Privacy policy
Last updated:
This policy and personal information collection statement explain how YAT.lifestyle handles checkout, email verification, support emails and the optional newsletter.
Who is collecting your information
YAT.lifestyle is the perfume brand responsible for this website and its newsletter list. For privacy questions, access or correction requests, deletion, or withdrawal of marketing consent, contact hello@yatlifestyle.com.
What we collect
When you subscribe, we collect your email address, selected language, signup time, the marketing consent wording you accepted, the privacy policy version and your acknowledgement of it. We also record subscription status and the signup source. Newsletter signup does not ask for a name, address or payment details. Signups are currently stored as unverified; no confirmation or newsletter email is sent automatically.
Checkout and email verification
Checkout requires a verified email address. We store your email and a keyed hash of the verification code, plus expiry and attempt records. Codes expire after 10 minutes and verification proofs after 30 minutes; expired code and proof records are removed on subsequent verification requests. When you continue to payment, we store your name, email, phone, Hong Kong delivery address, optional delivery notes, selected products, language, totals, voucher and payment references and status. This lets us process payment, fulfil orders, send confirmation and provide support. Order records are kept while needed for these purposes and applicable obligations; contact us about access, correction or deletion. Buying or verifying an email does not subscribe you to marketing.
Support emails
Emails to orders@yatlifestyle.com, care@yatlifestyle.com and hello@yatlifestyle.com are saved for order handling and support. Cloudflare D1 stores a plain-text preview, sender, recipient, subject, receipt/forwarding status and attachment names; private Cloudflare R2 stores the full original email and attachments. Only authorised administrators can access the inbox and originals. Optional forwarding to the owner's Gmail inbox requires a verified destination. We retain messages only while needed for support, orders and applicable obligations. Contact hello@yatlifestyle.com to request access, correction or deletion.
Why we collect it
With your explicit consent, we use your email to send YAT.lifestyle fragrance launch announcements, collection news and promotional offers. Language preference helps us choose the language of updates. Consent records help us manage your choices. Joining is voluntary: you can browse without subscribing, but we cannot add you to the list without an email address and consent. We do not sell the list or provide it to other businesses for their own marketing.
Where it is stored and who can access it
Newsletter, verification and order records are stored in Cloudflare D1. Access is limited to authorised YAT.lifestyle operators and providers supporting the website, database, email and payment services. Cloudflare Email sends verification codes and order confirmations. Airwallex provides the hosted payment page and processes payment details; our order database stores payment references, amounts and status, not full card numbers or card security codes. Providers may process information outside Hong Kong. We may disclose information where required by law.
Your choices and how long we keep information
You can withdraw marketing consent at any time, free of charge, by emailing hello@yatlifestyle.com from the subscribed address. You can also request access, correction or deletion there. We may ask for information needed to confirm the address belongs to you. We retain signup details only while needed for the stated purposes and review the list before sending campaigns. After withdrawal, we stop marketing and retain only the minimum record needed to honour your choice or meet legal obligations. Deletion requests are handled by the brand, not automatically by this website.
Technical information and local storage
This website stores language and cart choices in browser local storage. Contact and delivery details are not saved there. A necessary HttpOnly cookie proves your checkout email for 30 minutes; separate order-access cookies last up to 30 days and let this browser retrieve its order. You can remove browser storage and cookies in browser settings, but that may remove access to the cart or order. Cloudflare processes technical request information to host and protect the site. Signup requests use an IP-based rate limit to reduce abuse; IP addresses are not saved in the newsletter table. Hosting logs may contain technical information such as IP addresses and request times. This signup does not add advertising trackers or tracking cookies.
Changes and future emails
The date above identifies this version. If our use of information changes, we will update this page and seek fresh consent where needed. Before sending newsletters, we will put a working unsubscribe method in each message. Consent to this list is not consent to unrelated marketing.