Privacy policy
Before launch: this describes how the platform handles data technically. It still needs review against applicable law, plus an effective date and the registered data controller's details.
What YuriLink collects
- Account details: your name, email address, phone number and password (stored only as a cryptographic hash — YuriLink cannot read it).
- Delivery addresses you save, and the address snapshot attached to each order.
- Order and payment records, including the transaction reference you submit for mobile financial services payments.
- Activity used to make the site useful: products you have viewed, searches you have run, and items you have saved.
- Messages you exchange with stores or with YuriLink support.
- Technical records kept for security: sign-in attempts, the IP address they came from, and the browser used.
Sellers and their documents
- Stores additionally provide a trade licence, a national ID or passport, and payout details.
- These documents are held in private storage that is not reachable from the public internet. They are never published on a store page or returned by the public API.
- Bank account numbers are encrypted at rest and are only ever displayed back in masked form.
- Every time a YuriLink staff member opens one of these documents, the platform records who opened it and when.
What is shared, and with whom
- When you place an order, the store fulfilling it receives your name, phone number and delivery address. It cannot see your payment details or your other orders.
- Couriers receive what they need to deliver the parcel.
- YuriLink does not sell personal data, and does not share it for third-party advertising.
How long data is kept
- Order, payment and settlement records are retained as long as required for accounting and tax purposes.
- Browsing and search history can be cleared from your account at any time.
- Closing your account removes personal details, but records tied to completed financial transactions are retained where the law requires it.
Your choices
- You can view and correct your account details, addresses and notification preferences from My account.
- You can turn off promotional email and SMS separately from order notifications.
- You can request a copy of your data, or ask for your account to be closed, through the contact routes on the Contact page.
Keeping your account secure
- Two-factor authentication is available to every shopper and required for stores and staff.
- Resetting your password signs you out of every other device.
- YuriLink will never ask for your password, sign-in code or mobile banking PIN by phone, email or chat.