Privacy Policy

Last updated: September 25, 2026

NO&YO operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). NO&YO is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, process, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, interact with our advertising, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, use, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, processing, and disclosure of your information as described below.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably be linked to an identifiable individual.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

Contact details, including your name, billing address, shipping address, phone number, and email address.

Financial information, including credit card, debit card, financial account information, transaction details, form of payment, payment confirmation, and other payment-related information.

Account information, including your username, password, security questions, preferences, and account settings.

Transaction and shopping information, including products you view, search for, add to your cart, add to a wishlist, purchase, return, exchange, or cancel, as well as past transactions and order history.

Communications with us, including information you provide when contacting customer support, submitting inquiries, participating in promotions, or otherwise communicating with us.

Device and technical information, including information about your device, browser, operating system, network connection, IP address, device identifiers, and other online identifiers.

Usage information, including information about how and when you interact with or navigate the Services, pages and products viewed, searches, referral information, cart activity, checkout activity, purchase activity, interactions with advertisements, and other online activity.

Marketing and advertising information, including information concerning how you interact with our advertisements, marketing campaigns, social-media content, promotional messages, and advertising partners.

We may also draw inferences from the information described above in order to understand preferences, interests, or likely purchasing behavior where permitted by applicable law.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you, including when you create an account, visit or use the Services, make a purchase, subscribe to communications, participate in a promotion, communicate with us, or otherwise provide us with personal information.

Automatically through the Services, including from your device when you visit our website or use our Services, and through cookies, pixels, server-side event tracking, application programming interfaces (APIs), software development kits, and similar technologies.

These technologies may be provided by us or by service providers, analytics providers, advertising platforms, marketing partners, social-media platforms, and other third parties, including Shopify, TikTok, and other platforms we use to operate, measure, improve, and advertise the Services.

From our service providers, including when we engage companies to provide technology, payment processing, analytics, fulfillment, shipping, customer support, cloud storage, security, fraud prevention, advertising, or other services on our behalf.

From business, marketing, and advertising partners, including social-media platforms and advertising networks.

From other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services

We use your personal information to provide and improve the Services, including to process payments, fulfill orders, remember preferences, manage accounts, provide order and account notifications, process purchases, returns and exchanges, arrange shipping, enable reviews, provide customer service, recommend products, personalize your shopping experience, and improve the functionality and performance of the Services.

Marketing and Advertising

We may use personal information for marketing, advertising, analytics, attribution, and promotional purposes.

This may include:

• sending marketing, advertising, and promotional communications by email, text message, postal mail, or other channels;
• showing advertisements for our products or services on our Services and on third-party websites, applications, and platforms;
• measuring the effectiveness of advertising;
• understanding how customers interact with our Services;
• creating, measuring, or refining advertising audiences;
• attributing purchases or other actions to advertising campaigns;
• optimizing advertising campaigns;
• personalizing advertising and promotional content;
• understanding customer preferences and interests; and
• improving our marketing and business operations.

Depending on your interaction with the Services and applicable law, advertising technologies may process information including device and browser information, IP address, online identifiers, pages or products viewed, searches, cart activity, checkout activity, purchases, transaction details, referral information, and other information about interactions with the Services.

Where permitted by law, certain customer information, such as an email address or phone number, may be transmitted in hashed or otherwise protected form for purposes such as advertising measurement, attribution, audience matching, campaign optimization, fraud prevention, and improving advertising effectiveness.

TikTok and Advertising Technologies

We use TikTok advertising, analytics, and measurement technologies in connection with the Services.

These technologies may include:

• TikTok Pixel;
• TikTok Events API;
• Advanced Matching;
• Shopify and TikTok integrations;
• server-side event tracking;
• advertising measurement tools; and
• related TikTok advertising and commerce technologies.

These technologies may allow us and TikTok to collect, receive, process, or associate information relating to interactions with our Services, including:

• device, browser, operating system, and network information;
• IP address and other online identifiers;
• pages and products viewed;
• searches performed;
• interactions with our website;
• items added to or removed from a shopping cart;
• checkout activity;
• purchases and transaction information;
• advertising and referral information; and
• where permitted by applicable law, certain customer identifiers such as email address or phone number, which may be transmitted in hashed or otherwise protected form.

We may use these technologies to measure advertising performance, understand customer behavior, attribute purchases or other actions to advertising campaigns, create or measure audiences, optimize advertising campaigns, personalize advertising, prevent fraud or misuse, and better understand the effectiveness of our marketing.

TikTok processes information it receives in accordance with its applicable privacy policies, business data terms, and other terms governing its services.

Where required by applicable law, we obtain consent before using certain cookies, pixels, advertising technologies, or similar tracking technologies.

Depending on where you reside, you may have the right to opt out of certain uses or disclosures of personal information for targeted advertising, cross-context behavioral advertising, or activities considered a “sale” or “sharing” of personal information.

Security and Fraud Prevention

We use personal information to authenticate accounts, provide secure payment and shopping experiences, detect and investigate fraudulent, illegal, unsafe, or malicious activity, protect our customers and business, secure the Services, and prevent misuse.

If you register an account, you are responsible for keeping your login credentials secure. We recommend that you do not share your username, password, or other access information with anyone else.

Communicating With You

We use your personal information to provide customer support, respond to inquiries, provide important information about your account or orders, maintain our business relationship with you, and otherwise communicate with you about the Services.

Legal Reasons

We may use personal information to comply with applicable laws, regulations, court orders, subpoenas, law-enforcement requests, governmental requests, or other valid legal processes.

We may also use personal information to investigate or participate in litigation, disputes, civil discovery, regulatory proceedings, or other legal matters, and to enforce or investigate potential violations of our terms, agreements, policies, or rights.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate business purposes and subject to this Privacy Policy.

Such circumstances may include:

With Shopify, vendors, and service providers that perform services on our behalf, including IT management, payment processing, analytics, customer support, cloud storage, order fulfillment, shipping, fraud prevention, and other operational services.

With business, analytics, advertising, and marketing partners that help us operate, measure, advertise, and promote the Services.

These partners may include advertising platforms such as TikTok and other third parties that provide advertising, attribution, analytics, audience measurement, campaign optimization, social-media, or related services.

Depending on the service and applicable law, we may disclose or make available information relating to your device, online activity, interactions with the Services, transactions, purchases, and certain customer identifiers for these purposes.

Our business and marketing partners process information in accordance with their applicable privacy notices and contractual terms.

Depending on where you reside, certain disclosures for targeted advertising, cross-context behavioral advertising, audience matching, attribution, or campaign optimization may be considered a “sale” or “sharing” of personal information under applicable privacy laws. You may have the right to opt out of those uses as described in the Your Rights and Choices section below.

When you direct, request, or consent to disclosure, including when necessary to ship products, use social-media widgets, connect third-party accounts, or use login integrations.

With our affiliates or within our corporate group, where applicable.

In connection with a business transaction, including a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

For legal and safety purposes, including to comply with applicable laws, subpoenas, search warrants, government requests, or other legal obligations, to enforce our terms or policies, and to protect or defend the Services, NO&YO, our customers, our rights, or the rights of others.

Relationship With Shopify

The Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services.

Information you submit to the Services may be transmitted to and shared with Shopify and other third parties, including parties located outside the country where you reside, in order to provide and improve the Services.

To help protect, grow, and improve our business, we may use Shopify features that incorporate data and information obtained from your interactions with our Store, other merchants, and Shopify.

In these circumstances, Shopify may be responsible for certain processing of personal information, including responding to requests to exercise privacy rights relating to processing performed by Shopify.

To learn more about how Shopify uses personal information and the rights you may have, please review the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Cookies, Pixels, and Similar Technologies

We and our service providers, advertising partners, analytics providers, and other third parties may use cookies, pixels, APIs, server-side event tracking, SDKs, tags, local storage, and similar technologies in connection with the Services.

These technologies may be used to:

• operate and secure the Services;
• remember preferences;
• understand website usage;
• analyze performance;
• measure advertising effectiveness;
• attribute purchases and conversions;
• create or measure advertising audiences;
• personalize content and advertising;
• prevent fraud;
• improve our Services; and
• support marketing and business operations.

Where required by law, we obtain consent before placing or using certain non-essential cookies, advertising technologies, or similar tracking technologies.

You may be able to control cookies through your browser settings, device settings, consent-management tools, or other privacy controls available through the Services.

Blocking or disabling certain technologies may affect the functionality or personalization of the Services.

Third-Party Websites and Links

The Services may provide links to websites, applications, social-media platforms, or other online services operated by third parties.

If you follow links to services not owned or controlled by us, you should review their privacy and security policies and other terms.

We do not control and are not responsible for the privacy or security practices of third parties, including the accuracy, completeness, or reliability of information provided by those third parties.

Information you provide in public or semi-public areas, including information posted on social-media platforms, may be visible to other users and may be used by third parties.

Our use of advertising, analytics, social-media, and marketing technologies provided by third parties does not mean that we control those third parties’ independent privacy practices. We encourage you to review the privacy notices of the platforms and services with which you interact.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in the applicable jurisdiction.

If you are a parent or guardian and believe a child has provided personal information to us, you may contact us using the information below to request deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share,” as those terms are defined under applicable law, personal information of individuals under 16 years of age.

Security and Retention of Your Information

We maintain reasonable safeguards designed to protect personal information.

However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security.

Information transmitted through the internet or other communications channels may not always be secure. We recommend that you do not transmit sensitive or confidential information through unsecured channels.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide Services, maintain accounts, fulfill orders, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and meet other legitimate business needs.

Retention periods may vary depending on the nature of the information, the purposes for which it was collected, and applicable legal requirements.

Your Rights and Choices

Depending on where you reside, you may have some or all of the following rights regarding your personal information.

These rights are not absolute and may apply only in certain circumstances.

Right to Access / Know

You may have the right to request access to personal information that we maintain about you and information regarding how it is collected, used, processed, or disclosed.

Right to Delete

You may have the right to request deletion of certain personal information that we maintain about you.

Right to Correct

You may have the right to request correction of inaccurate personal information.

Right of Portability

You may have the right to receive a copy of certain personal information in a portable format and, where applicable, request that it be transferred to another party.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Depending on where you reside, you may have the right to opt out of the “sale” or “sharing” of personal information, cross-context behavioral advertising, or processing of personal information for targeted advertising, as those terms are defined under applicable privacy laws.

This may include certain disclosures of information to advertising and marketing partners, including TikTok, for advertising measurement, attribution, audience matching, personalization, cross-context behavioral advertising, or campaign optimization.

Where available, you may exercise these rights using the privacy controls provided through the Services.

If you visit our website with a recognized Global Privacy Control (“GPC”) opt-out preference signal enabled, and applicable law requires us to honor the signal, we will treat the signal as an opt-out request for the browser or device through which it is received.

If we can associate the device transmitting the signal with a Shopify account, the opt-out may also be applied to that account where supported.

To learn more about Global Privacy Control, visit https://globalprivacycontrol.org/.

Other than legally recognized privacy preference signals such as GPC where applicable, we do not necessarily respond to other “Do Not Track” browser signals.

Managing Communication Preferences

We may send promotional emails or other marketing communications.

You may opt out of promotional emails at any time by using the unsubscribe mechanism provided in the communication.

If you opt out of promotional communications, we may still send non-promotional messages, such as communications relating to your account, purchases, orders, security, or customer service.

Additional Rights for EEA and UK Residents

If you reside in the European Economic Area or United Kingdom, and subject to applicable exceptions and limitations, you may have additional rights, including:

Objection to Processing and Restriction of Processing. You may have the right to object to or request restriction of certain processing of your personal information.

Withdrawal of Consent. Where we rely on consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.

You may exercise applicable rights through the Services where available or by contacting us using the information below.

To learn more about Shopify’s privacy practices and rights relating to information processed by Shopify, visit:

https://privacy.shopify.com/en

Exercising Your Rights

We will not discriminate against you for exercising applicable privacy rights.

We may need to verify your identity before processing a request, as permitted or required by law.

Where permitted, you may designate an authorized agent to submit a request on your behalf. We may require proof that you authorized the agent to act for you and may also require you to verify your identity directly with us.

We will respond to valid requests within the time required by applicable law.

Complaints

If you have concerns or complaints about how we collect, use, process, or disclose personal information, please contact us using the information below.

Depending on where you reside, you may also have the right to appeal a decision regarding a privacy request or lodge a complaint with an applicable privacy or data-protection authority.

Residents of the EEA may contact their applicable data-protection supervisory authority.

International Transfers

We may transfer, store, or process personal information outside the country in which you reside.

Where applicable law requires safeguards for international transfers, we rely on recognized transfer mechanisms, which may include Standard Contractual Clauses approved by the European Commission, equivalent UK transfer mechanisms, adequacy decisions, or other legally recognized safeguards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, services, business operations, legal obligations, or regulatory requirements.

When we update this Privacy Policy, we will revise the “Last updated” date and provide additional notice where required by applicable law.

Contact

If you have questions about our privacy practices, this Privacy Policy, our use of advertising technologies, cookies, pixels, server-side event tracking, TikTok advertising technologies, or if you wish to exercise a privacy right, please contact us:

NO&YO
1323 SE 17th St, Suite 3013
Fort Lauderdale, FL 33316
United States

Email: hello@noandyo.com
Phone: +1 714-683-5814

For purposes of applicable data protection laws, NO&YO is the data controller of personal information for which we determine the purposes and means of processing.