Privacy Policy

Y-Not Design & Mfg. Inc. ("Y-Not," "we," "us," or "our") respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit y-not.com, communicate or do business with us, request products or services, participate in programs operated by us, apply for employment or internship opportunities, or otherwise interact with Y-Not.

This Privacy Policy applies to our website and related business interactions where Y-Not determines how personal information is processed. In some circumstances, Y-Not may process information on behalf of a business customer under a separate contract or data processing agreement. In those situations, the customer's instructions and applicable agreement may govern our processing.

1. Information We Collect

The information we collect depends on how you interact with Y-Not.

Information You Provide to Us

• Your name.
• Business or personal email address.
• Telephone or mobile number.
• Company or organization name.
• Job title or professional information.
• Type of business.
• Mailing, billing, shipping, or business address.
• Product requirements and specifications.
• Requested quantity, timing, budget, customization, and fulfillment information.
• Logos, artwork, designs, photographs, brand assets, product specifications, and other materials submitted for a project.
• Communications you send to us by email, telephone, forms, meetings, or other channels.
• Billing, procurement, transaction, and order information.
• Marketing and communication preferences.

Custom Product and Fulfillment Information

When providing design, manufacturing, personalization, kitting, distribution, or fulfillment services, we may receive information from our customers relating to their employees, customers, event participants, gift recipients, or other individuals.

This information may include names, shipping addresses, contact information, product preferences, sizes, personalization details, or other information needed to manufacture, personalize, or deliver products.

When a business customer provides this information to Y-Not for us to perform services on its behalf, that customer is generally responsible for ensuring that it has the appropriate authority to provide the information to us.

Job Applicant Information

If you apply for employment, an internship, or another career opportunity with Y-Not, we may collect information including:

• First and last name.
• Personal email address.
• Telephone or mobile number.
• Current city and address or area.
• Resume or curriculum vitae.
• Education and qualifications.
• Employment history and professional experience.
• Skills and areas of interest.
• Information you provide during assessments, interviews, case studies, or other recruitment activities.
• References and information necessary to evaluate your application.
• Documentation required if an offer is made or where required by applicable law.

Please avoid providing sensitive personal information in an application unless it is specifically requested and necessary.

If you become an employee, your information will subsequently be governed by Y-Not's internal Employee Privacy Notice, provided separately at onboarding, rather than solely by this website-facing policy.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain technical information, including:

• Internet Protocol (IP) address.
• Browser type.
• Device type and operating system.
• Approximate location derived from IP address.
• Pages viewed and links selected.
• Referring and exit pages.
• Date and time of access.
• Website interaction and usage information.
• Cookie identifiers and similar technologies.

We may use cookies, tags, pixels, local storage, and similar technologies to operate the website, remember preferences, understand website performance, improve our services, and, where applicable, measure marketing effectiveness. Current tools in use on y-not.com may include standard web analytics and advertising measurement services such as Google Analytics and similar platforms.

2. How We Use Personal Information

We may use personal information to:

• Respond to inquiries and requests.
• Prepare quotations, proposals, samples, and product recommendations.
• Design, manufacture, customize, source, package, and fulfill products.
• Manage customer, supplier, manufacturer, and logistics relationships.
• Process and administer orders and transactions.
• Coordinate shipping, delivery, and global fulfillment.
• Provide customer support.
• Communicate about projects, orders, services, and business relationships.
• Maintain business and transaction records.
• Operate, maintain, secure, troubleshoot, and improve our website.
• Understand how visitors use our website.
• Develop and improve products, services, processes, and customer experiences.
• Conduct marketing and business development activities where permitted by law.
• Manage recruitment and evaluate job applicants.
• Prevent fraud, misuse, security incidents, and unlawful activity.
• Protect Y-Not, our customers, our partners, and others.
• Comply with legal, regulatory, accounting, contractual, and compliance obligations.
• Establish, exercise, or defend legal claims.

We may also use information for another purpose disclosed to you at the time it is collected or with your consent where required.

We do not use personal information for fully automated decision-making that produces legal or similarly significant effects about an individual without human involvement. If this changes, we will update this Policy and provide any legally required disclosures.

3. Legal Bases for Processing

Where applicable law requires us to identify a legal basis for processing personal information, our legal bases may include:

• Performance of a contract or steps before entering a contract. For example, responding to a product request, preparing a quotation, manufacturing an order, or delivering products.
• Legitimate interests. We may process information where reasonably necessary to operate and improve our business, maintain customer relationships, secure our systems, prevent fraud, and conduct appropriate business-to-business marketing, provided those interests are not overridden by your rights.
• Consent. We may rely on consent for certain marketing communications, cookies, or other activities where consent is required.
• Legal obligations. We may process information where necessary to satisfy tax, accounting, employment, customs, compliance, regulatory, or other legal requirements.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide website functionality, understand usage, maintain security, remember preferences, and measure performance. These technologies may include services supplied by third parties.

Depending on the technologies enabled on our website, cookies may fall into categories such as:

• Strictly necessary cookies.
• Functional cookies.
• Analytics or performance cookies.
• Advertising or marketing cookies.

Where required by applicable law, we will request consent before placing non-essential cookies or similar technologies on your device, using a cookie banner or preference tool available on our website at y-not.com/cookie-preferences.

You can also control cookies through your browser settings. Disabling certain cookies may affect website functionality. Our website recognizes Global Privacy Control (GPC) and similar browser-based opt-out signals as a valid opt-out request under applicable law.

5. How We Disclose Personal Information

We do not disclose personal information except as reasonably necessary for legitimate business purposes, to provide our services, at your direction, or as permitted or required by law.

We may disclose information to:

Service Providers

We may work with companies that provide services such as website hosting, cloud storage, customer relationship management, communications, analytics, cybersecurity, scheduling, document management, recruiting, accounting, payment processing, and other operational support.

Manufacturers, Suppliers, and Logistics Partners

Because Y-Not provides custom product development, manufacturing, and fulfillment services, information may be shared with manufacturers, suppliers, decorators, printers, packaging providers, freight companies, carriers, warehouses, customs providers, and logistics partners when reasonably necessary to complete a project or deliver products.

We seek to limit the information shared to what is reasonably necessary for the applicable service.

Y-Not Affiliates and Related Businesses

We may share information with affiliated companies or businesses within the Y-Not business ecosystem when reasonably necessary to provide services, coordinate a customer relationship, operate our business, or where otherwise permitted by law.

Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers.

Legal and Regulatory Authorities

We may disclose information when reasonably necessary to comply with a subpoena, court order, law, regulation, government request, customs requirement, or other legal process, or when necessary to protect legal rights, safety, property, or security.

Business Transactions

If Y-Not undergoes or evaluates a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, personal information may be disclosed as part of that process subject to appropriate protections.

6. Sale, Sharing, and Targeted Advertising

Y-Not is principally a business-to-business design, manufacturing, and fulfillment company and does not use personal information as a commodity for sale.

Certain analytics, advertising, or website technologies, however, may constitute a "sale," "sharing," or use for "targeted advertising" under some privacy laws even where no personal information is sold for monetary payment.

Where such laws apply, you may opt out of these activities by clicking "Your Privacy Choices" in the website footer, adjusting your cookie preferences, or emailing the address in the Contact Us section below with the subject line "Do Not Sell/Share."

7. Marketing Communications

We may send business and marketing communications about Y-Not products, capabilities, services, events, or related information where permitted by law.

You may unsubscribe from marketing emails by using the unsubscribe mechanism provided in the communication or by contacting us.

Even if you unsubscribe from marketing communications, we may continue sending non-promotional communications relating to an active inquiry, transaction, order, account, contractual relationship, or other necessary business matter.

8. Recruitment and Employment Applications

Information submitted in connection with a job, internship, or other employment opportunity may be used to:

• Evaluate your qualifications and suitability.
• Communicate with you regarding your application.
• Administer assessments and interviews.
• Compare candidates.
• Conduct reference or background checks where permitted.
• Make recruitment and hiring decisions.
• Maintain appropriate recruitment records.
• Comply with employment and other legal requirements.

Applicant information may be accessible to Y-Not personnel and service providers involved in recruitment and may be processed in countries other than the country where you submitted your application, including the United States and India.

9. Information Processed on Behalf of Customers

Some Y-Not services may involve processing personal information provided by our enterprise customers, including information relating to product recipients, employees, customers, event participants, or other individuals.

Where Y-Not processes such information solely on behalf of a customer, Y-Not may act as a service provider, processor, or similar role under applicable privacy laws.

If your information was provided to Y-Not by one of our customers and you wish to exercise privacy rights relating to that information, you should generally contact the organization that originally collected your information. We will assist our customers with legally required privacy requests where appropriate.

10. International Data Transfers

Y-Not operates internationally and works with customers, employees, suppliers, manufacturers, service providers, and logistics partners in multiple countries. As a result, personal information may be transferred to, stored in, or processed in countries other than the country in which it was originally collected. Privacy and data protection laws may differ between countries.

Where required by applicable law, Y-Not uses appropriate safeguards for international transfers of personal information. For transfers subject to the GDPR, these safeguards include the European Commission's Standard Contractual Clauses (SCCs), reliance on an applicable adequacy decision where available, or other legally recognized transfer mechanism.

11. Data Retention

We retain personal information for only as long as reasonably necessary for the purposes described in this Privacy Policy. While exact periods vary by circumstance, our general retention guidelines are:

• Customer, order, and transaction records: retained for up to 7 years after the relationship ends, to satisfy accounting, tax, and warranty obligations.
• Website analytics and cookie data: retained for up to 26 months, consistent with standard analytics provider defaults.
• Job applicant records: retained for up to 2 years after a hiring decision, unless a longer period is required by law, or the applicant is hired, in which case employment records apply.
• Marketing and CRM contact data: retained until you unsubscribe, or after 3 years of inactivity, whichever comes first.

When determining an appropriate retention period, we may also consider the nature and sensitivity of the information, product/manufacturing/warranty requirements, applicable limitation periods, tax/accounting/customs/employment/regulatory requirements, contractual obligations, security and fraud-prevention needs, and whether information is needed for actual or potential legal claims. When information is no longer reasonably necessary, we delete, anonymize, or securely dispose of it in accordance with applicable requirements.

12. Data Security

Y-Not uses reasonable administrative, technical, organizational, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, loss, or misuse. No internet transmission, electronic storage system, or security measure can be guaranteed to be completely secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify affected individuals and applicable regulators as required by law and without undue delay, and in any case within 72 hours of becoming aware of the breach where required by the GDPR or similar law.

13. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, including the right to:

• Request information about personal information we process about you.
• Obtain access to your personal information.
• Request correction of inaccurate information.
• Request deletion of personal information.
• Request restriction of certain processing.
• Object to certain processing.
• Obtain a portable copy of certain information.
• Withdraw consent where processing is based on consent.
• Opt out of certain sales, sharing, or targeted advertising where applicable.
• Limit certain uses of sensitive personal information where applicable.
• Appeal a decision relating to a privacy request where applicable.
• Lodge a complaint with an applicable data protection authority.
• Exercise privacy rights without unlawful discrimination.

These rights are subject to applicable legal limitations and exceptions. To exercise a privacy right, contact us using the information in the Contact Us section below. We will confirm receipt of your request and respond within 45 days for requests governed by U.S. state privacy laws (extendable by an additional 45 days where permitted) or within 1 month for requests governed by the GDPR (extendable by 2 additional months for complex requests). We may need to verify your identity before fulfilling certain requests. Authorized agents may submit requests where permitted by applicable law, subject to appropriate verification. If we deny a request, we will explain the reason and, where applicable law requires, provide an appeal process.

14. California and Other U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional privacy rights where the applicable state privacy law applies to Y-Not and to the relevant processing activity.

Depending on the law, these may include rights to know or access information, obtain a copy, correct information, delete information, opt out of certain sales or sharing of personal information, opt out of targeted advertising or certain profiling, limit certain uses of sensitive information, appeal decisions, and receive equal service and pricing when exercising privacy rights.

We recognize opt-out preference signals, such as the Global Privacy Control (GPC), as valid requests to opt out of sale/sharing where legally required. Where applicable law requires additional disclosures, notices at collection, opt-out methods, or other mechanisms, Y-Not will provide them.

15. European Economic Area, United Kingdom, and Switzerland

Where applicable data protection laws such as the General Data Protection Regulation apply to our processing, individuals may have rights including access, correction, deletion, restriction, portability, objection, and withdrawal of consent.

Where processing is based on legitimate interests, you may have the right to object to that processing in circumstances provided by law.

You may also have the right to submit a complaint to the data protection authority responsible for your location.

If required by applicable law, Y-Not will designate an EU/UK representative and/or a Data Protection Officer and will identify them, along with contact details, in this section.

16. India

Y-Not maintains operations in India and may process personal information relating to applicants, employees, business contacts, customers, suppliers, and other individuals in India.

Where India's Digital Personal Data Protection Act, its implementing rules, or other applicable Indian privacy requirements apply to a particular processing activity, Y-Not will process personal information and provide applicable rights and notices in accordance with those requirements as they become effective.

17. Children's Privacy

Y-Not's website and services are designed primarily for businesses and professionals and are not directed toward children.

We do not knowingly collect personal information through the website from children where such collection would require parental or guardian authorization under applicable law.

If you believe that a child has provided personal information to us improperly, please contact us.

18. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, product stores, catalogs, scheduling services, or other websites and services that Y-Not does not control.

Their privacy practices are governed by their own policies. We encourage you to review the privacy policies of third-party services before providing personal information to them.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business, website, technology, legal requirements, or privacy practices.

When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy.

If changes are material, we may provide additional notice where required by applicable law.

20. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise a privacy right, contact:

For career-related questions, applicants may also contact the recruitment team through the contact information provided on the applicable Y-Not careers page.

We will review privacy inquiries and respond in accordance with applicable law.