Scope of this notice
Last updated June 29, 2026. Universal Yums runs this Shopify-powered website, store, and the connected information, content, functions, tools, products, and customer services, collectively called the “Services.” This notice explains how personal information is collected, used, and disclosed when someone visits, uses, purchases, completes another transaction, or communicates with us. For personal-information collection, processing, or disclosure, this policy prevails over inconsistent Terms of Service language. Access to the Services acknowledges that the notice has been read and understood.
Information within scope
Personal information means information that identifies a person or can reasonably be connected with one; anonymous information and data de-identified so that reasonable relinking is not possible are excluded. Depending on use, residence, and applicable law, the categories can include name and contact details; billing and shipping addresses; telephone and email; card, account, payment-method, confirmation, and transaction data; usernames, passwords, security questions, settings, and preferences; products viewed, saved, carted, purchased, returned, exchanged, or cancelled and prior transactions; customer communications; device, browser, network, IP, and other identifiers; navigation and timing information; and lawful inferences from those categories.
Where information comes from
Information may be supplied directly through an account, order, visit, use, or message; captured automatically from a device or the Services through cookies and comparable technologies; collected or processed by vendors engaged to provide technology or act for us; or received from partners and other third parties.
Why information is used
We use personal information to perform the customer contract and operate, tailor, and improve the Services: processing payment, fulfilling and shipping orders, managing accounts and preferences, remembering product interest, issuing account and order notices, processing purchases, returns, and exchanges, enabling reviews, and recommending relevant items. It also supports email, text, postal, and online marketing; account and payment authentication; investigation, prevention, and response involving fraud, illegality, unsafe or malicious activity, system protection, and public safety; customer support and business communications; legal compliance, valid government or law-enforcement process, discovery and litigation; and investigation or enforcement of terms and policies. Account credentials should not be shared.
Recipients and disclosures
For legitimate purposes described here, information may be disclosed to Shopify and service providers for IT, payments, analytics, support, cloud storage, fulfillment, and shipping; marketing or business partners operating under their own privacy notices, including partners using activity across merchants and sites for personalized advertising; recipients selected, requested, or authorized by the customer, such as carriers, social widgets, and login integrations; affiliates and corporate-group members; participants in a merger, bankruptcy, or comparable transaction; and authorities or other parties where law, subpoena, warrant, enforcement, safety, or protection of rights and Services requires it. Depending on residence, an opt-out may restrict sharing used for targeted advertising.
Shopify's role
Shopify hosts the Services and processes information about access and use to provide and improve the platform. Information submitted here is transmitted to Shopify and relevant providers, which may be located outside the customer's country. Enhanced Shopify features can combine interactions with this shop, other merchants, and Shopify to protect, develop, and improve commerce. Shopify is responsible for processing tied to those enhanced functions and the related rights requests. The Shopify Consumer Privacy Policy and Shopify Privacy Portal provide more detail.
Outside websites
A link may lead to a website or platform we neither own nor control. Review the destination's privacy, security, and contractual terms; we do not guarantee its accuracy, completeness, reliability, privacy, or security. Material placed in public or semi-public forums, including social networks, may be broadly visible and reused. Including a link does not by itself endorse the operator or content.
Children
The Services are not intended for children, and we do not knowingly collect personal information from anyone below the age of majority where that person lives. A parent or guardian can request deletion using the contact details below. As of this policy's effective date, we have no actual knowledge of legally defined selling or sharing of personal information belonging to a person under 16.
Safeguards and retention
Security controls cannot be perfect or impenetrable, and data sent through an unsecured channel may be exposed; sensitive or confidential material should not be transmitted that way. Retention length depends on whether information is needed to maintain an account, supply Services, comply with law, resolve a dispute, or enforce a contract or policy.
Rights and choices
Depending on location and legal conditions, a person may request access to or knowledge of held information, deletion, correction, portability or a copy and transfer, and an opt-out from a legally defined sale, sharing, or targeted-advertising use. These rights are not absolute and a lawful request may be declined in permitted circumstances. A Global Privacy Control signal is treated as an opt-out for the sending browser and device where applicable and, if associated with a Shopify account, for that account. Other Do Not Track signals are not recognized. Promotional email can be stopped through its unsubscribe control, while non-promotional account and order messages may continue.
Submitting a rights request
Exercise a right through an available Service control or by contacting us below; information about Shopify processing is available at https://privacy.shopify.com/en. We do not discriminate because a right is used. Identity verification may be required. An authorized agent must show permission, and we may also verify directly with the person concerned. Responses are provided within the time applicable law requires.
Complaints and appeals
A complaint about our processing can be sent using the contact details below. Depending on residence, a person may appeal our decision through those details or lodge the complaint with a local data-protection authority.
International handling
Personal information may be transferred, stored, or processed outside the country where the individual lives. A transfer from the European Economic Area or the United Kingdom relies on a recognized mechanism such as the European Commission's Standard Contractual Clauses or the relevant United Kingdom authority's equivalent, unless the destination has been found to provide adequate protection.
Updates
We may revise this policy to reflect changed practices or operational, legal, or regulatory needs. A revised version will be posted here, the “Last updated” date will change, and any notice required by applicable law will be provided.
Contact
For questions about privacy practices, this notice, or available rights, call (470) 615-7087, email rakayetkaushal@gmail.com, or write to Universal Yums at 2996 N 13th St, Kansas City, Kansas, 66104, United States.