Privacy Policy

Overview

Yamie Beauty ("Yamie Beauty," "we," "our," or "us") operates our online store and related customer services, including account, ordering, pickup, delivery, tracking, support chat, and returns services. This Privacy Policy explains our practices when you use yamiebeauty.com, our related subdomains, or communicate with us.

Information We Collect

Information you provide

• Name, email address, phone number, account profile, and login credentials. Passwords are stored as password hashes, not readable passwords.
• Billing, shipping, delivery, and pickup information.
• Cart, order, product, fulfillment, receipt, and purchase history.
• Payment method, payment status, and processor transaction references. Card and PayPal payments are handled by the selected payment provider; we do not need your full card number or security code in our forms or chat.
• Contact requests, customer-support and chat messages, reviews or other communications.
• Return requests, reasons, notes, requested resolution, item condition, and photos you choose to upload.
• Newsletter and SMS preferences when you choose to subscribe.

Information collected automatically

• IP address, browser or device details, requested page, referring address, and request timestamps contained in technical and security logs.
• Session identifiers and information needed to keep you signed in, preserve your cart, and operate the selected fulfillment experience.
• Anti-abuse and security signals used to detect automated submissions, suspicious activity, and repeated requests.

How We Use Information

We use personal information as reasonably necessary to:

• Create and secure accounts and provide requested website functions.
• Process orders, payments, receipts, delivery, pickup, tracking, returns, refunds, exchanges, and store credit.
• Answer contact and chat requests and provide customer service.
• Send operational messages about orders or accounts, and marketing messages only when permitted or requested.
• Prevent fraud, abuse, bots, unauthorized access, and other security incidents.
• Maintain business records, resolve disputes, enforce our terms, and comply with legal obligations.
• Diagnose errors and improve the reliability and usability of our services.

Sharing & Service Providers

We do not sell personal information. We disclose only the information reasonably needed for the following purposes:

• Payment providers: Stripe, PayPal, or another payment method selected at checkout processes payment information and returns transaction results to us.
• Delivery and fulfillment: Shipping, pickup, and tracking partners receive the information needed to fulfill or track an order.
• Communications: Email or SMS providers may process contact information and message delivery data when we send requested communications.
• AI-assisted chat: When the local FAQ cannot answer a general question, the submitted chat text may be sent to Google's Gemini API to generate a response. A human may receive the conversation when it is transferred.
• Security: Cloudflare Turnstile processes technical signals to help distinguish people from bots on protected forms.
• Embedded resources: A browser may connect directly to providers such as Google Maps or the CDN used to load interface assets, which may receive ordinary request information such as an IP address.
• Legal and safety: We may disclose information when reasonably necessary to comply with law, a valid legal request, protect rights or safety, investigate fraud, or complete a business reorganization.

Cookies & Similar Technologies

Our current website uses essential or functional technologies needed to provide the service. Yamie Beauty does not currently deploy advertising cookies or a dedicated analytics-cookie system on this website.

You can restrict cookies through your browser. Blocking an essential session cookie may prevent login, cart, checkout, returns, and other protected features from working.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing an account or service, maintaining transaction and tax records, processing returns, preventing fraud, resolving disputes, enforcing agreements, and meeting legal obligations.

Retention periods vary by record type. Account data may remain while the account is active; order, receipt, payment-reference, and return records may be kept longer for accounting, dispute, and legal purposes. Contact, chat, uploaded return photos, technical logs, and anti-abuse records are retained only as needed for support, security, or the applicable transaction. When information is no longer required, we may delete or anonymize it, subject to backup and legal-record cycles.

Data Security

We use reasonable administrative and technical safeguards appropriate to the service, including:

• HTTPS encryption for website traffic and secure session-cookie settings.
• Password hashing, server-side authorization checks, and restricted administrative and seller access.
• CSRF protection, validated inputs, prepared database queries, rate limits, and bot protection on supported forms.
• Protected configuration secrets, controlled uploads, backups, and transaction records intended to support recovery and accountability.

Your Privacy Choices & Rights

Depending on where you live and whether a privacy law applies, you may request access to, correction of, deletion of, or a portable copy of certain personal information. You may unsubscribe from marketing emails or SMS messages using the available opt-out method. We do not currently sell personal information or use it for targeted advertising.

We may need to verify your identity before completing a request. Some information cannot be deleted immediately when it is needed for an order, refund, tax or accounting requirement, fraud prevention, security, dispute, or other legal obligation.

Connecticut residents may also have applicable rights to confirm processing, correct inaccuracies, delete certain data, obtain portability, receive information about third parties, opt out of certain processing, and appeal a denied request. Where the Connecticut Data Privacy Act applies, we will handle verified requests within the time required by that law and will not discriminate for exercising an applicable right.

Send privacy requests or appeals to privacy@yamiebeauty.com and include enough information for us to identify the relevant account or transaction. Do not email a password or full payment-card number.

Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If a parent or guardian believes a child provided personal information, please contact us so we can review and take appropriate action.

Changes to This Policy

We may update this Privacy Policy when our services, providers, or legal obligations change. The “Last Updated” date identifies the current version. When appropriate, we may also provide a prominent website or account notice for a material change before it takes effect.

Contact Us

For questions, privacy requests, or concerns about our data practices, contact Yamie Beauty: