YNF Deals · Legal
California Privacy Notice
This notice explains the privacy rights California residents have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and describes how YNF Deals collects, uses, and discloses personal information. It supplements our Privacy Policy. The most important thing to know: we do not sell your personal information, and we do not share it for cross-context behavioral advertising — and we have not done either in the preceding 12 months.
1. Who this notice covers
This California Privacy Notice applies to natural persons who reside in California ("consumers") and who visit ynfdeals.com, hold an account with us, buy from our online store, or purchase from our TikTok LIVE auctions through the "YNF Deals" or "YNF Fragrance" shops. It is issued by YNF Deals, a retailer of authentic Arabian and designer fragrances located in Valley Stream, New York.
Terms used in this notice — such as "personal information," "sell," "share," and "sensitive personal information" — have the meanings given in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code § 1798.100 et seq., the "CCPA"). Where this notice and our general Privacy Policy address the same topic, California residents may rely on this notice.
Purchases made through TikTok Shop checkout are processed by TikTok under its own terms and privacy policy. TikTok's handling of your payment and platform data is described in TikTok's privacy policy, not this one; this notice covers the order information TikTok passes to us so we can pack and ship what you bought.
2. Personal information we collected in the last 12 months
In the 12 months preceding the effective date of this notice, we collected the categories of personal information listed below. We collect information in three ways: directly from you (when you create an account, check out, take the Fragrance Finder quiz, or contact support), automatically from your device (session data and first-party cookies), and from third parties (Google, if you use Google sign-in, and TikTok Shop, for orders placed there).
| CCPA category | What we collect | Sources | Why we collect it | Disclosed to (business purpose) |
|---|---|---|---|---|
| Identifiers | Name, email address, phone number, shipping and billing address, account sign-in email, IP address | You; your device; Google (if you use Google sign-in); TikTok Shop (for orders placed there) | Creating and securing your account, fulfilling orders, sending transactional email, providing support, fraud prevention, email marketing with your consent | Stripe (payments), Resend (transactional email), Cloudflare (security), USPS, UPS, and occasionally FedEx (delivery) |
| Commercial information | Order history, items purchased or claimed in live auctions, saved items, offers and coupons used, support and claim history | You; TikTok Shop | Fulfilling orders, resolving damage and defect claims, tax and accounting records, product recommendations | Stripe (charges and refunds), USPS, UPS, and occasionally FedEx (delivery details) |
| Internet or other electronic network activity | Pages viewed, session and sign-in activity, security logs, first-party cookie data including our ynf_fp device-recognition cookie | Your browser and device | Operating the site, keeping you signed in, fraud prevention, recording proof of legal consent, security | Cloudflare (CDN and security) |
| Geolocation data | Coarse, city-level location derived from your IP address; we do not collect precise (GPS-level) geolocation | Your device's IP address | Security, fraud screening, confirming U.S. shipping eligibility and applicable sales tax | Cloudflare (CDN and security) |
| Inferences | Fragrance preferences drawn from your fragrance profile and Fragrance Finder quiz answers | Your quiz answers and account activity | Recommending products and personalizing your shopping experience | Not disclosed — kept internal |
Some of the information above also falls within the "customer records" category described in Cal. Civ. Code § 1798.80(e); we treat it as described in the matching rows. We do not collect biometric information, protected classifications, precise geolocation, professional or employment information, or education information. Payment card numbers go directly to Stripe, Inc. — we never store them.
Every recipient named above is a service provider or contractor acting under contract for our business purposes, such as processing payments, delivering packages, sending order emails, and securing the site. We do not disclose personal information to any third party for that party's own marketing.
3. No sale, no sharing
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined in the CCPA. We have not sold or shared personal information in the preceding 12 months, including the personal information of consumers under 16 years of age.
This is consistent with how the site is built: we use only first-party cookies for essential functions — sign-in, your shopping bag, language and preferences, and the ynf_fp fraud-prevention and consent-record cookie. There are no third-party advertising cookies and no third-party analytics pixels on ynfdeals.com. Details are in our Cookie Policy.
Because we do not sell or share personal information, the CCPA does not require us to offer a "Do Not Sell or Share My Personal Information" link. If you send us an opt-out request anyway, we will honor it: we will record your preference and confirm that no sale or sharing is occurring.
4. Sensitive personal information
The only sensitive personal information we collect is your account log-in credential — your sign-in email combined with your password, which we store only in hashed form, never in plain text. We use it solely to authenticate you and secure your account.
We do not use or disclose sensitive personal information for any purpose other than those permitted by Cal. Civ. Code § 1798.121 and 11 CCR § 7027(m), and we do not use it to infer characteristics about you. Accordingly, the right to limit the use of sensitive personal information does not apply to our processing, and we are not required to offer a "Limit the Use of My Sensitive Personal Information" link.
5. How long we keep personal information
We keep each category of personal information only as long as reasonably necessary for the purposes described in Section 2, and longer only where the law requires it — for example, tax and accounting rules for order records. When a retention period ends, we delete or de-identify the information.
| Information | Retention period |
|---|---|
| Account data (profile, addresses, fragrance profile, saved items) | While your account is active, and up to 2 years after last activity |
| Order and tax records | 7 years (legal and accounting requirements) |
| Support tickets | 3 years after closure |
| Security and sign-in logs | 12 months |
| Consent records | Retained indefinitely as legal evidence, in a tamper-evident hash-chained log |
| Packing quality-assurance videos | 90 days, unless needed for an active dispute |
6. Your California privacy rights
As a California resident, you have the following rights with respect to your personal information:
- Right to know and access. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and the categories of recipients to whom we disclosed it.
- Right to correct. You may request that we correct inaccurate personal information we maintain about you. You can also edit most profile and address details yourself at /my.
- Right to delete. You may request that we delete personal information we collected from you, subject to the exceptions in the CCPA — for example, we may retain information needed to complete a transaction you initiated, detect and prevent fraud, or comply with a legal obligation such as tax record-keeping.
- Right to data portability. You may request a copy of your personal information in a portable and readily usable format.
- Right to opt out of sale or sharing. Because we do not sell or share personal information, there is nothing to opt out of — but we will honor and record any opt-out request you send.
- Right to limit use of sensitive personal information. This right does not apply, because we use sensitive personal information only for the limited purposes described in Section 4.
- Right to non-discrimination. We will not deny you goods or services, charge different prices, provide a different level of quality, or retaliate against you for exercising any of these rights.
One note on automation: our fraud screening of orders is partially automated. If an automated screen adversely affects your order, you may ask for human review by contacting [email protected], and a person will review the decision.
7. How to exercise your rights
7.1 How to submit a request
You may submit a request in either of two ways:
- Email [email protected] with the subject line "California Privacy Request," telling us which right you are exercising and the email address associated with your purchases or account.
- Use the privacy tools in your account at /my, which let you access, export, correct, and request deletion of your data directly.
7.2 How we verify your identity
Before acting on a request to know, correct, or delete, we verify that the requester is the person the information is about. If you have an account, we verify you by sending a one-time code to the email address on file, or by having you submit the request while signed in. If you do not have an account, we match the identifiers you provide — such as name, email address, and shipping address — against our order records.
We only ever ask for information reasonably necessary to verify you, and we use it solely for verification. If we cannot verify your identity to the required degree of certainty, we will tell you and explain why we could not complete the request.
7.3 Authorized agents
You may use an authorized agent to submit a request on your behalf. The agent must provide your signed, written permission (or a valid power of attorney), and we may also contact you directly to verify your identity and confirm that you authorized the request. We may deny a request from an agent who does not provide proof of authorization.
7.4 When you will hear from us
We confirm receipt of a request within 10 business days and respond substantively within 45 calendar days. If we need more time, we may extend our response by up to 45 additional days, and we will tell you in writing why the extension is needed. Requests to know may be made up to twice in any 12-month period, and responses cover the preceding 12 months.
Exercising your rights is free. If a request is manifestly unfounded or excessive — for example, because it is repetitive — the CCPA permits us to charge a reasonable fee or decline the request; if that ever applies, we will explain our decision before doing anything.
8. Shine the Light
California's "Shine the Light" law (Cal. Civ. Code § 1798.83) lets California residents request, once per calendar year, a list of the third parties to whom a business disclosed personal information for those third parties' own direct-marketing purposes. YNF Deals does not disclose personal information to third parties for their direct marketing, so there is nothing to report.
You may nonetheless submit a Shine the Light request by emailing [email protected] with "Shine the Light" in the subject line, and we will confirm this in writing.
9. Contact
Questions about this notice, our Privacy Policy, or your California privacy rights can be directed to:
YNF Deals
585 W Merrick Rd Ste 28 C
Valley Stream, NY 11580, United States
Email: [email protected]
Phone: +1 516-884-3338