Privacy policy
Last updated: June 29, 2026.
What this notice covers
Universal Yums operates this Shopify-powered store, its website, and the connected information, products, content, tools, features, and services, collectively called the “Services.” This notice explains the collection, use, and disclosure of personal information when someone visits, uses, shops through, transacts with, or contacts the Services. For personal-information handling, this policy prevails over inconsistent language in our Terms of Service. Using the Services acknowledges that you have read and understood these practices.
Information included
Personal information means data that identifies a person or can reasonably be associated with one; anonymous and sufficiently de-identified data is excluded. Depending on interaction, residence, and applicable law, we may process names, telephone numbers, email and postal addresses; billing and shipping details; payment-card, bank, transaction, payment-confirmation, and payment-method information; usernames, passwords, security questions, settings, and preferences; items viewed, wish-listed, placed in a cart, ordered, returned, exchanged, or cancelled and prior transactions; support messages and other communications; device, browser, network, IP, and unique identifiers; navigation and usage activity; and lawful inferences drawn from those categories.
Sources
Information may be supplied directly when you open an account, use the Services, purchase, or communicate; gathered automatically from a browser or device through cookies and similar technology; received from providers that supply technology or process data for us; or furnished by business partners and other third parties.
Why information is used
We use data to perform our agreement and deliver, personalize, and improve the Services: processing payment and orders, maintaining accounts, remembering choices and interests, communicating account activity, arranging shipment, handling returns and exchanges, enabling reviews, and recommending relevant products. It may support advertisements and promotions sent by email, text, post, on this site, or elsewhere, including messages based on shopping activity. We also authenticate users, protect payments, investigate fraud or unlawful, unsafe, or malicious conduct, protect public safety and the Services, respond to support needs, preserve the business relationship, comply with law and valid government or law-enforcement demands, participate in discovery or litigation, and investigate or enforce our terms and policies. Account credentials should be kept confidential.
When information is disclosed
Legitimate disclosures may be made to Shopify and vendors handling IT, payments, analytics, support, cloud storage, fulfillment, or shipping; marketing and business partners operating under their own notices, including personalized-advertising providers; recipients you direct, request, or approve, such as carriers, social widgets, and login integrations; affiliates and corporate-group members; parties to a merger, bankruptcy, or similar transaction; and recipients required for subpoenas, warrants, legal duties, policy enforcement, protection of the Services, or defense of rights and people. Where local law grants it, residents may opt out of sale, sharing, or processing for targeted advertising.
Shopify's role
Shopify hosts the Services and processes access, usage, and submitted information to provide and improve them. Information can therefore be transmitted to Shopify and service parties outside the country where the customer lives. Certain enhanced features combine interactions with this store, other Shopify merchants, and Shopify to protect, improve, and grow commerce; Shopify is responsible for that processing and associated rights requests. Its Consumer Privacy Policy and Privacy Portal describe those activities and choices.
External sites and public areas
A third-party link leads to an independently operated destination. Review its privacy, security, and other terms because we do not warrant its accuracy, completeness, reliability, privacy, or security. Material posted to public or semi-public services, including social networks, may be broadly visible and used by others. Including a link alone is not an endorsement.
Children
The Services are not intended for children, and we do not knowingly collect personal information from anyone below the age of majority in the relevant jurisdiction. A parent or guardian may use the contact details below to request deletion. As of the effective date, we have no actual knowledge that information of individuals under 16 is “sold” or “shared” as those terms are defined by applicable law.
Security and retention
No safeguard is perfect and no transmission channel can be guaranteed secure, so sensitive or confidential information should not be sent through an unsecured method. Retention depends on whether information is needed to maintain an account, provide Services, meet legal obligations, resolve disputes, or enforce contracts and policies.
Your choices and rights
Subject to residence, exceptions, and applicable law, a person may request access or knowledge, deletion, correction, a copy, portability, or transfer of personal information. Some residents may opt out of sale or sharing and processing treated as targeted advertising. A legally applicable Global Privacy Control signal is treated as an opt-out for its browser and device and, when associable, the relevant Shopify account. We do not recognize other “Do Not Track” signals. Promotional email recipients may unsubscribe while continuing to receive order, account, and other non-promotional messages.
Making a request or complaint
Submit a request through a control offered by the Services or the contact information below. For Shopify processing, see https://privacy.shopify.com/en. We may verify identity and require evidence that an authorized agent has permission to act, including direct verification, and will respond within the period required by law without discrimination. Complaints may be made to us, appealed where local rules allow, or lodged with the competent data-protection authority.
International transfers
Personal information may be stored, transferred, and processed outside a person's home country. Transfers from the European Economic Area or United Kingdom use recognized safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent contract issued by the relevant UK authority, unless the receiving country has an adequate-protection determination.
Updates
Operational, legal, regulatory, and practice changes may lead us to revise this policy. The updated version, a new “Last updated” date, and any notice required by law will be posted on this website.
Contact Universal Yums
For a privacy question, complaint, or rights request, email hatchettcofresi24@gmail.com, call (938) 645-2248, or write to Universal Yums at 30 S 8th St, Richmond, Virginia 23219, United States.