PRIVACY POLICY

Last updated: August 14, 2025

This privacy notice for Hangzhou Yuiyto Technology Co., Ltd (doing business as Yuiyto) (“we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at https://www.yuiyto.com, or any website of ours that links to this privacy notice;
• Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, please contact us at [email protected].

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice. You can find more details in the sections referenced below.

• What personal information do we process? We process personal information depending on how you interact with Yuiyto and the Services, the choices you make, and the products and features you use. See What information do we collect?
• Do we process any sensitive personal information? We do not process sensitive personal information.
• Do we receive information from third parties? We do not receive personal information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. See How do we process your information?
• When and with whom do we share personal information? We may share information in specific situations and with specific categories of third parties. See When and with whom do we share your personal information?
• How do we keep your information safe? We have organizational and technical measures designed to protect your personal information. However, no method is 100% secure. See How do we keep your information safe?
• What are your rights? Depending on your location, applicable privacy law may give you certain rights regarding your personal information. See What are your privacy rights?
• How do you exercise your rights? You may submit a request by emailing [email protected]. We will respond in accordance with applicable data protection laws.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
6. HOW LONG DO WE KEEP YOUR INFORMATION?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS?
10. CONTROLS FOR DO-NOT-TRACK FEATURES
11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
12. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
13. DO WE MAKE UPDATES TO THIS NOTICE?
14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, express interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

Personal Information Provided by You. The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:

• names
• phone numbers
• email addresses
• mailing/billing addresses
• job titles
• usernames and passwords
• billing and order details

Sensitive Information. We do not process sensitive information.

Payment Data. If you make purchases, we may collect data necessary to process your payment (e.g., payment instrument number and associated security code). All payment data is stored by PayPal. You can view their privacy notice here: https://www.paypal.com/us/legalhub/privacy-full.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In Short: Some information—such as IP address and/or browser and device characteristics—is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily used to maintain the security and operation of our Services and for internal analytics.

Like many businesses, we also collect information through cookies and similar technologies. See our Cookie Notice.

The information we collect includes:

• Log and Usage Data: Service-related, diagnostic, usage, and performance information (e.g., IP address, device info, browser type, pages viewed, search queries, timestamps, and device event information).
• Device Data: Information about your computer, phone, tablet, or other device (e.g., IP address, unique device/app identifiers, browser type, hardware model, ISP/mobile carrier, OS, system configuration).
• Location Data: Approximate location (e.g., derived from IP address). You can disable location collection in your device or browser settings; however, some features may not function properly.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, enhance security and fraud prevention, and comply with law. We may also process your information for other purposes with your consent.

We process personal information depending on how you interact with our Services, including to:

• Facilitate account creation, authentication, and account management;
• Deliver and facilitate delivery of products/services you request;
• Respond to inquiries, provide support, and resolve issues;
• Fulfill and manage orders, payments, returns, and exchanges;
• Send administrative information (e.g., service, product, and policy updates);
• Send marketing and promotional communications in accordance with your preferences (you may opt out at any time);
• Protect vital interests and maintain safety (e.g., prevent harm or fraud);
• Comply with legal obligations and enforce our terms, conditions, and policies.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process personal information when we believe it is necessary and we have a valid legal basis under applicable law.

EU/UK GDPR

If you are located in the EU or UK, we may rely on the following legal bases:

• Consent: You have given permission for processing for a specific purpose. You may withdraw consent at any time.
• Performance of a Contract: Processing is necessary to fulfill our contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing is reasonably necessary to achieve our legitimate business interests, provided these do not override your rights and freedoms (e.g., to send offers about our Services).
• Legal Obligations: Processing is necessary to comply with legal obligations (e.g., tax or regulatory requirements).
• Vital Interests: Processing is necessary to protect someone’s life or vital interests.

Canada

If you are located in Canada, we may process your information with your express or implied consent, or, in limited circumstances, without your consent as permitted by law (e.g., investigations, fraud detection/prevention, legal requests, or emergencies).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations and with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors and service providers (e.g., analytics, advertising networks, and sales/marketing tools) who perform services for us and require access to such information to do that work. These parties are contractually bound to protect your information and may not use it for their own purposes.

Business Transfers. We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and similar tracking technologies (e.g., web beacons and pixels) to collect and store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information as long as necessary to fulfill the purposes outlined in this notice, unless otherwise required by law.

We will retain personal information only for as long as needed for the purposes set out in this notice, unless a longer retention period is required or permitted by law (e.g., tax, accounting, or other legal requirements). No purpose will require retaining your personal information longer than the period in which you have an account with us. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if not possible (e.g., backups), we will securely store it and isolate it from further processing until deletion is possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed 100% secure. Transmission of personal information to and from our Services is at your own risk. You should access the Services only within a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18 or the parent/guardian of a minor and consent to the minor’s use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and delete such data. If you become aware of any data we may have collected from children under 18, please contact us at [email protected].

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as the EEA, UK, Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

Depending on your location, your rights may include the right to:

• Request access to and obtain a copy of your personal information;
• Request rectification or erasure;
• Restrict the processing of your personal information;
• Data portability (if applicable);
• Not be subject to automated decision-making;
• Object to processing in certain circumstances.

We will consider and act upon any request in accordance with applicable data protection laws.

Withdrawing your consent: If we rely on your consent to process personal information, you may withdraw it at any time by contacting [email protected]. This will not affect processing already carried out lawfully.

Opting out of marketing: You can unsubscribe from marketing emails by clicking the “unsubscribe” link in our emails or by contacting us. We may still send service-related communications (e.g., transactional emails).

Account Information

If you would like to review or change information in your account or terminate your account, you can contact us using the details below. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases, though we may retain certain information for fraud prevention, troubleshooting, legal compliance, or enforcing our terms.

Cookies and similar technologies: Most browsers accept cookies by default. You can usually choose to remove or reject cookies via your browser settings. Doing so may affect certain features or services. For details, see our Cookie Notice.

If you have questions or comments about your privacy rights, email us at [email protected].

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and apps include a Do-Not-Track (“DNT”) setting. No uniform standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT signals. If a standard is adopted that we must follow in the future, we will update this privacy notice accordingly.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, you may have specific rights regarding access to your personal information under the CCPA/CPRA.

What categories of personal information do we collect?

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Real name, alias, postal address, phone, unique identifier, IP address, email, account name	YES
B. Personal information as defined in Cal. Civ. Code § 1798.80(e)	Contact info, employment-related info, financial information	YES
C. Protected classification characteristics	Gender, date of birth	YES
D. Commercial information	Transaction information, purchase history, payment details	YES
E. Biometric information	Fingerprints, voiceprints	NO
F. Internet or other similar network activity	Browsing/search history, interactions with websites/apps	NO
G. Geolocation data	Device location	NO
H. Audio/visual information	Images, audio, video or call recordings	NO
I. Professional or employment-related information	Business contact details, job title, work history	YES
J. Education information	Student records, directory information	NO
K. Inferences	Preferences and characteristics inferred from other data	YES
L. Sensitive personal information	As defined by CPRA	NO

Use and retention: We use and retain collected personal information as needed to provide the Services and as described in this notice (generally for as long as the user has an account, unless otherwise required by law).

Collection and sharing methods: See How do we process your information? and When and with whom do we share your personal information?. We may use targeting/marketing cookies and beacons/pixels/tags. We do not “sell” sensitive personal information and do not process sensitive personal information.

California residents

Shine the Light: California residents may request information regarding our disclosure of personal information to third parties for their direct marketing purposes once per year. To make such a request, contact us using the details below.

If you are under 18, reside in California, and have a registered account, you have the right to request removal of publicly posted data. Contact us with the email associated with your account and confirmation of California residency. We will make reasonable efforts to remove the data from public view (but it may not be completely removed from all systems, e.g., backups).

CCPA/CPRA rights

• Right to know what personal information we collect, use, disclose, and share;
• Right to delete personal information, subject to legal exceptions;
• Right to correct inaccurate personal information;
• Right to non-discrimination for exercising your rights;
• Right to opt out of selling or sharing personal information for cross-context behavioral advertising (where applicable).

Verification: We will verify your request by matching information you provide with our records (e.g., contacting you via a method previously provided). We will only use information provided in a request to verify identity or authority. You may designate an authorized agent to act on your behalf; we may require proof of authorization.

To exercise your rights, email [email protected].

12. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: You may have additional rights based on the country in which you reside.

Australia and New Zealand

We collect and process your personal information under the Privacy Act 1988 (Australia) and Privacy Act 2020 (New Zealand). If you do not provide information necessary for a stated purpose, we may be unable to offer certain services. You may request access to or correction of your personal information by contacting us (see How can you review, update, or delete…). You may lodge complaints with the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

You may request access to or correction of your personal information by contacting us (see How can you review, update, or delete…). If unsatisfied, you may contact the Information Regulator (South Africa): [email protected]; [email protected]; [email protected].

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by a new “Last updated” date and will be effective as soon as it is accessible. If material changes are made, we may notify you by prominently posting a notice or by sending you a direct notification. We encourage you to review this notice frequently to stay informed about how we protect your information.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at [email protected] or contact us by post:

Hangzhou Yuiyto Technology Co., Ltd
No. 268 Daguan Road, Gongshu District,
Hangzhou City, Zhejiang Province, China

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on the laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To submit a request, please email [email protected].