PRIVACY POLICY

Last updated: June 25, 2026

This Privacy Policy describes how YaYa & Co. ("we," "us," or "our") collects, uses, and shares your Personal Information when you visit, use, or make a purchase from yayaandco.com (the "Site"). Our store is hosted on Shopify.

By using the Site, you agree to the collection and use of information in accordance with this Policy, subject to the consent choices you make through our cookie consent banner as described below.

Your Consent Choices

We use a dedicated consent management platform (a certified Consent Management Platform) to manage cookies and tracking technologies on the Site. When you first visit the Site, we present a cookie consent banner that lets you accept or decline non-essential tracking technologies before they are activated.

Our banner is configured on a strict opt-in basis: cookies and tracking technologies in the Performance and Targeting categories are not activated until you affirmatively provide consent. Our consent platform is integrated with Google Consent Mode v2, the IAB Transparency & Consent Framework, and Shopify's Customer Privacy API, so that connected services adjust their behavior according to the consent choices you make.

We organize tracking technologies into the following categories:

• Functionality — cookies strictly necessary for the Site to operate, including shopping cart, checkout, security, and core site functions. These are required for the Site to work and are always active.
• Performance — cookies and tools that help us understand how visitors use the Site so we can improve it (for example, analytics and session measurement). These are activated only with your consent.
• Targeting — cookies and pixels used for advertising and marketing measurement (for example, the Meta Pixel and similar advertising technologies). These are activated only with your consent.

You may change or withdraw your consent at any time by reopening the consent banner or cookie preferences control on the Site. Withdrawing consent stops further collection by the affected technologies from that point forward.

We maintain records of the consent choices made through the Site, including the date, time, jurisdiction, and categories selected. These consent records can be exported for audit and compliance purposes.

We display the appropriate consent banner based on a visitor's detected location to reflect the privacy laws that apply.

Personal Information We Collect

Device Information. When you visit the Site, we may collect certain information about your device and browsing, including your web browser type, IP address, time zone, operating system, referring and exit pages, the pages and products you view, and how you interact with the Site. Collection of this information through non-essential technologies occurs in accordance with your consent choices.

We collect Device Information using the following technologies:

• Cookies — data files placed on your device that may include a unique identifier. You can manage cookies through our consent banner and through your browser settings.
• Log files — records of actions on the Site, which may include IP address, browser type, internet service provider, referring/exit pages, and date/time stamps. Certain log information is collected for security, fraud prevention, and core operation of the Site.
• Web beacons, tags, and pixels — electronic files used to record information about how you browse the Site, activated in accordance with your consent choices.

Order Information. When you make or attempt to make a purchase through the Site, we collect information including your name, billing address, shipping address, payment information (including payment card details processed by our payment providers), email address, and phone number.

In this Policy, "Personal Information" refers to both Device Information and Order Information.

How We Use Your Personal Information

We use Order Information to fulfill orders placed through the Site (including processing payment, arranging shipping, and providing invoices and order confirmations), and to:

• communicate with you;
• screen orders for potential risk or fraud; and
• where consistent with your preferences and consent, provide you with information or advertising about our products and services.

We use Device Information to help screen for potential risk and fraud (in particular, your IP address), and, where you have consented, to improve and optimize the Site (for example, through analytics about how customers browse and interact with the Site) and to measure the effectiveness of our marketing and advertising.

Third-Party Services

We work with third-party service providers that process Personal Information on our behalf or in connection with the Site. Depending on your consent choices, these may include:

• Shopify — our ecommerce platform, which powers the Site and processes order and account information.
• Payment processors — to process payments securely.
• Google — for analytics and related measurement, activated in accordance with your consent.
• Meta (Facebook) — advertising and conversion measurement through the Meta Pixel. Categorized as Targeting and activated only with your consent.
• Klaviyo — email and SMS marketing and related analytics. Marketing analytics functions are activated in accordance with your consent.
• Microsoft Clarity — session analytics and behavior measurement to help us understand and improve the Site. Categorized as Performance and activated only with your consent.

Each of these providers handles information under its own privacy practices. We encourage you to review their policies. We may update the providers we use from time to time.

We may also disclose Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request, or to protect our rights.

Behavioral Advertising

Where you have consented, we use Personal Information to provide targeted advertising and marketing we believe may interest you. You can learn more about how targeted advertising works through the Network Advertising Initiative's educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

In addition to managing your choices through our consent banner, you can opt out of targeted advertising through:

• Meta (Facebook): https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous
• Digital Advertising Alliance: https://optout.aboutads.info/

How We Respond to Browser Signals

Different browsers offer different mechanisms to communicate privacy preferences, and there is no uniform industry standard for all such signals. We manage your tracking preferences primarily through the cookie consent banner on the Site, which lets you accept or decline non-essential cookies and tracking technologies and withdraw consent at any time. Where required by applicable law, we honor recognized opt-out preference signals.

Your Rights

Depending on where you live, you may have rights regarding your Personal Information, including the right to access, correct, update, delete, or obtain a copy of the Personal Information we hold about you, and the right to opt out of certain processing. To exercise these rights, you may submit a data request through the data request mechanism available on the Site, or contact us using the information below. We may need to verify your identity before responding.

If you are a resident of the European Economic Area or the United Kingdom, we process your information to perform contracts with you (for example, to fulfill an order) or to pursue our legitimate business interests described above, and your information may be transferred outside your country of residence, including to the United States and Canada.

If you are a California resident, you may have additional rights under California law, including rights regarding the sale or sharing of Personal Information for targeted advertising. You can exercise applicable choices through our consent banner and the opt-out links above, or by contacting us.

Data Retention

We retain Order Information for our records unless and until you ask us to delete it, subject to legal and operational requirements. We retain consent records and Device Information for the periods necessary for the purposes described in this Policy and as required by law.

Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. The "Last updated" date above indicates when this Policy was last revised.

Minors

The Site is not intended for individuals under the age of 18, and we do not knowingly collect Personal Information from anyone under 18.

Contact Us

For more information about our privacy practices, to ask questions, or to make a complaint, contact us at:

YaYa & Co. [Laurel's Gate] 3635 Perkins Avenue, 2N Cleveland, OH 44114, United States Email: social@yayaandco.com