Last Updated: July 2026

1. Introduction

Welcome to Yphora.

Yphora (“Yphora“, “we“, “our” or “us“) is committed to protecting your privacy and handling your personal information responsibly, transparently and securely. Whether you are browsing our collections, purchasing products, subscribing to our newsletter or contacting our customer support team, we recognise the importance of protecting the information you entrust to us.

This Privacy Policy explains how we collect, use, store, disclose and safeguard your personal information when you visit or use www.yphora.com (the “Website“), purchase our products, communicate with us or otherwise interact with our services.

We are committed to complying with applicable data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and other applicable privacy legislation. Where required, we also recognise applicable privacy rights provided under U.S. state privacy laws.

By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• our Website;
• our online store;
• customer enquiries;
• newsletter subscriptions;
• competitions or promotions operated by Yphora;
• customer service interactions;
• social media communications where you contact us directly; and
• any other services operated by Yphora that reference this Privacy Policy.

This Privacy Policy does not apply to third-party websites, marketplaces or services that operate independently of Yphora, even where links appear on our Website. We encourage you to review the privacy policies of any third-party websites before providing personal information.

3. Who We Are

Yphora is an international online lifestyle brand offering carefully curated art-inspired products for customers around the world.

For the purposes of applicable data protection legislation, Yphora is the organisation responsible for determining how and why your personal information is processed in connection with this Website.

If you have questions about this Privacy Policy or how your personal information is handled, you can contact us at:

Email: [email protected]

Additional contact details may be added to this Privacy Policy as our business grows.

4. Definitions

For the purposes of this Privacy Policy:

Personal Information means any information that identifies, relates to, describes or can reasonably be linked to an identifiable individual.

Processing means any operation performed on personal information, including collecting, recording, storing, organising, using, sharing, updating, transferring or deleting it.

Website refers to www.yphora.com and any associated online services operated by Yphora.

Services refers collectively to our Website, online store, products, newsletters, customer support and related services.

5. Information We Collect

The information we collect depends on how you interact with Yphora. Some information is provided directly by you, while other information is collected automatically when you use our Website.

Information You Provide Directly

You may choose to provide personal information when you:

• create an account;
• place an order;
• subscribe to our newsletter;
• contact our customer support team;
• submit an enquiry;
• enter competitions or promotions;
• leave product reviews (where available);
• communicate with us by email or through social media; or
• otherwise interact with our services.

Depending on your interaction with us, this information may include:

• your full name;
• email address;
• telephone number;
• billing address;
• delivery address;
• account login details;
• order history;
• product preferences;
• communication preferences;
• customer service correspondence; and
• information voluntarily included in messages sent to us.

Providing personal information is generally voluntary. However, certain information is necessary for us to process purchases, deliver products or respond to your enquiries. If required information is not provided, we may be unable to fulfil your request.

Payment Information

Yphora does not store your complete payment card information.

Payments made through our Website are processed securely by trusted third-party payment providers, including Stripe, PayPal, Apple Pay and Google Pay.

These providers collect and process payment information in accordance with their own privacy policies and security standards. Yphora receives only the information necessary to confirm payment, process orders, prevent fraud and provide customer support.

Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies, server logs and similar technologies.

This information may include:

• Internet Protocol (IP) address;
• browser type and version;
• operating system;
• device type;
• screen resolution;
• language settings;
• approximate geographic location;
• pages viewed;
• products viewed;
• referring website;
• search terms;
• navigation paths through the Website;
• time spent on pages;
• click activity;
• date and time of visits;
• unique device identifiers; and
• diagnostic and performance information.

We use this information to understand how visitors use our Website, improve performance, identify technical issues, detect fraudulent activity, enhance security and continually improve the customer experience.

Where appropriate, this information is analysed in an aggregated, anonymised or pseudonymised form.

Order Information

When you purchase products through Yphora, we collect the information necessary to process and fulfil your order, including:

• products ordered;
• order value;
• shipping method;
• delivery information;
• payment confirmation;
• transaction identifiers;
• refund information; and
• customer communications relating to your order.

This information enables us to process purchases, arrange delivery, provide customer support, comply with legal obligations and maintain accurate business records.

Marketing Information

If you subscribe to our newsletter or consent to receiving marketing communications, we may collect information including:

• your email address;
• marketing preferences;
• subscription status;
• email opens;
• link clicks;
• purchase activity associated with marketing campaigns where permitted by law; and
• other engagement metrics.

You may withdraw your consent or unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting us directly.

Social Media Interactions

If you communicate with Yphora through social media platforms such as Facebook, Instagram or Pinterest, we may receive information that you choose to share with us through those services.

Your use of social media platforms remains subject to the privacy policies and terms of the relevant platform providers.

6. How We Collect Information

We collect personal information in several ways.

Information You Provide

You provide information directly when you:

• create an account;
• purchase products;
• subscribe to newsletters;
• complete online forms;
• contact customer support;
• communicate with us by email or social media; or
• participate in competitions, promotions or surveys.

Information Collected Automatically

Certain information is collected automatically through technologies including:

• cookies;
• browser storage;
• analytics tools;
• advertising technologies;
• server logs; and
• security monitoring systems.

These technologies help us improve Website functionality, understand visitor behaviour, personalise content where appropriate, measure marketing performance and protect our services from misuse.

Further information about our use of cookies is provided later in this Privacy Policy and in our separate Cookie Policy.

Information Received from Third Parties

We may also receive personal information from trusted third parties involved in operating our business, including payment providers, order fulfilment partners, shipping providers, marketing platforms, analytics providers, fraud prevention services and advertising partners.

We use this information only where necessary to provide our services, fulfil our contractual obligations or comply with applicable laws.

7. How We Use Your Information

Yphora uses personal information only where there is a legitimate business purpose or another lawful basis for doing so.

Depending on how you interact with us, we may use your information to:

• provide our Website and online services;
• process and fulfil orders;
• arrange shipping and delivery;
• communicate about purchases;
• respond to enquiries;
• provide customer support;
• verify transactions;
• detect and prevent fraud;
• improve Website functionality;
• personalise your shopping experience;
• analyse Website performance;
• improve our products and services;
• conduct business reporting;
• send marketing communications where permitted by law;
• comply with legal obligations;
• establish, exercise or defend legal claims; and
• protect the security and integrity of our Website.

We will not use your personal information for purposes that are incompatible with those described in this Privacy Policy unless required or permitted by applicable law.

8. Legal Bases for Processing (UK and European Economic Area)

Where the UK GDPR or EU GDPR applies, Yphora processes personal information only where an appropriate legal basis exists.

Performance of a Contract

We process personal information where necessary to fulfil our contractual obligations, including processing orders, delivering products, providing customer support, processing refunds and managing customer accounts.

Consent

Where required by law, we rely on your consent to send marketing communications, place non-essential cookies on your device, deliver personalised advertising and process information for purposes where consent is legally required.

You may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before your consent was withdrawn.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Examples include improving our Website, understanding customer behaviour, securing our systems, preventing fraud, responding to enquiries, developing new products and services, measuring business performance and maintaining appropriate business records.

Whenever we rely on legitimate interests, we carefully assess and balance our interests against your privacy rights.

Legal Obligations

We may process personal information where necessary to comply with applicable legal or regulatory obligations, including taxation, accounting, consumer protection, fraud prevention and law enforcement requirements.

Vital Interests

In exceptional circumstances, we may process personal information where necessary to protect the vital interests of an individual or another person. This legal basis is expected to apply only in rare situations where immediate action is required to protect someone’s life or safety.

9. Cookies and Similar Technologies

Yphora uses cookies and similar technologies to provide essential Website functionality, improve performance, remember your preferences, understand how visitors use our Website and, where permitted, deliver relevant advertising.

Cookies are small text files placed on your device when you visit a website. They help websites recognise your browser or device and remember certain information during future visits.

Depending on your location and applicable law, we will request your consent before placing non-essential cookies on your device.

You may manage or withdraw your cookie preferences at any time through our cookie preference centre or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of parts of our Website.

We may use the following categories of cookies:

Essential Cookies

These cookies are necessary for the operation and security of the Website and cannot normally be disabled. They help enable functions such as:

• secure login;
• shopping cart functionality;
• checkout;
• fraud prevention;
• website security; and
• remembering your privacy preferences.

Functional Cookies

These cookies allow the Website to remember choices you make, such as your language, region and other personalised settings, improving your browsing experience.

Analytics Cookies

Analytics cookies help us understand how visitors interact with our Website. They provide anonymous or aggregated information that enables us to improve navigation, content, products and overall performance.

Advertising Cookies

Advertising cookies may be used, where you have given consent, to display advertisements that are more relevant to your interests, limit the number of times advertisements are shown and measure the effectiveness of advertising campaigns.

Further information about our use of cookies is available in our separate Cookie Policy.

10. Analytics and Website Performance

To better understand how our Website is used and continually improve the customer experience, Yphora uses analytics services.

These services may collect information such as:

• pages viewed;
• products viewed;
• session duration;
• click activity;
• approximate location;
• device information;
• browser information;
• referral sources;
• conversions; and
• website performance metrics.

Where possible, analytics information is aggregated or pseudonymised.

Analytics providers process information in accordance with their own privacy notices and applicable data protection laws.

11. Advertising and Marketing Technologies

Where you have provided consent, Yphora may use advertising technologies to promote our products and better understand the effectiveness of our marketing campaigns.

These technologies may include cookies, pixels, tags and similar tracking technologies.

Advertising partners may use information about your interactions with our Website to help display advertisements that are more relevant to your interests across other websites and online platforms.

You can manage your advertising preferences through your browser settings, your cookie preferences and the privacy settings provided by the relevant advertising platforms.

12. Third-Party Service Providers

To operate our business efficiently, Yphora works with carefully selected third-party service providers.

These providers process personal information only where necessary to perform services on our behalf and are required to protect your information in accordance with applicable contractual and legal obligations.

Our service providers may change from time to time as our business develops.

Website Platform

Yphora operates its Website using WordPress together with WooCommerce. These platforms enable us to operate our online store, manage customer accounts, process orders, maintain product catalogues, provide checkout functionality and manage customer communications.

Order Fulfilment

Orders placed through Yphora may be fulfilled through Printify. To manufacture and deliver products, we may share your name, delivery address, order reference, purchased products and shipping method. Printify receives only the information necessary to produce, package and dispatch your order.

Payment Processing

Payments are processed securely by trusted payment providers, including Stripe, PayPal, Apple Pay and Google Pay.

These providers receive only the information necessary to process transactions, verify payments, prevent fraud and comply with financial regulations. Yphora does not store your full payment card details.

Email Marketing

If you subscribe to our newsletter or other marketing communications, we may use Mailchimp and Klaviyo to manage subscriber lists, send newsletters, personalise communications, automate customer journeys and measure campaign performance.

You may unsubscribe from marketing communications at any time using the unsubscribe link included in every marketing email.

Google Analytics 4

Yphora uses Google Analytics 4 to better understand how visitors interact with our Website.

Google Analytics may collect information including pages viewed, approximate location, browser information, device information, session duration, referral sources and Website interactions.

Where available, we use privacy-enhancing settings, including consent controls, appropriate retention periods and other features designed to support applicable privacy requirements.

Google Ads

Yphora may use Google Ads to promote our products and measure the effectiveness of advertising campaigns.

Google Ads may use cookies and similar technologies to measure conversions, display personalised advertisements and support remarketing activities where permitted by law.

Meta Pixel

Yphora may use the Meta Pixel to understand how visitors interact with our Website after viewing our advertisements on Facebook or Instagram.

Information collected may include page visits, purchases, products viewed and other conversion events. Where required by law, the Meta Pixel will operate only after appropriate consent has been obtained.

Pinterest Tag

Yphora may use the Pinterest Tag to measure advertising performance and understand how visitors interact with our Website after engaging with Pinterest content.

Cloudflare

Yphora uses Cloudflare to improve Website performance, reliability and security.

Cloudflare helps optimise page loading, defend against malicious traffic, protect against distributed denial-of-service (DDoS) attacks and improve Website availability. In providing these services, Cloudflare may process technical information such as IP addresses, browser information and security-related data.

Meta Business Suite

Yphora may use Meta Business Suite to manage customer communications across Facebook and Instagram and to respond to customer enquiries submitted through those platforms.

13. International Transfers of Personal Information

Yphora serves customers in multiple countries. As a result, your personal information may be transferred to, processed or stored outside your country of residence, including countries whose data protection laws may differ from those in your jurisdiction.

Where personal information is transferred outside the United Kingdom, the European Economic Area or other jurisdictions with applicable transfer restrictions, Yphora implements appropriate safeguards. These may include Standard Contractual Clauses, adequacy decisions, contractual protections and other legally recognised transfer mechanisms.

14. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with legal, regulatory, taxation, accounting and business obligations.

Retention periods vary depending on the type of information collected and the purpose for which it is processed. When personal information is no longer required, it is securely deleted, anonymised or otherwise disposed of in accordance with applicable law.

15. Security of Personal Information

Protecting customer information is a priority for Yphora.

We maintain appropriate administrative, technical and organisational safeguards designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

These safeguards may include encrypted connections, secure payment processing, access controls, authentication procedures, system monitoring, firewalls, malware detection, regular software updates, secure backups and restricted employee access.

Although we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

16. Automated Decision-Making and Profiling

Yphora does not make decisions that produce legal or similarly significant effects based solely on automated processing.

We may use limited automated technologies to personalise product recommendations, improve marketing communications, detect potentially fraudulent transactions and enhance the functionality of our Website. These activities do not replace meaningful human oversight where such oversight is required by applicable law.

17. Your Privacy Rights (United Kingdom and European Economic Area)

If you are located in the United Kingdom or the European Economic Area, you may have certain rights regarding your personal information, subject to applicable law.

These rights may include:

Right of Access

You have the right to request confirmation of whether we process your personal information and, where we do, to receive a copy of that information together with details about how it is used.

Right to Rectification

If you believe that any personal information we hold about you is inaccurate or incomplete, you may request that it be corrected or updated.

Right to Erasure

In certain circumstances, you may request that we delete your personal information where there is no legal reason requiring us to continue processing it.

This right is not absolute and may not apply where we are legally required to retain information, such as for taxation, accounting or fraud prevention purposes.

Right to Restrict Processing

You may request that we temporarily restrict the processing of your personal information in certain circumstances while a request or objection is being considered.

Right to Data Portability

Where applicable, you may request a copy of the personal information you have provided to us in a structured, commonly used and machine-readable format, or ask us to transfer that information to another organisation where technically feasible.

Right to Object

You have the right to object to certain types of processing carried out on the basis of our legitimate interests.

You also have the right to object at any time to the processing of your personal information for direct marketing purposes.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Exercising Your Rights

To exercise any of your privacy rights, please contact us using the contact details provided at the end of this Privacy Policy.

We may request information to verify your identity before responding to your request.

Where applicable, we will respond within the timeframes required by law.

18. U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your state of residence, these rights may include the right to:

• know what personal information we collect;
• access personal information we hold about you;
• correct inaccurate personal information;
• request deletion of personal information;
• obtain a copy of your personal information in a portable format;
• opt out of targeted advertising where required by law;
• opt out of certain profiling activities where applicable; and
• appeal certain privacy-related decisions.

Yphora does not sell personal information for monetary compensation.

Where applicable law defines certain advertising activities as “selling” or “sharing” personal information, you may exercise any available opt-out rights by adjusting your cookie preferences or contacting us directly.

We will not discriminate against you for exercising any privacy rights available under applicable law.

19. Children’s Privacy

Yphora’s Website is intended for individuals aged 16 years or older.

We do not knowingly collect personal information from children where doing so would violate applicable law.

If you believe that a child has provided personal information through our Website without appropriate consent, please contact us promptly. If we become aware that personal information has been collected from a child in circumstances where it should not have been collected, we will take reasonable steps to delete that information.

20. Third-Party Websites

Our Website may contain links to third-party websites, social media platforms or online services that are not owned or operated by Yphora.

We are not responsible for the privacy practices, security or content of those third-party services.

We encourage you to review the privacy policies of any website or service you visit before providing personal information.

21. Business Transfers

As our business develops, Yphora may undergo changes including mergers, acquisitions, investment, corporate restructuring or the sale of some or all of our assets.

If such a transaction occurs, personal information may be transferred as part of the business assets, subject to applicable legal requirements.

Any successor organisation will be required to continue protecting your personal information in accordance with this Privacy Policy or will notify you of any material changes affecting the processing of your information.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal obligations or privacy practices.

When material changes are made, we will update the “Last Updated” date shown at the beginning of this Privacy Policy.

Where required by law, we will provide additional notice of significant changes or obtain your consent before those changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

23. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights or would like further information about how Yphora processes your personal information, please contact us.

Yphora

Email: [email protected]

Where applicable, we may request information to verify your identity before responding to your request.

24. Complaints

If you believe that Yphora has not handled your personal information in accordance with applicable data protection laws, we encourage you to contact us first so that we have the opportunity to resolve your concerns.

If you are located in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your personal information has been processed unlawfully.

If you are located within the European Economic Area, you may also lodge a complaint with your local supervisory authority.

Residents of other jurisdictions may have similar rights under the privacy laws applicable in their country or state.

25. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws applicable to the operation of Yphora, except where mandatory privacy or consumer protection laws in your country of residence provide otherwise.

Nothing in this Privacy Policy limits or excludes any rights you may have under applicable data protection or consumer protection legislation.

26. Contact Summary

For privacy enquiries, data protection requests or questions relating to this Privacy Policy, please contact:

Yphora

Email: [email protected]

Last Updated: July 2026