Privacy Policy | Yami's Tamales

This Privacy Policy explains how Yami's Tamales ("we", "us", "our") collects, uses, stores, and protects personal data when you use our website, place orders, and interact with our services.

1. Data we collect

Account data: name, email address, authentication information.
Order data: selected products, quantities, order notes, and fulfillment details.
Contact data: phone number, delivery or pickup instructions, and support messages.
Technical data: IP address, browser type, device information, and basic usage logs.

2. How we use data

Provide and operate ordering, checkout, and customer support.
Process and manage orders, including status notifications.
Secure the service, prevent abuse, and investigate fraud.
Improve product quality, reliability, and customer experience.
Comply with legal and accounting obligations.

3. Legal bases (where applicable)

Contract necessity (to deliver requested services).
Legitimate interests (security, analytics, operations).
Legal obligations (tax, accounting, consumer law).
Consent (where required, such as optional communications or non-essential cookies).

4. Sharing and processors

We share data only with trusted service providers required to run the platform (for example: hosting, authentication, database, payment, and email providers). We do not sell personal data.

5. International transfers

If data is transferred outside your country, we apply appropriate safeguards required by applicable law (for example contractual safeguards and vendor security controls).

6. Retention

We retain personal data only for as long as needed for service delivery, legal compliance, and dispute handling. When no longer needed, data is deleted or anonymized.

7. Security

We apply technical and organizational measures such as encryption in transit, access controls, monitoring, and least-privilege practices to protect personal data.

8. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, export, or object to certain processing of your data (including rights under GDPR, CCPA/CPRA, LGPD, PIPEDA, and DPDP). You may also withdraw consent where processing relies on consent.

9. Cookies and tracking

We use essential cookies for authentication and core functionality. Any optional analytics or preference cookies are managed according to applicable consent requirements.

10. Children

Our service is not directed to children under the age required by applicable law. If we learn that child data was collected unlawfully, we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date.

12. Contact

For privacy requests or questions, contact us at yamistamales@gmail.com.