Last updated: August 23, 2026
This policy explains what DesiYaaro collects when you use desiyaaro.com, why we collect it, who else sees it, and what you can ask us to do about it.
Who is responsible
DesiYaaro, 197 Cartagena St, Camarillo, CA 93010, United States. For any privacy question write to support@desiyaaro.com or call +1 469 648 0069.
What we collect
When you place an order
- Your name, billing address and shipping address.
- Your email address and phone number.
- What you ordered, what you paid, and the currency.
- The IP address the order came from, kept for fraud screening.
Payment details
We do not see or store your full card number. When you pay, you are handed to our payment provider, who processes the card on their own systems. We receive only a confirmation that the payment succeeded, the card type and the last four digits. PayPal payments work the same way – PayPal tells us the payment cleared, nothing more.
When you create an account
Your email address, a hashed password (we never store the password itself), and your saved addresses and order history.
When you sign up to the newsletter
Your email address, and the date you subscribed.
Automatically, when you browse
- Pages you looked at and how long you stayed.
- Your browser, device type and approximate location from your IP address.
- The site that sent you here.
Why we collect it
| What we do | Why we are allowed to |
|---|---|
| Take and deliver your order | To perform the contract you entered into when you bought something |
| Email you about that order | To perform the contract |
| Screen orders for fraud | Our legitimate interest in not being defrauded |
| Keep the site working and secure | Our legitimate interest in running the site |
| Send you the newsletter | Your consent, which you can withdraw at any time |
| Keep tax and accounting records | A legal obligation |
Who else sees your data
We do not sell your personal information, and we do not rent or trade mailing lists. We share only what is needed, with:
- Our fulfilment partner in Hong Kong – your name, shipping address and phone number, so the parcel can be addressed and cleared through customs.
- FedEx – the same details, to deliver it.
- Our payment provider and PayPal – to take the payment.
- Our web host – which stores the site and its database.
- Law enforcement or a regulator – only where we are legally required to.
International transfer
Because orders ship from Hong Kong, your name, address and phone number are transferred there to be fulfilled. That transfer is limited to what the warehouse and the carrier need to deliver and clear the parcel.
How long we keep it
- Order records: 7 years, for tax and accounting.
- Account details: until you ask us to close the account.
- Newsletter subscription: until you unsubscribe.
- Server and analytics logs: up to 12 months.
Cookies
We use cookies for the things the shop cannot work without – keeping your cart between pages, keeping you logged in, and remembering your cookie choice. We also use a small number of analytics cookies to count visits and see which pages are used.
You can block or delete cookies in your browser settings. If you block the essential ones, the cart and checkout will not work.
Your rights
Whatever state you live in, we will honour these:
- Know what we hold about you, and get a copy.
- Correct anything that is wrong.
- Delete what we hold, except records we must keep for tax.
- Opt out of marketing email, at any time, using the unsubscribe link or by writing to us.
- Not be discriminated against for exercising any of these. We will not refuse service or change your price because you asked.
California residents have these rights under the CCPA as amended by the CPRA, including the right to know what categories of personal information we collect and to opt out of any sale or sharing of it. We do not sell or share personal information as those terms are defined in the CCPA.
To exercise any right, email support@desiyaaro.com. We will verify who you are – usually by asking you to write from the address on the order – and reply within 45 days.
Children
The shop is not intended for children under 13 and we do not knowingly collect their data. If you believe a child has given us information, write to us and we will delete it.
Security
The whole site runs over HTTPS. Passwords are stored hashed. Access to order data is limited to the people who need it to do their job. No system is perfect, and we will not pretend otherwise – if a breach ever affects your data we will tell you.
Changes
If we change this policy we update the date at the top. Material changes will also be announced on the site.