Privacy policy

Last updated: February 28, 2026

This Privacy Policy describes how YoshBuddy (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, access, use our services, or make a purchase from our website (the “Site”), or otherwise communicate with us in relation to the Site (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means any user of the Services, including customers, website visitors, and any individual whose personal information we collect pursuant to this Policy.

We operate from the Netherlands and offer products and services to customers located within the European Union, the United States, and other international jurisdictions.

Please read this Privacy Policy carefully. By accessing or using any part of the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. If you do not agree to the terms of this Privacy Policy, you should not access or use the Services.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our operational practices, legal requirements, or regulatory developments. When changes are made, we will revise the “Last updated” date at the top of this Policy and post the updated version on the Site. Continued use of the Services following the posting of changes constitutes acceptance of such changes to the extent permitted by applicable law.

How We Collect and Use Personal Information

To provide the Services, we collect and have collected personal information from a variety of sources, depending on how you interact with us. In addition to the specific uses described below, we may use personal information to communicate with you, perform contractual obligations, improve and optimize the Services, comply with legal requirements, enforce our Terms of Service, detect or prevent fraud or misuse, and protect the rights, property, and safety of our business and users.

Personal Information We Collect

When we refer to “personal information,” we mean information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with an identifiable individual.

Information You Provide Directly

Information you provide directly through the Services may include:

  • Contact details, including name, billing address, shipping address, email address, and telephone number.

  • Order information, including products purchased, transaction details, and payment confirmations.

  • Account information, including login credentials and account security details.

  • Customer support communications, including any information you choose to provide when contacting us.

You may choose not to provide certain information; however, doing so may limit your ability to access certain features of the Services.

Information Collected Automatically

We may automatically collect certain information about your interaction with the Services (“Usage Data”). This may include IP address, browser type, device information, operating system, time zone, referring URLs, pages viewed, interaction data, and similar technical information. Such data may be collected through cookies, pixels, server logs, and comparable tracking technologies.

Information Obtained from Third Parties

We may obtain personal information from third parties, including but not limited to:

  • Shopify, which provides the e-commerce infrastructure for the Site.

  • Payment processors that securely process transactions on our behalf. We do not store full payment card details.

  • Shipping and logistics providers.

  • Analytics, marketing, and advertising partners.

  • Fraud prevention and security service providers.

Personal information obtained from third parties will be processed in accordance with this Privacy Policy.

Legal Bases for Processing (EEA Residents)

If you are located within the European Economic Area, we process personal information in accordance with the General Data Protection Regulation (GDPR) under one or more of the following legal bases:

  • Performance of a contract, including processing and fulfilling orders.

  • Compliance with legal obligations, including tax and financial recordkeeping requirements.

  • Legitimate interests, including business operations, fraud prevention, security, service improvement, and direct marketing where permitted by law.

  • Consent, where required, including for marketing communications and non-essential cookies.

Where processing is based on consent, you may withdraw such consent at any time.

How We Disclose Personal Information

We may disclose personal information in the following circumstances:

  • To service providers performing services on our behalf, including hosting providers, payment processors, analytics providers, marketing partners, customer support services, cloud storage providers, and fulfillment partners.

  • To shipping carriers for the purpose of delivering purchased products.

  • To advertising and marketing partners in connection with targeted advertising and promotional activities.

  • To comply with legal obligations, court orders, or lawful governmental requests.

  • In connection with a merger, acquisition, restructuring, or sale of business assets.

  • To enforce our Terms of Service or protect our rights and interests.

We do not sell personal information for monetary compensation. However, certain disclosures made for advertising or analytics purposes may be considered “sharing” under applicable U.S. state privacy laws.

U.S. State Privacy Rights

Residents of certain U.S. states, including California, may have rights under applicable privacy laws, which may include the right to request access to personal information, request deletion, request correction, opt out of the sale or sharing of personal information, limit the use of certain sensitive personal information, and receive non-discriminatory treatment for exercising such rights.

Requests may be submitted to support@yoshbuddy.com. We may require verification of identity prior to processing a request.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate, maintain, and improve the Services; analyze traffic and user interactions; remember preferences; and support advertising activities. You may manage cookie preferences through your browser settings. Disabling cookies may impact certain features or functionality of the Site.

Where legally required, we obtain consent prior to placing non-essential cookies.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including satisfying legal, accounting, or reporting requirements, resolving disputes, and enforcing agreements. Transactional records may be retained for up to seven (7) years in accordance with applicable financial and tax regulations.

International Data Transfers

As we operate internationally, personal information may be transferred to and processed in countries outside your country of residence, including countries outside the European Economic Area. Where required, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

Children’s Data

The Services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal information from children. If we become aware that such information has been collected without appropriate consent, we will take reasonable steps to delete it.

Security

We implement appropriate technical and organizational measures designed to safeguard personal information against unauthorized access, alteration, disclosure, or destruction. However, no system can guarantee absolute security.

Your Rights and Complaints

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to processing, or request portability of your personal information. You may also have the right to lodge a complaint with a supervisory authority.

If you are located within the Netherlands or the European Union, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Contact

To exercise your rights or submit inquiries regarding this Privacy Policy, please contact:

support@yoshbuddy.com
YoshBuddy
Rentmeesterlaan 253
4336EL, MIDDELBURG
Netherlands