PRIVACY
Launch draft — controller identity, retention periods and provider list must be completed before production.
DATA
YO processes account, contact, delivery, order, security and support information required to operate the store. Card details must be entered only on the hosted payment-provider interface and are not stored by YO.
PURPOSE
Data is used to authenticate accounts, fulfil orders, prevent fraud, provide support, meet legal obligations and send requested transactional communications.
SECURITY
Passwords are stored as Argon2id hashes. Administrative access, sessions and privileged actions are protected and audited. No online system can promise absolute security.
RIGHTS
Customers may contact YO about access, correction or deletion requests, subject to identity verification and records that must be retained by law.