Privacy Policy

This store and website (www.yewseaeboard.com), including all related information, content, features, tools, products and services, deliver a curatedshopping experience for customers (collectively referred to as the “Services”). The Services on www.yewseaeboard.com are powered by Shopify. This Privacy Policy explains how we collect, use and disclose your personal information when you visit or use the Services, place orders or conduct other transactions through the Services, or otherwise communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall govern with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing and using any of the Services, you acknowledge that you have read this Privacy Policy and understand our practices for collecting, using and disclosing your information as set forth herein.

Personal Information We Collect and Process

For purposes of this Policy, “personal information” means information that identifies you, or can reasonably be associated with you or another natural person. Information collected anonymously or deidentified so that it cannot identify, or be reasonably linked to, an individual does not constitute personal information.

Depending on how you interact with the Services, your place of residence, and subject to applicable legal permissions or mandatory requirements, we may collect and process the following categories of personal information, including inferences derived from such personal information:

· Contact Information: your name, address, billing address, shipping address, phone number, and email address.

· Financial Information: creditcard, debitcard and financialaccount numbers, paymentcard details, account records, transaction history, payment method, payment confirmation and other paymentrelated information.

· Account Information: username, password, securityquestion responses, preferences and settings.

· Transaction Information: items you browse, addtocart, addtowishlist, purchase, return, exchange or cancel, together with your historical transaction records.

· Communications with Us: all content you submit to us, for instance information provided when submitting customersupport inquiries.

· Device Information: data related to your device, browser and network connection, your IP address, and other unique device identifiers.

· Usage Information: data about your interaction with the Services, including how and when you access and navigate the Services.

Sources of Personal Information

We obtain personal information from the following sources:

· Directly From You: when you register an account, access or use the Services, communicate with us, or otherwise submit personal information to us.

· Automatically Collected via the Services: gathered from your device while you use our products and services or visit our website, including through cookies and similar tracking technologies.

· From Our Service Providers: collected or processed on our behalf by thirdparty vendors we engage to deliver technical functionality.

· From Our Business Partners and Other Third Parties.

How We Use Your Personal Information

We use personal information for the purposes below, based on how you interact with us and which Services you use:

· Deliver, Customize and Improve the Services. We use personal information to provide the Services and perform our contractual obligations towards you; process payments and fulfil orders; save your preferences and items of interest; send accountrelated notifications; process purchases, returns, exchanges and other transactions; create, maintain and administer your user account; arrange shipping and handle returns and exchanges; enable productreview submissions; deliver a personalised shopping experience such as product recommendations based on past purchases; and analyse data to enhance and optimise our Services.

· Marketing and Advertising. We use personal information for promotional purposes, including sending marketing and advertising materials via email, SMS and postal mail, and displaying advertisements for our goods and services on our website and thirdparty sites. Advertisements may be tailored according to your prior purchases, cart activity and onsite behaviour.

· Security and Fraud Prevention. We use personal information for account authentication, securing payment and shopping workflows; detecting, investigating and responding to suspected fraudulent, unlawful, risky or malicious activity; protecting public safety and maintaining stable platform operations. If you register for an account, please safeguard your account credentials and never share your username, password or other login details with third parties.

· Communicate With You. To provide customersupport services, respond to your enquiries, deliver effective services and sustain our business relationship.

· Legal Compliance. To comply with applicable laws and respond to valid information requests from lawenforcement and government authorities; conduct civil discovery and investigations into pending or ongoing litigation or other adversarial legal proceedings; investigate and enforce potential breaches of our platform terms and policies.

Disclosure of Your Personal Information

Subject to this Privacy Policy and for legitimate business purposes, we may disclose your personal information to thirdparty parties in the following circumstances, including but not limited to:

· Shared with Shopify, suppliers and other thirdparty vendors performing services on our behalf (such as IT administration, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping).

· Shared with business and marketing partners for marketing services and targeted advertising. For example, we leverage Shopify to integrate thirdparty advertising services that serve personalised ads based on your activity across other merchants’ websites. Our marketing partners will process your data pursuant to their own privacy notices. Depending on where you reside, you have the right to opt out of targeted advertising and marketing based on your crosssite online behaviour. Please contact our customersupport team directly to register your optout request.

· Disclosed to third parties upon your direction, request or explicit consent, for example for product shipment, or when you use socialmedia widgets or thirdparty login integrations.

· Shared with our affiliates and entities within our corporate group.

· In connection with corporate transactions such as mergers or insolvency proceedings; to satisfy statutory obligations (including responding to subpoenas, search warrants and comparable legal demands); to enforce our terms of service and policies; and to protect the Services, our legitimate interests, and the rights of our users and other third parties.

Our Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information generated from your access and usage of the Services to operate and improve its platform. Information you submit via the Services will be transmitted to Shopify and certain overseas thirdparty providers to support service delivery and enhancement.

We use advanced Shopify features to grow and optimise our business. These features aggregate data from your activity on our store, other merchants’ storefronts and the Shopify platform. Shopify will process your relevant personal information to power these features. In such scenarios, Shopify acts as the data controller and is responsible for responding to your rights requests relating to this data processing.

To learn how Shopify handles personal information and your available rights, please review the Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/appusers You may exercise your datasubject rights via the Shopify Privacy Portal: https://privacy.shopify.com/en

ThirdParty Websites and External Links

The Services may contain links to websites and online platforms operated by external third parties. When you navigate to sites not owned or controlled by us, please review their respective privacy, security and termsofservice documents. We offer no guarantee and accept no liability for the privacy practices, security, accuracy, completeness or reliability of content hosted on such thirdparty sites.

Content you publish in public or semipublic areas (including posts shared on thirdparty socialnetwork platforms) may be visible to other users of our Services and/or those thirdparty platforms, and may be used by us or external parties. Inclusion of external links does not constitute our endorsement of those platforms, their operators or their content unless explicitly stated within our Services.

Children’s Personal Information

The Services are intended for adult users. We do not knowingly collect personal information belonging to minors under the age of majority in your jurisdiction. If you are a parent or legal guardian and become aware a minor has submitted personal information to us, please contact us via the contact information listed below to request deletion of such data. As of the effective date of this Privacy Policy, we have no actual knowledge that we “sell” or “share” (as defined under applicable law) personal information of individuals under the age of 16.

Information Security & Data Retention

Please note that no security measure is entirely perfect or impenetrable, and we cannot guarantee absolute security. In addition, data transmitted over the internet cannot be guaranteed fully secure in transit. We recommend you avoid sending sensitive or confidential information to us over unsecured communication channels.

The retention period for your personal information depends on multiple factors: whether we need the data to maintain your account and deliver Services; to comply with statutory obligations; resolve disputes; and enforce contractual and platformpolicy requirements.

Your Rights and Choices

Subject to your jurisdiction of residence, you may have some or all of the rights set forth below regarding your personal information. These rights are not absolute, apply only under specific circumstances, and we may decline requests where permitted by applicable law.

· Right to Access / Know: you may request access to personal information we hold about you.

· Right to Deletion: you may request us to erase personal information we maintain about you.

· Right to Rectification: you may request correction of inaccurate personal information stored by us.

· Right to Data Portability: subject to defined conditions and exceptions, you may obtain a copy of your personal data held by us and request transmission of that data to a thirdparty recipient.

· Right to OptOut of Sale or Sharing for Targeted Advertising: under applicable privacylaw definitions, you may opt out of “sale” or “sharing” of your personal information and opt out of processing for targetedadvertising purposes. Please contact our customersupport team directly to submit your optout request.

Note: If your browser sends a Global Privacy Control (GPC) optout signal, we will treat this as an optout request for your current device and browser, subject to your location. If the device sending the signal can be matched to a Shopify account, the optout will also apply to that account. For more information about GPC, visit https://globalprivacycontrol.org/. We do not recognise “Do Not Track” signals sent by browsers or devices other than GPC.

· Manage Communication Preferences: we may send you promotional emails. You can unsubscribe from marketing emails at any time using the unsubscribe link included in our messages. After unsubscribing, you will still receive nonpromotional emails such as account updates and order notifications.

If you reside in the United Kingdom or European Economic Area, and subject to exceptions and limitations under local law, you additionally hold the following rights alongside those listed above:

· Right to Object to and Restrict Processing: you may request us to cease or limit processing of your personal information for certain purposes.

· Right to Withdraw Consent: where processing relies upon your consent, you are entitled to withdraw consent at any time. Withdrawal shall not affect the lawfulness of processing performed based on consent prior to withdrawal.

You may exercise these rights via relevant interfaces within our Services or by reaching out using our contact details below. For rights related to data processed by Shopify, please visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising your datasubject rights. We are required by law to verify your identity prior to fulfilling your requests. You may appoint an authorised agent to submit requests on your behalf; such agents must provide proof of your authorisation, and we may require direct identity verification from you. We will respond to valid requests within timeframes mandated by applicable law.

Complaints

If you have concerns regarding how we process your personal information, please contact us using the details provided below. Depending on your place of residence, you may appeal our decision or file a formal complaint with your local dataprotection supervisory authority.

International Data Transfers

Please be advised your personal information may be transferred, stored and processed outside your country of residence.

Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contractual instruments issued by the competent UK authority, unless data is sent to a country formally recognised as providing an adequate level of dataprotection.

Amendments to this Privacy Policy

We may revise this Privacy Policy from timetotime to reflect changes in our operational practices or for other business, legal or regulatory reasons. Revised versions will be published on our website with an updated “Last updated” date, and we will provide notices as required by applicable law.

Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or wish to exercise your available datasubject rights, please email us at postmaster@yewseaeboard.com.

For purposes of applicable dataprotection legislation, we act as the data controller for your personal information.