Privacy policy

1. Who we are

YouMachi ("we", "us") is the store at youmachi.com, operated by Ningbo Fenghua Fight Trading Company Ltd., Room 602, Building 19, No. 1 Shengyuan Road, Economic Development Zone, Jiangkou Sub-district, Fenghua District, Ningbo City, Zhejiang Province, China. You can reach us atsales88@ggatc.comor +86 181 5864 9251 for anything privacy-related, including the requests described in section 8.

2. What we collect

• Order information — when you place an order we collect your name, email address, shipping address (address lines, city, state or province where applicable, postal code, and country), phone number (optional), the items and amounts in the order, your order number, and the payment references PayPal gives us (such as a PayPal order or transaction identifier).
• Your bag before checkout — the contents of your bag are kept in your own browser (its local storage). They stay on your device and are only sent to us when you place an order.
• Analytics data — if you accept analytics on our banner, we use Google Analytics to understand how the site is used: pages viewed, interactions such as adding to the bag or starting checkout, device and browser information, and your approximate location derived from your IP address by Google. See section 6.

What we never collect: your card or bank details. Payment happens in PayPal's hosted checkout, so full payment credentials are entered only on PayPal's pages and never reach our servers.

3. How we use your data

• To place, process, ship and deliver your order, and to record its status.
• To send you transactional messages about your order (confirmation and updates).
• To send you marketing emails only if you asked for them — see the next paragraph.
• To support you — for example when you look up an order using your order number and email address, or contact us with a question.
• To prevent fraud and abuse of the store.
• To understand, in aggregate, how the site is used (analytics).

Marketing emails are strictly opt-in: at checkout there is an unchecked box ("Email me occasional product updates and offers"), and only if you tick it do we use your email address for that purpose. Your choice is recorded with your order, and every marketing email includes an unsubscribe link — you can also unsubscribe any time by emailing us. We do not use your order data for advertising, and we never share it with advertising networks.

4. Who we share it with

We share personal data only with services that are necessary to run the store and fulfil your order, each acting as a processor for its part:

• PayPal — processes your payment. It receives the details it needs for the transaction, such as your order amount and shipping address. PayPal's own privacy policy applies on its platform.
• Shipping carriers — receive your name, address and (if you provided it) phone number to deliver your parcel.
• Cloudflare — hosts the store, its API and the database connectivity between them.
• Resend — sends our transactional emails (order confirmation, refund and shipping updates). It receives the recipient address and the order details shown in that email.
• Supabase — hosts the managed database where order records are stored.
• Google — provides our analytics. See section 6.

We never sell your personal data, rent it, or share it with advertising networks. We disclose data to authorities only where we are legally required to.

5. Where your data is

Our stores serve customers worldwide, and the services above operate in several countries — for example, our database is hosted in Japan and Cloudflare and Google operate globally. Your data may therefore be processed outside your country of residence. We only share with each service what it needs for its part, as described in section 4.

6. Analytics and cookies

We use Google Analytics 4 to measure how the site is used — for example which pages are viewed, how often the bag and checkout are used, and with what kinds of devices. For this, Google sets cookies and similar technologies, and may derive approximate location from your IP address. The measurements do not include your name, address or the contents of your orders. We also use Google Analytics conversion data to measure how well our advertising performs (for example, whether a visit from an ad led to a purchase).

Analytics run in Google's consent mode: on your first visit we show a small banner, and until you choose "Accept", Google Analytics receives only a cookieless signal — no analytics cookies are set and no personal data about you is collected. After you accept, cookies are set and measurement runs. If you choose "Decline", no cookies are set and no identifiable measurement runs — the store works fully without analytics. You can change your mind any time by clearing the site data in your browser (the banner will ask you again), and you can also block analytics cookies in your browser settings or use Google's opt-out browser add-on.

7. How long we keep it

We keep order records for as long as we need them to fulfil your order, handle returns, refunds and disputes, answer support questions, and meet accounting and legal obligations. When we no longer need them, we delete or anonymize them. Your bag data stays in your browser and never leaves it unless you order.

8. Your rights

• You can ask us what order data we hold about you, ask us to correct it, or ask us to delete it.
• To exercise any of these rights, emailsales88@ggatc.com with your order number. We answer within 30 days.
• Deletion is subject to record-keeping we must keep for accounting and legal purposes — where that applies, we delete everything else.
• If you are unhappy with how we handled your data, tell us — we will work to fix it. You also have the right to complain to your local data protection authority.

9. Adults only

This store is for adults only (18+, or the legal age of majority where you live), and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

10. Security

We keep the store small on purpose: traffic runs over HTTPS, we collect only the data listed in section 2, payment credentials never touch our servers, and access to our systems is restricted. No online service can promise perfect security, so if you ever notice something wrong with your order or our site, contact us.

11. Changes to this policy

We may update this policy as the store evolves. The current version is always published on this page, and material changes are reflected in the date at the top.