Privacy Policy

Last updated: August 31, 2026

Overview

This Privacy Policy explains how YOSLAY collects, uses, discloses, and protects personal information when you visit www.yoslay.com, purchase our products, create a customer account, contact us, or otherwise use our services, collectively referred to as the “Services.”

YOSLAY is operated by TCM LABS LLC.

In this Privacy Policy, “YOSLAY,” “we,” “us,” and “our” refer to TCM LABS LLC. “You” and “your” refer to customers, website visitors, account holders, and other individuals who interact with the Services.

For purposes of applicable data-protection laws, TCM LABS LLC is the data controller responsible for the personal information described in this policy.

Personal Information We Collect

The personal information we collect depends on how you interact with us and may include the following categories.

Contact and identity information

This may include your name, email address, telephone number, billing address, shipping address, and other delivery details.

Order and transaction information

This may include products viewed or purchased, order history, payment status, returns, refunds, exchanges, cancellation requests, shipping details, tracking information, discounts, and communications relating to an order.

Payment information

Payment providers may collect payment-card, bank-account, billing, authentication, and transaction information.

Full payment-card or bank-account details are generally collected and processed directly by payment providers and are not stored directly by YOSLAY.

Customer account information

This may include account identifiers, login-related information, saved preferences, wish lists, order history, return or cancellation requests, and account activity.

Device and usage information

This may include your IP address, browser and device type, operating system, network information, referring pages, pages viewed, search activity, interactions with the Services, approximate location derived from your IP address, and cookie or similar technology identifiers.

Marketing information

This may include your marketing preferences, subscription status, campaign interactions, advertising interactions, and information used to measure or personalize marketing communications and advertising.

Customer-support information

This may include messages, attachments, order information, and other details you provide when requesting assistance.

User-generated content

This may include reviews, ratings, photographs, comments, and other content you choose to submit.

Fraud-prevention and security information

This may include device, payment, account, transaction, and behavioral signals used to identify suspicious transactions, abuse, security incidents, or violations of our policies.

Please do not send sensitive personal information that is not reasonably necessary for us to provide the Services or respond to your request.

How We Collect Personal Information

We may collect personal information:

• Directly from you, including when you place an order, create an account, subscribe to marketing, submit a review, request a return or cancellation, or contact customer support.
• Automatically through cookies, pixels, logs, local storage, and similar technologies when you use the Services.
• From service providers and business partners, including Shopify, payment providers, fraud-prevention providers, analytics providers, advertising platforms, review tools, customer-support tools, manufacturers, fulfillment partners, and shipping carriers.
• From publicly available sources or authorities where permitted or required by law.

How We Use Personal Information

We may use personal information to:

• Provide, operate, maintain, and improve the Services
• Display products and maintain shopping carts
• Process checkout and payments
• Verify transactions and prevent fraud
• Confirm, manufacture, fulfill, ship, and track orders
• Manage returns, refunds, exchanges, and cancellation requests
• Create and manage customer accounts, wish lists, reviews, and preferences
• Communicate about orders, accounts, policy changes, security matters, and customer-support requests
• Send marketing communications where you have consented or where otherwise permitted by law
• Measure store performance and understand how visitors use the Services
• Personalize content, recommendations, marketing, and advertising where permitted
• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity
• Comply with legal, tax, accounting, regulatory, and recordkeeping obligations
• Establish, exercise, or defend legal claims
• Enforce our terms, policies, and agreements

Legal Bases for Processing

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction that requires a legal basis, we process personal information under the following legal bases, as applicable.

Performance of a contract

We process information necessary to accept payment, process and deliver orders, provide customer accounts, communicate about purchases, and manage eligible returns, refunds, exchanges, or cancellations.

Consent

We rely on consent for activities such as certain marketing communications, non-essential cookies, personalized advertising, and other processing where consent is required by law.

You may withdraw consent at any time. Withdrawal does not affect processing already completed lawfully before consent was withdrawn.

Compliance with legal obligations

We process information when necessary to comply with tax, accounting, consumer-protection, product-safety, regulatory, recordkeeping, court, or lawful governmental requirements.

Legitimate interests

We may process information for legitimate interests such as:

• Operating and improving the Services
• Responding to customer questions
• Protecting customers and transactions
• Preventing fraud and abuse
• Securing our systems
• Understanding store performance
• Maintaining business records
• Enforcing our agreements
• Establishing, exercising, or defending legal claims

We rely on legitimate interests only after considering the potential impact on your rights and where those interests are not overridden by your rights or freedoms.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described in this policy.

Shopify

Shopify hosts and powers our online store, checkout, customer-account, payment, security, analytics, and related commerce services.

Payment and fraud-prevention providers

These providers help authorize payments, authenticate transactions, reduce fraud, and protect customers and the Services.

Manufacturers and fulfillment partners

Manufacturers and fulfillment partners may receive the information reasonably necessary to prepare, package, personalize where applicable, and fulfill an order.

Shipping and logistics providers

Shipping carriers, customs intermediaries, and logistics providers may receive the information necessary to transport, track, clear, and deliver an order.

Technology and operational providers

These may include providers of hosting, cloud storage, analytics, customer support, email, marketing, security, reviews, and website functionality.

Marketing and advertising providers

These providers may help deliver, personalize, or measure communications and advertising, subject to applicable consent and opt-out requirements.

Professional advisers and authorities

We may disclose information to lawyers, accountants, insurers, auditors, regulators, courts, law-enforcement agencies, or other authorities when reasonably necessary or legally required.

Business transactions

Information may be disclosed in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate confidentiality and legal safeguards.

We do not provide other merchants with direct access to our customer list.

Shopify and Shopify Network Intelligence

Our store is hosted by Shopify. Shopify processes personal information to provide commerce, checkout, payment, security, customer-facing, and other services used by YOSLAY.

Shopify Network Intelligence is enabled for our store.

Shopify may securely combine information from interactions with YOSLAY, Shopify, and other Shopify merchants to provide enhanced services.

These enhanced services may help YOSLAY and Shopify:

• Provide a more personalized customer experience
• Prevent fraud and protect transactions
• Improve products and services
• Provide analytics and performance insights
• Understand how customers interact with stores and advertisements
• Deliver or measure more relevant advertising where permitted

Information about your activity on our store may be shared with Shopify and other service providers, including recipients located in other countries, to provide commerce and enhanced services.

Other Shopify merchants cannot directly access YOSLAY’s customer data through Shopify Network Intelligence.

Depending on the context, Shopify may process personal information as a processor or service provider acting for YOSLAY, or as an independent controller or business for certain enhanced services.

For more information, review the Shopify Consumer Privacy Policy.

To learn how Shopify processes personal information for enhanced services, or to withdraw consent or object to certain processing performed by Shopify, visit the Shopify Privacy Portal.

Cookies and Similar Technologies

We and our service providers use cookies, pixels, local storage, logs, and similar technologies to:

• Operate the online store
• Remember selections and preferences
• Keep carts, checkout, and accounts functioning
• Prevent fraud and maintain security
• Understand store performance
• Measure marketing
• Personalize content and advertising
• Provide analytics and other website features

Some technologies are necessary for the Services to function. Other technologies may be used only with your consent where required.

You can manage cookies using your browser settings and any cookie or privacy controls presented on the Site.

Blocking certain cookies may cause some features to function incorrectly.

For more information about cookies used by Shopify, review Shopify’s Cookie Policy.

Personalized Advertising, Sale, and Sharing

Depending on the law where you live, certain personalized advertising or disclosures of information may be treated as a “sale,” “sharing,” or processing for “targeted advertising,” even when no money is exchanged for personal information.

We do not sell personal information in exchange for money.

We may disclose identifiers, commercial information, and internet or device activity to commerce, analytics, marketing, and advertising providers for the purposes described in this policy.

Depending on applicable law, some of these activities may be considered sale, sharing, or targeted advertising.

You may exercise an applicable opt-out right through:

Your Privacy Choices

You may also contact support@yoslay.com.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.

Global Privacy Control and Do Not Track

Where required by applicable law and supported by our configured privacy tools, we process legally recognized opt-out preference signals, including Global Privacy Control.

Browser-based “Do Not Track” signals are not interpreted consistently across the industry. We do not respond to ordinary Do Not Track signals unless required by applicable law.

Marketing Communications

If you receive promotional emails from us, you may unsubscribe using the link included in the message.

Opting out of promotional messages does not prevent us from sending non-promotional communications, such as:

• Order confirmations
• Shipping and tracking notices
• Account or security alerts
• Policy notices
• Responses to customer-support requests

Automated Processing and Fraud Prevention

We and our service providers may use automated tools and fraud-prevention signals to identify potentially suspicious transactions, accounts, or website activity.

These tools may result in additional verification, a temporary delay, an account restriction, or an order being placed on hold for review.

Where applicable law grants you rights relating to a decision based solely on automated processing that produces legal or similarly significant effects, you may request information about the decision, express your point of view, contest the decision, or request human review by contacting support@yoslay.com.

Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Request access to personal information we hold about you
• Receive information about how we collect, use, or disclose personal information
• Request correction of inaccurate personal information
• Request deletion of personal information
• Receive a portable copy of certain personal information
• Restrict or object to certain processing
• Withdraw consent where processing is based on consent
• Opt out of certain sales, sharing, targeted advertising, or profiling
• Request safeguards relating to certain automated decisions
• Appeal a decision concerning a privacy request
• Not receive discriminatory treatment for exercising a privacy right

To submit a request, contact support@yoslay.com.

Please describe the right you wish to exercise and provide enough information for us to locate the relevant records.

We may need to verify your identity before completing a request.

You may use an authorized agent where permitted by law. We may request proof of the agent’s authorization and may need to verify your identity directly.

If we deny a request and applicable law provides a right to appeal, reply to our decision and state that you wish to appeal.

You may also have the right to complain to the data-protection or privacy authority where you live.

US State Privacy Rights

Residents of certain US states may have additional rights concerning access, deletion, correction, portability, sensitive information, and opting out of sale, sharing, targeted advertising, or certain profiling.

The categories of information we may collect, the purposes for which we use it, and the categories of recipients to whom we may disclose it are described in this policy.

We do not use sensitive personal information to infer characteristics about individuals.

To exercise an applicable opt-out right, visit:

Your Privacy Choices

For other applicable state privacy rights, contact support@yoslay.com.

We will respond in accordance with the law that applies to the request.

International Transfers

YOSLAY is based in the United States.

Shopify and our other service providers may process personal information in the United States and other countries.

Those countries may have privacy laws different from the laws where you live.

Where required, international transfers are made using legally recognized safeguards, which may include adequacy decisions, contractual protections, standard contractual clauses, or other lawful transfer mechanisms.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

• Providing the Services
• Fulfilling orders
• Maintaining transaction and business records
• Complying with legal, accounting, tax, and regulatory obligations
• Resolving disputes
• Preventing fraud
• Maintaining security
• Enforcing agreements

Retention periods vary depending on the type of information, our relationship with you, legal requirements, and whether the information is relevant to an actual or potential dispute.

When personal information is no longer reasonably required, we may delete or anonymize it, subject to legal and technical limitations.

Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information.

However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Please do not send passwords, full payment-card details, bank-account credentials, or other highly sensitive information through ordinary email or voicemail.

Public Content

Reviews, photographs, comments, and other content submitted to public areas of the Services may be visible to other users and the public.

Do not include personal information in public content that you do not want others to see.

Third-Party Websites

The Services may link to websites or services operated by third parties.

Their privacy and security practices are governed by their own policies. YOSLAY is not responsible for the privacy, security, or content practices of independent third parties.

Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Where a higher minimum age or parental-consent requirement applies, we will process children’s information only as permitted by applicable law.

If you believe a child has improperly provided personal information, contact us so that we can review and, where appropriate, delete it.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, Services, or legal obligations.

We will post the revised version on this page and update the “Last updated” date.

Where required by law, we will provide additional notice or obtain consent.

Contact Us

For privacy questions, complaints, or requests, contact:

YOSLAY / TCM LABS LLC

Email: support@yoslay.com

Telephone: +1 213-986-7480
Voicemail only; live calls are not answered.

Postal address:

TCM LABS LLC
30 N Gould St Ste 38855
Sheridan, WY 82801
United States

Website: https://www.yoslay.com

Legal information: Legal Notice

The data controller responsible for the personal information described in this policy is TCM LABS LLC.