Privacy policy

Last updated: 14 December 2025
Privacy Policy for Yallora (TMT7A LLC)
TMT7A LLC dba Yallora ("we", "our", "us").
Data we collect
- Order info: name, shipping address, email, payment details.
- Technical: IP, browser, cookies (via Shopify).
Purposes
Process orders, charge sales tax, prevent fraud, comply with laws.
No sale of data
We do not sell or rent personal information.
Third-party recipients
Shopify, payment processors (Stripe/PayPal), U.S. carriers (USPS/UPS) — each is PCI-DSS or equivalent.
California residents (CCPA)
You may request (i) categories of personal information we hold, (ii) deletion (legal exceptions apply). 
Email subject: "California Privacy Request" to store@yallora.com.
Retention
Order records 7 years (IRS & NY tax law), then deleted.
Security
SSL encryption, Shopify PCI-DSS Level-1, staff two-factor authentication.
Changes
Material changes will be posted on this page with a new "Last updated" date.
Contact: store@yallora.com