.

YMORL's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google and Meta independently process information under their own privacy policies.

05Cookies, Local Storage, and Analytics

We use essential cookies and similar technologies for account sessions, security, CSRF protection, shopping continuity, and saved preferences. These are necessary for the Services to function.

With your permission, we use Google Analytics to understand visits, traffic sources, and actions such as starting a design, adding an item to the cart, beginning checkout, and completing a purchase. Analytics is denied by default until you choose to allow it. Advertising storage, advertising user data, Google Signals, and ad personalization are disabled. We do not intentionally send Google Analytics your name, email address, phone number, shipping address, or payment credentials.

06How We Disclose Information

We may disclose personal information only as reasonably necessary to:

• Service providers: hosting, storage, email, analytics, security, fraud prevention, customer support, and other vendors acting on our behalf.
• Payment and authentication providers: including PayPal, Google, and Meta, when you choose to use their services.
• Fulfillment providers: shipping carriers and service providers involved in delivering or servicing your order.
• Legal and safety recipients: regulators, courts, law enforcement, professional advisers, or other parties when required by law or necessary to protect rights and safety.
• Business transfers: a buyer, successor, or adviser in connection with a merger, financing, reorganization, sale, or transfer of all or part of our business, subject to appropriate safeguards.

YMORL does not sell personal information. We do not use personal information for cross-context behavioral advertising.

07Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy. Retention depends on the type of information, account status, order and warranty needs, security requirements, dispute resolution, and applicable tax, accounting, consumer-protection, and legal obligations. Saved addresses and designs may be deleted through available account controls. Order, payment, shipping, fraud-prevention, and legal records may be retained after an account or saved address is deleted when required or permitted by law.

08Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including password hashing, authenticated sessions, access controls, CSRF protection, rate limiting, and server-side ownership checks. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09Your Privacy Rights and Choices

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to withdraw consent; to opt out of certain processing; to limit certain uses of sensitive personal information; and to appeal our response. You also have the right not to receive discriminatory treatment for exercising applicable privacy rights.

You may manage saved addresses, designs, passwords, social sign-in connections, and analytics preferences through available account controls. To exercise another privacy right, email support@ymorl.com with the subject "Privacy Request." Describe your request and the account email involved. We may verify your identity before acting. An authorized agent may submit a request where permitted by law, subject to proof of authority and identity verification.

We do not sell personal information, so no opt-out of sale is required. You may withdraw optional analytics consent at any time using the button above.

10Account and Social Data Deletion

You may disconnect an available Google or Facebook sign-in method under Login & Security when another sign-in method remains available. To request deletion of your YMORL account or personal information, email support@ymorl.com. Disconnecting a social account stops future use of that provider for YMORL sign-in but does not delete your Google or Facebook account. Certain order and transaction records may be retained as described above.

11Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

12International Data Transfers

YMORL and its service providers may process information in the United States and other countries. Privacy laws in those locations may differ from those where you live. Where required, we use appropriate safeguards for international transfers.

13Third-Party Services and Links

The Services may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this Policy. We encourage you to review the privacy policies of Google, Meta, PayPal, shipping carriers, and any other service you choose to use.

14Changes to This Policy

We may update this Policy to reflect changes to our Services, practices, or legal obligations. We will post the updated version here and revise the "Last updated" date. If changes are material, we may provide additional notice where required.

15Contact Us

For questions, concerns, complaints, or privacy-rights requests, contact: