Privacy Policy
Yummy Bazaar Inc
70 Sewell Street, Unit D, Glassboro, NJ 08028
hello@yummybazaar.com
Effective Date: March 17, 2026 | Last Updated: March 17, 2026
SECTION 1 — SCOPE AND INTRODUCTION
This Privacy Policy describes how Yummy Bazaar Inc ("we," "us," or "our") collects, uses, discloses, and protects personal information from visitors and customers of yummybazaar.com (the "Site"). It applies to residents of all U.S. states, with additional rights described for California residents (CCPA) and New Jersey residents (NJDPA).
By using the Site, you acknowledge that you have read and understood this Privacy Policy.
SECTION 2 — INFORMATION WE COLLECT
2.1 Information You Provide Directly
• Name, email address, mailing/billing address, and phone number when you create an account or place an order
• Payment information (processed and encrypted by Shopify; we do not store raw card data)
• Phone number if you opt in to SMS marketing via Klaviyo
• Communications you send us via email, Intercom, or Zendesk
2.2 Information Collected Automatically
• IP address, browser type, operating system, and device identifiers
• Pages viewed, referring URLs, time on site, and clickstream data via Google Analytics
• Advertising interaction data via Meta Pixel, Google Ads, and Microsoft Ads
• Session and cart data stored via Shopify cookies
2.3 Sensitive Personal Information
We do not intentionally collect sensitive personal information such as Social Security numbers, financial account credentials, health data, racial or ethnic origin, religious beliefs, or biometric data.
SECTION 3 — HOW WE USE YOUR INFORMATION
We use personal information for the following purposes:
• To process and fulfill orders, including payment processing and shipping
• To communicate with you about your orders and account
• To send promotional emails via Klaviyo and Mailchimp, where you have provided consent
• To send SMS marketing messages via Klaviyo, where you have opted in with express written consent
• To serve targeted advertising via Meta Pixel, Google Ads, and Microsoft Ads
• To analyze site traffic and user behavior via Google Analytics
• To respond to customer service inquiries via Intercom and Zendesk
• To comply with applicable laws and legal obligations
• To detect, prevent, and investigate fraud and security incidents
SECTION 4 — EMAIL MARKETING (CAN-SPAM COMPLIANCE)
If you have opted in to receive marketing emails, we may send you promotional messages about our products, sales, and updates. In compliance with the CAN-SPAM Act:
• Every marketing email includes a clear and conspicuous unsubscribe mechanism
• We honor opt-out requests within 10 business days
• We do not use deceptive subject lines or sender information
• Our physical mailing address is included in every marketing email: 70 Sewell Street, Unit D, Glassboro, NJ 08028
To unsubscribe from marketing emails, click the "Unsubscribe" link in any email or contact us at hello@yummybazaar.com.
SECTION 5 — SMS MARKETING (TCPA COMPLIANCE)
|
Important: We collect mobile phone numbers on our Site for SMS marketing purposes. By providing your phone number and opting in, you provide express written consent to receive recurring automated marketing text messages from Yummy Bazaar Inc at the number provided. |
• Consent is not a condition of purchase
• Message and data rates may apply
• Message frequency varies
• To opt out at any time, reply STOP to any message or contact hello@yummybazaar.com
• To get help, reply HELP or contact us directly
• Carriers are not liable for delayed or undelivered messages
SMS data is processed through Klaviyo. See Klaviyo's privacy policy at klaviyo.com/legal/privacy for details on how they handle SMS data.
SECTION 6 — COOKIES AND TRACKING TECHNOLOGIES
We use cookies, pixels, and similar tracking technologies to operate the Site and deliver advertising. The following technologies are active on yummybazaar.com:
|
Technology |
Provider |
Purpose |
|
Shopify Cookies |
Shopify |
Session management, cart storage, storefront access |
|
Google Analytics |
|
Site traffic analysis and user behavior |
|
Google Ads Tag |
|
Conversion tracking and remarketing |
|
Meta Pixel |
Meta (Facebook) |
Ad conversion tracking and audience targeting |
|
Microsoft Ads Tag |
Microsoft |
Ad conversion tracking and remarketing |
|
Klaviyo |
Klaviyo |
Email and SMS marketing tracking |
|
Mailchimp |
Mailchimp / Intuit |
Email marketing tracking |
|
Intercom |
Intercom |
Customer support chat |
|
Zendesk |
Zendesk |
Customer support ticketing |
You may opt out of certain cookies by adjusting your browser settings or using the opt-out tools provided by each third party. Note that disabling cookies may affect Site functionality.
SECTION 7 — THIRD-PARTY DATA PROCESSORS
We share personal information with the following categories of service providers who process data on our behalf:
• E-commerce platform: Shopify Inc.
• Payment processing: Shopify Payments (PCI-DSS compliant)
• Email marketing: Klaviyo, Inc. and Mailchimp (Intuit Inc.)
• SMS marketing: Klaviyo, Inc.
• Advertising: Meta Platforms, Inc. (Facebook/Instagram); Google LLC (Google Ads); Microsoft Corporation (Microsoft Ads)
• Customer support: Intercom, Inc.; Zendesk, Inc.
• Analytics: Google LLC (Google Analytics)
These providers are contractually required to use your information only to provide services to us and may not use it for their own independent purposes, except as described in their own privacy policies.
We do not sell your personal information to third parties for monetary compensation.
SECTION 8 — ELECTRONIC COMMUNICATIONS (ECPA)
We use third-party platforms including Intercom and Zendesk for customer communications. These platforms may log, store, and process the content of communications you send through them. By using these chat and ticketing tools, you acknowledge that communications are processed and stored by these third-party providers, subject to their respective privacy policies.
We do not intercept private electronic communications outside of the services you initiate through our Site.
SECTION 9 — CALIFORNIA RESIDENT RIGHTS (CCPA / CPRA)
|
California Residents: If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). |
9.1 Your Rights
• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We share personal information with Meta, Google, and Microsoft for cross-context behavioral advertising. This may constitute "sharing" under CCPA. You have the right to opt out. See our Do Not Sell or Share My Personal Information page.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is permitted under CCPA without your consent.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
9.2 How to Submit a Request
To exercise your rights, contact us at hello@yummybazaar.com or write to: Yummy Bazaar Inc, 70 Sewell Street, Unit D, Glassboro, NJ 08028.
We will verify your identity before processing your request. We will respond within 45 days. We may extend this period by an additional 45 days where reasonably necessary with prior notice.
9.3 Authorized Agent
You may designate an authorized agent to make a request on your behalf. We may require written proof of authorization and may verify your identity directly.
SECTION 10 — NEW JERSEY RESIDENT RIGHTS (NJDPA)
|
New Jersey Residents: The New Jersey Data Privacy Act (NJDPA), effective January 15, 2025, provides New Jersey residents with privacy rights similar to those described above. |
As a New Jersey resident, you have the right to:
• Access the personal data we process about you
• Correct inaccurate personal data
• Delete personal data you have provided or that we have collected
• Obtain a portable copy of your personal data
• Opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects
To submit a request under the NJDPA, contact us at hello@yummybazaar.com. We will respond within 45 days, with a possible 45-day extension upon notice.
If we decline to act on your request, you may appeal by contacting us at the same address. If you are unsatisfied with our response to your appeal, you may contact the New Jersey Division of Consumer Affairs.
SECTION 11 — DO NOT SELL OR SHARE MY PERSONAL INFORMATION
We do not sell your personal information for monetary compensation. However, we share certain identifiers (such as cookie data and device identifiers) with Meta, Google, and Microsoft for cross-context behavioral advertising purposes. This may constitute "sharing" under California law and "sale" under New Jersey law.
You have the right to opt out of this sharing/sale. To opt out:
• Visit our Do Not Sell or Share My Personal Information page at yummybazaar.com/pages/do-not-sell
• Use browser-based opt-out tools such as the Global Privacy Control (GPC)
• Contact us directly at hello@yummybazaar.com
We will process opt-out requests within 15 business days.
SECTION 12 — DATA RETENTION
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:
• Order and transaction data: retained for a minimum of 7 years for tax and legal compliance
• Email marketing data: retained until you unsubscribe or request deletion
• SMS marketing data: retained until you opt out or request deletion
• Customer support records: retained for up to 3 years after your last interaction
• Analytics data: subject to the retention settings of Google Analytics
SECTION 13 — DATA SECURITY
We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:
• SSL/TLS encryption for data transmission
• AES-256 encryption for stored payment data (via Shopify)
• PCI-DSS compliance for all payment processing
• Access controls limiting employee access to personal data on a need-to-know basis
No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
SECTION 14 — CHILDREN'S PRIVACY
The Site is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information. If you believe we have collected such information, contact us at hello@yummybazaar.com.
SECTION 15 — LINKS TO THIRD-PARTY SITES
The Site may contain links to third-party websites. This Privacy Policy does not apply to those sites. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies before providing any personal information.
SECTION 16 — CHANGES TO THIS POLICY
We reserve the right to modify this Privacy Policy at any time. We will post the updated policy on this page with a revised effective date. If we make material changes, we will notify you by email (if we have your address) or by posting a prominent notice on the Site. Your continued use of the Site after the effective date of any changes constitutes your acceptance of the revised policy.
SECTION 17 — CONTACT INFORMATION
For privacy-related requests, questions, or complaints, contact our Privacy Compliance Officer:
Yummy Bazaar Inc
Attn: Privacy Compliance Officer
70 Sewell Street, Unit D
Glassboro, NJ 08028
Email: hello@yummybazaar.com
We aim to respond to all privacy inquiries within 30 days.
