Privacy policy
Last updated: August 30, 2026
3.1 Who controls personal information
VayaZoom is the controller of personal information described in this policy when it decides why and how that information is used. The store is operated through Shopify. VayaZoom can be contacted at:
VayaZoom 3285 Southern Ave Memphis, TN 38111 United States Telephone: +1 (406) 316-4219 Contact form: https://vayazoom.com/pages/contact
A monitored privacy or support email address was not supplied for this draft. VayaZoom should add one before publication so customers can retain a direct written contact channel.
3.2 Information we collect and why
The information collected depends on how a person uses the store. VayaZoom seeks to collect information that is adequate, relevant, and reasonably necessary for the disclosed purposes.
|
Category
|
Examples
|
Main purposes
|
UK lawful basis where applicable
|
|---|---|---|---|
|
Identity and contact information
|
Name, billing and shipping address, email, telephone number
|
Create and fulfill orders, provide support, send operational notices, prevent fraud
|
Contract; legitimate interests; legal obligation
|
|
Order and transaction information
|
Products, order number, payment status, refunds, discounts, delivery data
|
Process purchases, deliver goods, maintain records, handle returns and disputes
|
Contract; legal obligation; legitimate interests
|
|
Payment information
|
Payment method, billing status, limited card or wallet details supplied by processors
|
Authorize and reconcile payment, manage fraud and refunds
|
Contract; legal obligation; legitimate interests
|
|
Account and preference information
|
Login, saved address, language, marketing choices, cookie choices
|
Operate accounts, remember preferences, honor choices
|
Contract; consent; legitimate interests
|
|
Device and usage information
|
IP address, browser, device, pages viewed, referral source, approximate location, cookie identifiers
|
Security, troubleshooting, analytics, service improvement and advertising where permitted
|
Legitimate interests; consent where required
|
|
Communications
|
Contact-form submissions, calls, messages, reviews and support history
|
Answer questions, resolve complaints, moderate content and improve support
|
Contract; legitimate interests; legal obligation
|
|
Fraud and compliance information
|
Risk indicators, authentication results, chargeback data, sanctions or legal request information
|
Protect customers and the store, enforce terms, comply with law
|
Legitimate interests; legal obligation
|
VayaZoom does not need the customer’s full payment-card number when payment is processed directly by Shopify or another payment provider. Those providers process payment information under their own terms and privacy notices.
3.3 Sources of information
VayaZoom may receive information directly from customers, automatically from their devices, from Shopify and store applications, from payment and fraud-prevention providers, from carriers and fulfillment partners, from customer-service providers, and from lawful public or commercial sources used to protect transactions.
3.4 How information is shared
VayaZoom does not disclose personal information indiscriminately. It may share information with recipients that need it for the following purposes.
|
Recipient category
|
Reason for disclosure
|
|---|---|
|
Shopify and hosting providers
|
Operate the storefront, checkout, accounts, security and administration
|
|
Payment processors and financial institutions
|
Authorize payments, issue refunds, prevent fraud and resolve disputes
|
|
Warehouses, suppliers, carriers and customs agents
|
Fulfill, ship, track, import and deliver orders
|
|
Customer-service and communications providers
|
Respond to inquiries and send order or service messages
|
|
Analytics, advertising and cookie providers
|
Measure use, attribute campaigns and personalize advertising when permitted by consent or opt-out law
|
|
Professional advisers and insurers
|
Obtain legal, accounting, audit, insurance and risk-management services
|
|
Authorities and transaction parties
|
Comply with law, protect rights and safety, or complete a merger, financing, reorganization or sale subject to appropriate safeguards
|
VayaZoom does not knowingly sell personal information for money. Certain disclosures through advertising cookies or similar technologies may nevertheless be treated as a “sale,” “sharing,” or “targeted advertising” under some US state laws. Where required, VayaZoom will provide an opt-out through cookie controls, a privacy-choice link, recognition of applicable browser signals, or the contact methods in this policy.
3.5 Marketing communications
VayaZoom may send marketing emails only as permitted by law and the customer’s choices. Every marketing email will provide an unsubscribe method. Unsubscribing from marketing does not stop necessary order, security, account, or legal messages.
3.6 Cookies and similar technologies
VayaZoom and its providers use cookies, pixels, local storage, and similar technologies to operate checkout, remember settings, prevent fraud, understand site use, and support advertising. The separate Cookie Policy explains the categories and available controls. For UK visitors, non-essential cookies should not be placed until an appropriate consent choice is obtained. The ICO states that organizations must provide clear information and an appropriate consent mechanism for cookies that are not strictly necessary.
3.7 Retention
VayaZoom retains personal information only for as long as reasonably necessary for the purpose collected, including fulfillment, customer service, accounting, tax, warranty, fraud prevention, dispute resolution, legal claims, and regulatory obligations. Retention is determined by the nature and sensitivity of the information, the transaction lifecycle, applicable limitation periods, security needs, and legal requirements. Information may be deleted, anonymized, or retained in restricted archives when active use is no longer necessary.
3.8 Security
VayaZoom uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed. Customers should use unique passwords, protect account credentials, and contact VayaZoom if they suspect unauthorized activity.
3.9 International transfers
VayaZoom is based in the United States, and personal information from UK customers may be processed in the United States and other countries where Shopify or other providers operate. Those countries may have different privacy laws. Where UK law requires a transfer mechanism, VayaZoom and its providers will use an applicable adequacy regulation, contractual safeguard, or permitted exception and will apply supplementary measures where appropriate.
The UK GDPR can apply to organizations outside the United Kingdom that offer goods or services to individuals in the UK. A non-UK organization may also need a UK representative unless an exception applies, such as processing that is only occasional, low risk, and does not involve large-scale special-category or criminal-offence data. VayaZoom must assess this requirement before actively targeting UK customers and insert representative details here if an appointment is required.
3.10 United Kingdom privacy rights
Subject to legal conditions and exceptions, UK individuals may request access to their personal information, correction of inaccurate or incomplete information, deletion, restriction of processing, objection to processing, and portability. They may withdraw consent at any time where consent is the lawful basis. The ICO describes these rights and states that requests should generally be answered without undue delay and within one month.
To make a request, use the VayaZoom contact form, telephone +1 (406) 316-4219, or write to the postal address above. VayaZoom may request information reasonably necessary to verify identity and authority. If a UK individual remains dissatisfied after contacting VayaZoom, the individual may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom.
3.11 United States state privacy rights
Residents of certain US states may have rights to confirm processing, access, correct, delete, or obtain a portable copy of personal information and to opt out of qualifying sale, sharing, targeted advertising, or profiling. These rights apply only when the relevant law covers VayaZoom and may be subject to exceptions.
California residents of a business covered by the CCPA may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising rights. Tennessee’s TIPA, where applicable, provides rights including access, correction, deletion, portability, and opt-out from qualifying sale, targeted advertising, or profiling.
A customer may submit a request through the contact form, by telephone, or by mail. VayaZoom will verify and respond within the time required by the applicable law and will provide an appeal method where required. Authorized agents may submit requests when legally permitted and properly documented. VayaZoom will honor applicable Global Privacy Control signals for covered online sale or sharing where required and technically detectable.
3.12 Children’s privacy
The store is intended for a general adult audience and is not directed to children under 16. VayaZoom does not knowingly collect personal information from children in a manner prohibited by law. A parent or guardian who believes a child provided personal information should contact VayaZoom so the matter can be reviewed and appropriate deletion can be considered.
3.13 Changes to this policy
VayaZoom may update this policy to reflect operational, technological, or legal changes. The revised version will be posted with a new “Last updated” date. Material changes will receive additional notice where required.