Privacy policy

Last updated: August 30, 2026

3.1 Who controls personal information

VayaZoom is the controller of personal information described in this policy when it decides why and how that information is used. The store is operated through Shopify. VayaZoom can be contacted at:

VayaZoom 3285 Southern Ave Memphis, TN 38111 United States Telephone: +1 (406) 316-4219 Contact form: https://vayazoom.com/pages/contact
A monitored privacy or support email address was not supplied for this draft. VayaZoom should add one before publication so customers can retain a direct written contact channel.

3.2 Information we collect and why

The information collected depends on how a person uses the store. VayaZoom seeks to collect information that is adequate, relevant, and reasonably necessary for the disclosed purposes.
Category
Examples
Main purposes
UK lawful basis where applicable
Identity and contact information
Name, billing and shipping address, email, telephone number
Create and fulfill orders, provide support, send operational notices, prevent fraud
Contract; legitimate interests; legal obligation
Order and transaction information
Products, order number, payment status, refunds, discounts, delivery data
Process purchases, deliver goods, maintain records, handle returns and disputes
Contract; legal obligation; legitimate interests
Payment information
Payment method, billing status, limited card or wallet details supplied by processors
Authorize and reconcile payment, manage fraud and refunds
Contract; legal obligation; legitimate interests
Account and preference information
Login, saved address, language, marketing choices, cookie choices
Operate accounts, remember preferences, honor choices
Contract; consent; legitimate interests
Device and usage information
IP address, browser, device, pages viewed, referral source, approximate location, cookie identifiers
Security, troubleshooting, analytics, service improvement and advertising where permitted
Legitimate interests; consent where required
Communications
Contact-form submissions, calls, messages, reviews and support history
Answer questions, resolve complaints, moderate content and improve support
Contract; legitimate interests; legal obligation
Fraud and compliance information
Risk indicators, authentication results, chargeback data, sanctions or legal request information
Protect customers and the store, enforce terms, comply with law
Legitimate interests; legal obligation
VayaZoom does not need the customer’s full payment-card number when payment is processed directly by Shopify or another payment provider. Those providers process payment information under their own terms and privacy notices.

3.3 Sources of information

VayaZoom may receive information directly from customers, automatically from their devices, from Shopify and store applications, from payment and fraud-prevention providers, from carriers and fulfillment partners, from customer-service providers, and from lawful public or commercial sources used to protect transactions.

3.4 How information is shared

VayaZoom does not disclose personal information indiscriminately. It may share information with recipients that need it for the following purposes.
Recipient category
Reason for disclosure
Shopify and hosting providers
Operate the storefront, checkout, accounts, security and administration
Payment processors and financial institutions
Authorize payments, issue refunds, prevent fraud and resolve disputes
Warehouses, suppliers, carriers and customs agents
Fulfill, ship, track, import and deliver orders
Customer-service and communications providers
Respond to inquiries and send order or service messages
Analytics, advertising and cookie providers
Measure use, attribute campaigns and personalize advertising when permitted by consent or opt-out law
Professional advisers and insurers
Obtain legal, accounting, audit, insurance and risk-management services
Authorities and transaction parties
Comply with law, protect rights and safety, or complete a merger, financing, reorganization or sale subject to appropriate safeguards
VayaZoom does not knowingly sell personal information for money. Certain disclosures through advertising cookies or similar technologies may nevertheless be treated as a “sale,” “sharing,” or “targeted advertising” under some US state laws. Where required, VayaZoom will provide an opt-out through cookie controls, a privacy-choice link, recognition of applicable browser signals, or the contact methods in this policy.

3.5 Marketing communications

VayaZoom may send marketing emails only as permitted by law and the customer’s choices. Every marketing email will provide an unsubscribe method. Unsubscribing from marketing does not stop necessary order, security, account, or legal messages.

3.6 Cookies and similar technologies

VayaZoom and its providers use cookies, pixels, local storage, and similar technologies to operate checkout, remember settings, prevent fraud, understand site use, and support advertising. The separate Cookie Policy explains the categories and available controls. For UK visitors, non-essential cookies should not be placed until an appropriate consent choice is obtained. The ICO states that organizations must provide clear information and an appropriate consent mechanism for cookies that are not strictly necessary.

3.7 Retention

VayaZoom retains personal information only for as long as reasonably necessary for the purpose collected, including fulfillment, customer service, accounting, tax, warranty, fraud prevention, dispute resolution, legal claims, and regulatory obligations. Retention is determined by the nature and sensitivity of the information, the transaction lifecycle, applicable limitation periods, security needs, and legal requirements. Information may be deleted, anonymized, or retained in restricted archives when active use is no longer necessary.

3.8 Security

VayaZoom uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed. Customers should use unique passwords, protect account credentials, and contact VayaZoom if they suspect unauthorized activity.

3.9 International transfers

VayaZoom is based in the United States, and personal information from UK customers may be processed in the United States and other countries where Shopify or other providers operate. Those countries may have different privacy laws. Where UK law requires a transfer mechanism, VayaZoom and its providers will use an applicable adequacy regulation, contractual safeguard, or permitted exception and will apply supplementary measures where appropriate.
The UK GDPR can apply to organizations outside the United Kingdom that offer goods or services to individuals in the UK. A non-UK organization may also need a UK representative unless an exception applies, such as processing that is only occasional, low risk, and does not involve large-scale special-category or criminal-offence data. VayaZoom must assess this requirement before actively targeting UK customers and insert representative details here if an appointment is required.

3.10 United Kingdom privacy rights

Subject to legal conditions and exceptions, UK individuals may request access to their personal information, correction of inaccurate or incomplete information, deletion, restriction of processing, objection to processing, and portability. They may withdraw consent at any time where consent is the lawful basis. The ICO describes these rights and states that requests should generally be answered without undue delay and within one month.
To make a request, use the VayaZoom contact form, telephone +1 (406) 316-4219, or write to the postal address above. VayaZoom may request information reasonably necessary to verify identity and authority. If a UK individual remains dissatisfied after contacting VayaZoom, the individual may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom.

3.11 United States state privacy rights

Residents of certain US states may have rights to confirm processing, access, correct, delete, or obtain a portable copy of personal information and to opt out of qualifying sale, sharing, targeted advertising, or profiling. These rights apply only when the relevant law covers VayaZoom and may be subject to exceptions.
California residents of a business covered by the CCPA may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising rights. Tennessee’s TIPA, where applicable, provides rights including access, correction, deletion, portability, and opt-out from qualifying sale, targeted advertising, or profiling.
A customer may submit a request through the contact form, by telephone, or by mail. VayaZoom will verify and respond within the time required by the applicable law and will provide an appeal method where required. Authorized agents may submit requests when legally permitted and properly documented. VayaZoom will honor applicable Global Privacy Control signals for covered online sale or sharing where required and technically detectable.

3.12 Children’s privacy

The store is intended for a general adult audience and is not directed to children under 16. VayaZoom does not knowingly collect personal information from children in a manner prohibited by law. A parent or guardian who believes a child provided personal information should contact VayaZoom so the matter can be reviewed and appropriate deletion can be considered.

3.13 Changes to this policy

VayaZoom may update this policy to reflect operational, technological, or legal changes. The revised version will be posted with a new “Last updated” date. Material changes will receive additional notice where required.