GDPR Information

Scope

Yumitos operates in the United States, Canada, and Mexico, with discovery-only features elsewhere in Latin America. We do not target the Service to the European Economic Area or the United Kingdom. If you access the Service from the EEA or UK, this page explains how the GDPR and UK GDPR apply to the personal data described in our Privacy Policy, and Yumitos Corporation is the data controller.

Legal bases

Where the GDPR applies, we process personal data on these bases: performance of a contract (providing the Service you signed up for), consent (marketing emails, the waitlist, and the health-related data described in our Consumer Health Data Privacy Policy), legitimate interests (securing and improving the Service), and legal obligations (tax and accounting records for orders).

Your rights

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Receive a portable copy of data you provided
• Restrict or object to certain processing
• Withdraw consent at any time, without affecting prior processing

To exercise any of these rights, email legal@yumitos.com. We respond within one month. You also have the right to lodge a complaint with your local supervisory authority.

International transfers

Our infrastructure runs in the United States on Google Firebase, Stripe, and related processors. Where data of EEA or UK visitors is transferred to the United States, our processors rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

Representative and data protection officer

We have not appointed an EEA or UK representative or a data protection officer, reflecting that the Service is not directed to those markets.

Contact

Privacy inquiries: legal@yumitos.com. Yumitos Corporation, 16192 Coastal Highway, Lewes, Delaware 19958-9776, USA.