Privacy Policy

Last Updated: March, 2026

This Privacy Policy describes how Teratops LLC (doing business as "Yelasu", "we", "us", or "our"), a New Mexico limited liability company, collects, uses, and discloses your personal information when you visit or make a purchase from yelasu.com (the "Site") from the United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Teratops LLC is the Data Controller responsible for your personal data.

1. INFORMATION WE COLLECT

We collect and process personal data about you depending on how you interact with our Site:

  • Identifiers & Contact Information: Name, billing address, shipping address, email address, and phone number.

  • Commercial & Financial Information: Records of products viewed or purchased, transaction history, and payment details (processed securely via our third-party payment gateways; we do not store full payment card numbers).

  • Internet & Technical Network Activity: IP address, browser type, device information, time zone settings, operating system, and details about your browsing session and interaction with our Site (collected via cookies, log files, and pixels).

  • Inferences & Preferences: Information drawn from your interactions with our Site to tailor your experience and preferences.

2. LAWFUL BASIS FOR PROCESSING YOUR DATA

Under the UK GDPR, we must have a lawful basis to collect and use your personal data. We rely on the following legal grounds:

Purpose of Processing Categories of Personal Data Lawful Basis under UK GDPR
Fulfillment & Order Delivery: Processing payments, managing orders, packaging, shipping, and handling returns or refunds. Identifiers, Contact Information, Financial Data, Commercial Info Performance of a Contract (necessary to fulfill your order).
Customer Support & Communication: Responding to inquiries, sending order updates, and technical notifications. Identifiers, Contact Information, Order History Performance of a Contract / Legitimate Interests (to provide efficient customer service).
Marketing Communications: Sending promotional emails about new products, offers, or brand news. Identifiers, Contact Information Consent (where required by law) or Legitimate Interests (soft opt-in for existing customers). You can unsubscribe at any time.
Safety, Fraud Prevention & Legal Compliance: Detecting fraudulent orders, protecting our Site security, and complying with statutory obligations (tax, accounting). Identifiers, Financial Data, Technical Network Activity Legal Obligation / Legitimate Interests (protecting our business and operations).
Analytics & Site Optimization: Improving website user experience, product offerings, and advertising performance. Technical Network Activity, Inferences Consent (for non-essential cookies) / Legitimate Interests.

3. HOW WE COLLECT YOUR INFORMATION

We collect personal information through the following methods:

  • Directly from you: When you create an account, place an order, sign up for marketing communications, or contact us at contact@yelasu.com.

  • Automated technologies: As you interact with our Site, we automatically collect technical data using cookies, server logs, and tracking pixels provided by our e-commerce platform and analytics tools.

  • Third parties: From analytics providers, advertising partners, and logistics or fulfillment networks that provide order tracking and delivery status updates.

4. DISCLOSURE OF PERSONAL INFORMATION

We do not sell your personal data for monetary consideration. However, to operate our online store and fulfill your orders, we share your personal data with trusted third-party service providers:

  • E-Commerce Platform & Hosting: Our store is hosted on Shopify Inc., which provides us with the online e-commerce platform that allows us to sell our products to you.

  • Service Providers & Operations: Payment processors, logistics and fulfillment partners who store, package, and deliver your orders, and customer support integrations.

  • Advertising & Analytics Partners: Service providers who help us analyze Site performance and deliver relevant digital marketing campaigns.

  • Professional Advisers & Legal Obligations: Legal, financial, or regulatory advisers, or law enforcement bodies when required by law, court order, or to enforce our terms and protect the safety of Teratops LLC and our customers.

5. INTERNATIONAL DATA TRANSFERS

Teratops LLC is located in the United States, and our e-commerce platform and service providers operate internationally. When you place an order or interact with our Site, your personal data will be transferred to, stored, and processed outside the UK, including in the United States.

To ensure your personal data receives an adequate level of protection, we rely on UK-approved data transfer mechanisms, such as:

  • The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs).

  • Transfer mechanisms offered by our primary platform providers (including Shopify’s Data Processing Addendum).

6. DATA RETENTION

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or regulatory reporting requirements.

  • Order and Transaction Records: Retained for up to 6 years following the date of purchase to comply with applicable tax and commercial record-keeping laws.

  • Marketing Data: Retained until you withdraw consent or unsubscribe from our mailing list.

7. YOUR RIGHTS UNDER UK DATA PROTECTION LAWS

If you are a resident of the United Kingdom, you have specific rights under the UK GDPR regarding your personal data:

  • Right of Access: The right to request a copy of the personal data we hold about you.

  • Right to Rectification: The right to request that we correct any inaccurate or incomplete personal data.

  • Right to Erasure ("Right to be Forgotten"): The right to request the deletion of your personal data under certain conditions.

  • Right to Restrict Processing: The right to request that we temporarily or permanently stop processing some or all of your personal data.

  • Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.

  • Right to Object: The right to object to us processing your personal data based on legitimate interests or for direct marketing purposes.

  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please email us at contact@yelasu.com with the subject line "UK Privacy Rights Request".

Right to Lodge a Complaint

You also have the right to lodge a complaint with the UK data protection authority, the Information Commissioner's Office (ICO), if you believe our processing of your personal data infringes applicable laws:

8. CHILDREN’S PRIVACY

Our Site is intended for use by adults. We do not knowingly collect or solicit personal data from children under the age of 18. If we become aware that we have collected personal data from a minor without verification of parental consent, we will delete that information promptly.

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, and similar tracking technologies to operate the Site, collect usage analytics, and support marketing functions. You can manage your cookie preferences through your web browser settings or through any cookie consent management tool available on our Site.

Note on "Do Not Track" Signals: As there is no uniform industry standard for browser DNT signals, our systems may not alter data collection practices unless required by recognized cookie consent mechanisms.

10. CONTACT INFORMATION

For any questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact us at:

Teratops LLC

Albuquerque, NM, USA

Email: contact@yelasu.com