Privacy policy

1. Who we are

YouMachi ("we", "us") operates the store at youmachi.com. You can reach us atsales88@ggatc.comor +86 181 5864 9251 for anything privacy-related, including the requests described in section 8.

2. What we collect

• Order information — when you place an order we collect your name, email address, shipping address (address lines, city, state or province where applicable, postal code, and country), phone number (optional), the items and amounts in the order, your order number, and the payment references PayPal gives us (such as a PayPal order or transaction identifier).
• Your bag before checkout — the contents of your bag are kept in your own browser (its local storage). They stay on your device and are only sent to us when you place an order.
• Analytics data — we use Google Analytics to understand how the site is used: pages viewed, interactions such as adding to the bag or starting checkout, device and browser information, and your approximate location derived from your IP address by Google. See section 6.

What we never collect: your card or bank details. Payment happens in PayPal's hosted checkout, so full payment credentials are entered only on PayPal's pages and never reach our servers.

3. How we use your data

• To place, process, ship and deliver your order, and to record its status.
• To send you transactional messages about your order (confirmation and updates).
• To support you — for example when you look up an order using your order number and email address, or contact us with a question.
• To prevent fraud and abuse of the store.
• To understand, in aggregate, how the site is used (analytics).

We do not send marketing emails, and we do not use your order data for advertising.

4. Who we share it with

We share personal data only with services that are necessary to run the store and fulfil your order, each acting as a processor for its part:

• PayPal — processes your payment. It receives the details it needs for the transaction, such as your order amount and shipping address. PayPal's own privacy policy applies on its platform.
• Shipping carriers — receive your name, address and (if you provided it) phone number to deliver your parcel.
• Cloudflare — hosts the store, its database connectivity and transactional email delivery.
• Supabase — hosts the managed database where order records are stored.
• Google — provides our analytics. See section 6.

We never sell your personal data, rent it, or share it with advertising networks. We disclose data to authorities only where we are legally required to.

5. Where your data is

Our stores serve customers worldwide, and the services above operate in several countries — for example, our database is hosted in Japan and Cloudflare and Google operate globally. Your data may therefore be processed outside your country of residence. We only share with each service what it needs for its part, as described in section 4.

6. Analytics and cookies

We use Google Analytics 4 to measure how the site is used — for example which pages are viewed, how often the bag and checkout are used, and with what kinds of devices. For this, Google sets cookies and similar technologies, and may derive approximate location from your IP address. The measurements do not include your name, address or the contents of your orders.

You can block analytics cookies in your browser settings, use Google's opt-out browser add-on, or browse in a private window — the store works without them.

7. How long we keep it

We keep order records for as long as we need them to fulfil your order, handle returns, refunds and disputes, answer support questions, and meet accounting and legal obligations. When we no longer need them, we delete or anonymize them. Your bag data stays in your browser and never leaves it unless you order.

8. Your rights

• You can ask us what order data we hold about you, ask us to correct it, or ask us to delete it.
• To exercise any of these rights, emailsales88@ggatc.com with your order number. We answer within 30 days.
• Deletion is subject to record-keeping we must keep for accounting and legal purposes — where that applies, we delete everything else.
• If you are unhappy with how we handled your data, tell us — we will work to fix it. You also have the right to complain to your local data protection authority.

9. Adults only

This store is for adults only (18+, or the legal age of majority where you live), and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

10. Security

We keep the store small on purpose: traffic runs over HTTPS, we collect only the data listed in section 2, payment credentials never touch our servers, and access to our systems is restricted. No online service can promise perfect security, so if you ever notice something wrong with your order or our site, contact us.

11. Changes to this policy

We may update this policy as the store evolves. The current version is always published on this page, and material changes are reflected in the date at the top.