Last updated: 21 September 2026
This policy explains what personal information [[LEGAL_ENTITY]] (“Yazan”, “we”, “us”) collects when you use yazanus.com, why we collect it, who else sees it, and what you can ask us to do with it. It describes this store as it actually works — not a generic template.
Who is responsible for your data
[[LEGAL_ENTITY]], [[REGISTERED_ADDRESS]], United States. For any question about this policy, or to exercise any right described below, contact [[PRIVACY_CONTACT_EMAIL]].
What we collect, and when
When you browse
Your IP address, browser type and language, the pages you view and the products you look at. This is used to render the site, keep your cart, protect against abuse (for example, rate-limiting sign-in attempts) and to understand which products people are interested in.
When you place an order
Your name, billing and shipping address, email address, phone number, the items ordered, the order total and the payment method used. We keep your order history so that you and our support team can refer to it.
We do not receive or store your full card number. Card details are entered directly with our payment processor, [[PAYMENT_PROCESSOR]], which returns only a transaction reference and the last four digits to us.
Before you finish an order (abandoned-cart emails)
If you type your email address into the checkout form but do not complete the order, that address and the contents of your cart are saved, and we may email you a reminder. This happens before you press the order button. Every such email contains an unsubscribe link, and you can ask us to delete the record at any time by writing to [[PRIVACY_CONTACT_EMAIL]].
When you create an account
Your email address, a password (stored only as a cryptographic hash — we cannot read it), your saved addresses, and your order history.
When you take part in rewards, referrals or social campaigns
If these features are enabled on your account, we store your points and store-credit balance and every transaction that changed it, your referral relationships, and — if you choose to link a social account — the public handle of that account and the public URLs of posts you submit to claim a reward. We never receive your social-network password. You can disconnect a linked account at any time from your account page, which removes the stored handle and any access token.
When you contact us
Whatever you put in the contact form or in an email: your name, your email address and your message.
When you use an AI assistant on this site
If we offer an AI assistant or AI-generated product guidance, the text you send it is transmitted to a third-party AI provider ([[AI_PROVIDER]]) to produce a reply. Do not put payment details, passwords or sensitive personal information into an AI chat. We retain these conversations for [[AI_RETENTION]] to improve replies and to investigate abuse.
Cookies and browser storage
We use the following, and nothing is placed for advertising purposes without your consent:
- Strictly necessary — your shopping cart and session (
woocommerce_cart_hash,woocommerce_items_in_cart,wp_woocommerce_session_*), and your sign-in cookie if you have an account. The site cannot work without these. - Preferences — your chosen colour theme and whether you have already dismissed the welcome offer, stored in your browser local storage. These never leave your device.
- Analytics and marketing — [[ANALYTICS_STATEMENT]]
You can clear or block cookies in your browser settings; if you block the strictly necessary ones, checkout will not work.
Why we are allowed to use it
- To perform our contract with you — taking payment, shipping your order, handling returns and warranty claims.
- To meet legal obligations — keeping tax and accounting records.
- Our legitimate interests — securing the site against fraud and abuse, and improving the store.
- Your consent — marketing emails, abandoned-cart reminders where consent is required in your country, and any optional analytics. You may withdraw consent at any time.
Who else sees your data
We do not sell your personal information. We share only what is necessary, with:
- Our payment processor ([[PAYMENT_PROCESSOR]]) — to take and refund payment.
- Shipping carriers ([[CARRIERS]]) — your name, address and phone number, so they can deliver.
- Our hosting and email providers ([[HOSTING_PROVIDER]], [[EMAIL_PROVIDER]]) — who store and transmit the data on our behalf.
- Our AI provider ([[AI_PROVIDER]]) — only the text you send to an AI feature.
- Error monitoring ([[ERROR_MONITORING]]) — technical diagnostics when something breaks, which may incidentally include your IP address.
- Authorities — where we are legally required to disclose.
International transfers
We ship worldwide, and some of the providers above operate outside United States. Where your data is transferred abroad we rely on [[TRANSFER_MECHANISM]] to protect it.
How long we keep it
- Orders and invoices — [[RETENTION_ORDERS_YEARS]] years, because tax law requires it.
- Accounts — until you ask us to delete yours, or after [[RETENTION_INACTIVE_MONTHS]] months of inactivity.
- Abandoned carts — [[RETENTION_ABANDONED_DAYS]] days.
- Contact-form messages — [[RETENTION_MESSAGES_MONTHS]] months.
- Unpaid, failed or cancelled orders — removed automatically after [[RETENTION_UNPAID_DAYS]] days.
Your rights
Depending on where you live, you may ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or send it to another provider. If you have an account you can request an export or an erasure yourself from your account page. Otherwise write to [[PRIVACY_CONTACT_EMAIL]] and we will answer within [[RIGHTS_RESPONSE_DAYS]] days.
Note that we may have to keep order records even after an erasure request, because tax law requires it; in that case we remove your data from everything except those records. You also have the right to complain to your local data protection authority.
Children
This store is not intended for anyone under [[MINIMUM_AGE]]. We do not knowingly collect their data; if you believe a child has given us information, write to [[PRIVACY_CONTACT_EMAIL]] and we will delete it.
Security
The site is served over HTTPS, passwords are stored only as hashes, sign-in attempts are rate-limited, and access to order data is restricted to staff who need it. No system is perfectly secure; if a breach ever affects your data we will notify you and the relevant authority as the law requires.
Changes
If we change this policy materially we will update the date at the top and, where the change affects you, tell you by email.