Privacy policy
What Yufemayi records when you write, chat or click through from an ad, and what you can do about it.
This policy covers the inquiry form, the support chat, the cookies and click identifiers this site sets, and how to reach us with a data request. It is written for this small Austin studio, run by one person plus one part-time production hand — not adapted from a larger company's boilerplate.
When this policy took effect
This policy took effect on 7 September 2026 and applies to this website, yufemayi.com, from that date forward. Any version in force before that date is superseded by this one.
Who operates this site
Yufemayi, trading at yufemayi.com, operates this site from 84 Mill Street, Unit B, Austin, Texas 47748, United States. Yufemayi is the controller of the data described below. Write to office@yufemayi.com or call +1 (783) 555-7514 with any question about this policy.
What we actually collect
The inquiry form on this site writes your name, phone, email, business or project address, the kind of inquiry, your message, the specification you requested, and your consent tick. With that submission, the server automatically records your IP address, your browser's user-agent string, the page that referred you, and the moment the form was rendered and the moment it was sent.
The support chat keeps the conversation you have with us and stores a token in your browser so you can return to the same thread. Technical and log data — IP address, user-agent, referring URL, timestamps — is recorded for every visit, not only for people who submit a form. Cookie identifiers and advertising click identifiers, described below, are recorded when a link carries them.
What each category is used for
Inquiry data is used to answer your message, schedule work and keep a record of what was agreed. Chat data is used to hold the conversation and let you pick it back up. Technical and log data is used to keep the site running and to investigate abuse. Cookie and click identifiers are used to measure which ad clicks led to an inquiry and, once you allow storage, to personalise ads on the platforms named below.
The basis for each purpose
Answering an inquiry and doing the work you ask for rests on contract — we need the data to perform it. Keeping server and access logs rests on legitimate interest in running a secure site. Advertising storage, analytics storage and any personalisation rest on consent: nothing in that category is set until you allow it, and Consent Mode v2, described below, enforces that. Where the law requires it, retaining records to answer a complaint rests on legitimate interest and, where applicable, legal obligation.
The platforms that send traffic here
Google Ads, Microsoft Advertising and Meta Ads send paid traffic to this site today. A click from Google Ads can attach a gclid parameter to the landing link; a click from Microsoft Advertising can attach msclkid; a click from Meta Ads can attach fbclid. These identifiers let each platform connect a click to whatever happens afterward on this site, and we record them for that purpose.
Consent Mode v2
This site runs Google's consent mode, consent mode v2, on four signals: ad_storage, ad_user_data, ad_personalization and analytics_storage. All four are held denied by default the moment you arrive. If you allow storage in the banner, they switch to granted for that visit. If you decline, or later withdraw, all four are set back to denied immediately, and no advertising or analytics storage is written from that point on.
Who receives this data
Google Ireland Ltd and Google LLC receive the gclid identifier and, once allowed, the consent signals, through Google Ads. Microsoft Ireland Operations Ltd receives msclkid through Microsoft Advertising; its own handling of that data is covered by the Microsoft privacy statement at privacy.microsoft.com. Meta Platforms Ireland Ltd receives fbclid through Meta Ads where a campaign runs there. Beyond the ad platforms, our hosting provider serves this site and stores the inquiry database, and our mail provider carries the notification email to the studio's inbox. None of these parties receive payment or card data, because this site takes none.
Data leaving the country it was collected in
The ad platforms named above operate in Ireland and the United States and may process data in either. Where data collected from a visitor in the European Economic Area is transferred to the United States, that transfer relies on the platform's own standard contractual clauses or an equivalent safeguard maintained by that platform, not on any mechanism this studio operates itself.
How long each category is kept
| Category | Kept for |
|---|---|
| Inquiries and email copies | 24 months |
| Chat transcripts | 12 months |
| Server and access logs | 90 days |
| Consent choice record | 12 months |
The consent choice itself is stored in your browser under the key site_consent_v2; that is the only choice this site persists client-side.
How the data is protected
Form submissions travel over HTTPS. The inquiry database sits behind the hosting provider's access controls, and only the studio's own account can read it. Two hidden fields on every form catch automated submissions before they reach that database. No system on this site stores a password or a payment card, so there's nothing of that kind to lose.
Rights for visitors covered by the GDPR
If you reach this site from Europe, the GDPR gives you the right to access the data we hold about you, to have it corrected, to have it erased, to restrict how we use it, to receive a portable copy, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting anything done before the withdrawal. Write to office@yufemayi.com to use any of these.
Rights under US state privacy law
Residents of California have rights under the CCPA, as amended by the CPRA, including the right to know what personal information we hold, to delete it, to correct it, and to opt out of the sale or sharing of personal information. Residents of other states with their own comprehensive privacy laws have equivalent rights under those laws. This studio does not sell personal information for money. Advertising identifiers shared with the platforms named above may count as "sharing" under some state definitions, and you can opt out of that by declining storage in the cookie banner or by using the Global Privacy Control signal described next.
Global Privacy Control
This site honours Global Privacy Control. If your browser sends the Sec-GPC signal, we treat it as an opt-out of the sale and sharing of your personal information automatically, without asking you to repeat the choice in the banner.
Children
This site is not directed at children and we do not knowingly collect data from anyone under 13. If we learn that a child's data reached us through the inquiry form or chat, we delete it.
Complaints
If you believe we've mishandled your data, write to us first at office@yufemayi.com so we can look at it directly. You may also complain to your state Attorney General, to the California Privacy Protection Agency if you're a California resident, or, if the GDPR applies to you, to your local data protection authority.
Accessibility statement
This site is built with a skip link, keyboard-operable navigation and forms, visible focus outlines, and text that resizes without breaking layout. Motion — the magnetic buttons, the hover-follow preview, the running ticker — is disabled automatically for anyone whose system requests reduced motion, and none of it is required to read or use the site.
If something on this site is hard to use with a screen reader, a keyboard, or any other assistive technology, tell us at office@yufemayi.com or +1 (783) 555-7514 and describe what you ran into. We fix reported issues as part of normal maintenance; we don't hold a third-party accessibility certification and won't claim one.
How to ask for your data
Email office@yufemayi.com or write to Yufemayi, 84 Mill Street, Unit B, Austin, Texas 47748, United States, and tell us which right you're using — access, correction, deletion, restriction, portability, objection, consent withdrawal, or an opt-out of sale or sharing. Include enough detail to find your record, such as the email or phone number you used on the inquiry form. We answer within 14 days.
How changes are announced
If we change this policy, we update the effective date at the top of this page and describe what changed in plain language in this section, replacing the previous account of the change. We don't backdate a change or apply a narrower policy to data already collected under a broader one.
Reaching a human
Every question about this policy reaches the studio directly, not a call centre: office@yufemayi.com, +1 (783) 555-7514, or 84 Mill Street, Unit B, Austin, Texas 47748, United States. See also the cookie statement for the technical detail behind the banner, and the terms of service for the rest of the agreement.