Privacy Policy

This policy explains what we do with your personal data. The data controller is BIOUMAN, 30 N Gould St, Ste R Sheridan, WY 82801. For any privacy question, email support@yybling.com.

1. What we collect

• Order data. Name, email address, telephone number, billing address and delivery address. We need these to accept and deliver your order. Lawful basis: performance of a contract.
• Payment data. Card details are entered on our payment provider system and are processed by them. We never see or store your full card number.
• Technical data. IP address, browser type and the pages you visit, collected through cookies and similar technologies.

2. Advertising measurement

If you accept cookies, we share a limited set of data with Meta Platforms Ireland Limited so that we can measure how our advertising performs. This happens in two ways: through the Meta Pixel in your browser, and through the Meta Conversions API from our server.

What is shared: the fact that you viewed a page, added an item to a basket or completed a purchase, the order value and currency, and contact details that are hashed with SHA-256 before they leave our server so that Meta can match the event to an account without receiving your details in readable form. We also share your IP address and browser user agent, which Meta requires for matching.

We do not send product names to Meta. Lawful basis: consent. You can withdraw consent at any time by declining cookies, and nothing about your order changes if you do.

3. Cookies

Strictly necessary cookies keep your basket and your session working and cannot be switched off. Measurement cookies are only set after you accept them. Your choice is stored in a cookie so that we do not ask again on every page.

4. Who else sees your data

• Our payment provider, to take payment.
• Our carrier, to deliver your parcel, and the customs authorities of the countries the parcel passes through.
• Meta, as described above, only if you accept cookies.
• Our email provider, to send order confirmations and tracking.

We do not sell your personal data and we do not share it for anyone else marketing.

5. International transfers

Our fulfilment operation is in the United States, so your name and delivery address are transferred there in order to ship your order. Transfers outside the United Kingdom are made under the UK International Data Transfer Addendum or an equivalent safeguard.

6. How long we keep it

Order records are kept for six years, which is the period required by UK tax law. Measurement data is kept for the retention period set by Meta. Marketing consent records are kept until you withdraw consent, plus one year.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. Email support@yybling.com and we will respond within one month. If you are not satisfied, you can complain to the Information Commissioner at ico.org.uk.