Privacy

Last Updated: July 15, 2026

Privacy Policy

1. Introduction and Contact Information 1.1 We are glad you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal information when you use our website. Personal information means any information that can be used to identify you personally. 1.2 The party responsible for data processing on this website is Northstar Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA ("we," "us," "Northstar Labs"). If you have any questions about this Privacy Policy or our data practices, you may contact us at support@doyoo.com.

2. Data Collected When Visiting Our Website 2.1 When you use our website solely for informational purposes, i.e., if you do not register or otherwise submit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited
• Date and time of access
• Amount of data sent, in bytes
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used (where applicable, in anonymized form)

We process this data to maintain the stability, security, and functionality of our website. We do not share or otherwise use this data, except that we reserve the right to review server log files retroactively if there are concrete indications of unlawful use. 2.2 For security reasons and to protect the transmission of personal information and other confidential content (e.g., orders or inquiries), this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

3. Hosting We use the following provider for hosting our website and displaying page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Data may also be processed by Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., and/or Shopify (USA) Inc. All data collected on our website is processed on this provider's servers. We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits unauthorized disclosure to third parties.

4. Cookies To make visiting our website more attractive and to enable certain features, we use cookies — small text files stored on your device. Some of these cookies are automatically deleted when you close your browser ("session cookies"), while others remain on your device and allow certain page settings to be remembered ("persistent cookies"). We use cookies as necessary to operate the website and, where required by applicable law, based on your consent or choice. California residents and residents of other states with applicable privacy laws have the right to opt out of the "sale" or "sharing" of personal information, including personal information collected via cookies used for targeted advertising. You can exercise this right at any time by using the "Do Not Sell or Share My Personal Information" link in our website footer, or by enabling the Global Privacy Control signal in your browser, where supported. You can also configure your browser to notify you when cookies are set, to decide individually whether to accept them, or to generally refuse cookies. Please note that refusing cookies may limit the functionality of our website.

5. Contacting Us When you contact us (e.g., via contact form or email), we process personal information solely for the purpose of handling and responding to your inquiry, and only to the extent necessary for that purpose. Your data will be deleted once the matter has been conclusively resolved, unless we are required to retain it under applicable law.

6. Use of Customer Data for Direct Marketing 6.1 Email Newsletter Sign-Up If you sign up for our email newsletter, we will regularly send you information about our offers. The only information required to receive the newsletter is your email address. Providing any additional information is voluntary and is used to personalize communications to you. We use a "double opt-in" process for our newsletter, which ensures that you will only receive newsletters once you have expressly confirmed your consent by clicking a verification link sent to the email address provided. This process is designed to comply with the U.S. CAN-SPAM Act. By clicking the confirmation link, you consent to our use of your personal information for this purpose. We store the IP address assigned by your internet service provider (ISP), along with the date and time of sign-up, in order to be able to trace any potential misuse of your email address at a later time. Data collected during newsletter sign-up is used strictly for this purpose. You may unsubscribe from the newsletter at any time using the link provided in each newsletter, or by sending a message to the contact listed in Section 1.2. Upon unsubscribing, your email address will be promptly removed from our newsletter distribution list, unless you have expressly consented to further use of your data, or we are otherwise permitted by law to retain it, as described in this Privacy Policy.

6.2 Klaviyo Our email newsletters are sent using the following provider: Klaviyo, Inc., 225 Franklin St, Boston, MA 02110, USA. We share the data you provide when signing up for our newsletter with this provider so that it can send the newsletter on our behalf. The provider may also conduct statistical analysis of newsletter campaign performance using web beacons or tracking pixels embedded in the emails sent, which can measure open rates and specific interactions with newsletter content. In doing so, device information (e.g., time of access, IP address, browser type, and operating system) may also be collected and evaluated, but is not combined with other data sets. You may withdraw your consent to newsletter tracking at any time, with effect for the future. We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

7. Data Processing for Order Fulfillment 7.1 To the extent necessary to fulfill our contract with you for delivery and payment purposes, the personal information we collect is shared with the shipping carrier and the payment institution engaged for that purpose. To fulfill your order, we also work with the service provider(s) listed below, who assist us, in whole or in part, in performing concluded contracts. Certain personal information is transmitted to these service providers as described below. 7.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We share your name, delivery address, and, where necessary for delivery, your phone number, solely for purposes of delivering the goods, with a shipping partner selected by us. 7.3 Use of Payment Service Providers

PayPal One or more online payment methods offered by the following provider are available on this website: PayPal, Inc., 2211 North First Street, San Jose, CA 95131, USA. If you select a payment method offered by this provider for which we advance performance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the content of your order, will be shared with this provider. This data is shared solely for the purpose of processing payment with the provider, and only to the extent necessary for that purpose.

Apple Pay If you choose to pay using "Apple Pay" (Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA), payment is processed through the "Apple Pay" feature of your iOS-, watchOS-, or macOS-powered device by charging a payment card stored in Apple Pay. Apple Pay uses security features built into your device's hardware and software to protect your transactions. Authorizing a payment requires entry of a passcode you have previously set, as well as verification via "Face ID" or "Touch ID" on your device. For payment processing purposes, the information you provide during the order process, together with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before it is transmitted to the payment service provider of the payment card stored in Apple Pay to complete the transaction. This encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been completed, Apple sends your device account number and a transaction-specific dynamic security code back to the originating website to confirm successful payment. Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Because this data is anonymized, it cannot be linked to you personally. Apple uses this anonymized data to improve Apple Pay and other Apple products and services. Further privacy information about Apple Pay is available at: https://support.apple.com/en-us/HT203027

Google Pay If you choose to pay using "Google Pay" (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, "Google"), payment is processed via the "Google Pay" application on your mobile device (Android 4.4 "KitKat" or higher with NFC capability) by charging a payment card stored in Google Pay or a verified payment method linked to it (e.g., PayPal). Authorizing a Google Pay payment of more than $25 requires unlocking your mobile device using the verification method you have set up (e.g., facial recognition, password, fingerprint, or pattern). For payment processing purposes, the information you provide during the order process, together with information about your order, is transmitted to Google. Google then transmits your Google Pay payment information, in the form of a one-time transaction number, back to the originating website to verify that payment has been made. This transaction number contains no actual payment data related to the payment method stored in Google Pay, but is generated and transmitted as a single-use numeric token. In all Google Pay transactions, Google acts solely as an intermediary for processing the payment. The transaction itself takes place exclusively between you and the originating website by charging the payment method stored in Google Pay. Google reserves the right to collect, store, and evaluate certain transaction-specific information for each Google Pay transaction, including date, time, and amount of the transaction, merchant location and description, a merchant-provided description of the purchased goods or services, any photos you attach to the transaction, the name and email address of buyer and seller (or sender and recipient), the payment method used, your description of the reason for the transaction, and, where applicable, the offer associated with the transaction. Google's Terms of Service for Google Pay are available at: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en Further privacy information about Google Pay is available at: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

Shopify Payments / Stripe If you select a payment method offered through "Shopify Payments," payment is processed by the payment service provider Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA. Further information about "Shopify Payments" is available at https://www.shopify.com/legal/terms-payments-us.

8. Retargeting/Remarketing and Conversion Tracking 8.1 Meta (Facebook) Pixel We use the "Meta Pixel" service provided by Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA ("Meta"), using advanced matching. When a user clicks on an ad we placed on Facebook or Instagram, the "Meta Pixel" appends a parameter to the URL of our linked page. After redirection, this URL parameter is written into the user's browser via a cookie set by our own page. In addition, this cookie captures specific customer data, such as the email address we collect on our page linked to the Meta ad during actions such as completed purchases, account sign-ups, or registrations ("advanced matching"). The cookie is then read out, enabling the transmission of data, including specific customer data, to Meta. We use the Meta Pixel with advanced matching to make our Meta advertisements more effective and to ensure they align with user interests or characteristics (e.g., interests in specific topics or products, determined based on pages visited), which we share with Meta to create "Custom Audiences." We also analyze the effectiveness of our ads by tracking whether users were directed to our website after clicking an ad (conversion). All data transmitted is stored and processed by Meta, allowing it to be linked to the respective user profile, and Meta may use this data for its own advertising purposes in accordance with Meta's Data Policy (https://www.facebook.com/about/privacy/). This data may enable Meta and its partners to serve ads on and off Meta platforms. We have entered into a data processing agreement with Meta that protects the data of our website visitors and prohibits unauthorized disclosure to third parties.

8.2 TikTok Pixel This website uses conversion tracking technology provided by TikTok Inc., 5800 Bristol Parkway, Culver City, CA 90230, USA. If you arrived at our website via an ad served by this provider, cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests) may be used to track the success of the ad. Certain device and browser information, potentially including your IP address, is read via this tracking technology in order to record and evaluate user actions we have predefined (e.g., completed transactions, leads, on-site search queries, product page views). This allows us to compile statistics on usage behavior on our website following a redirect from an ad, which helps us optimize our offering. We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits unauthorized disclosure to third parties.

8.3 Google Ads Conversion Tracking and Remarketing This website uses Google Ads Conversion Tracking and Google Ads Remarketing, services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). If you arrived at our website via an ad served by Google, Google may use cookies and/or comparable technologies (e.g., tags, pixels, local storage, or web beacons) to determine whether you performed certain actions we have defined on our website. This may include page views, product page views, on-site search queries, adding products to the cart, beginning the checkout process, and completed purchases. Information that may be processed includes: IP address, device and browser information, referrer URL, pages visited, timestamps, interaction data, and transaction-related data such as order value, currency, and products ordered. We use Google Ads Conversion Tracking to measure and statistically evaluate the success of our advertising. We also use Google Ads Remarketing to display interest-based advertising to visitors of our website on other websites within the Google advertising network. For this purpose, Google may analyze usage behavior on our website and associate it with pseudonymous user profiles to serve relevant advertising. Where required, we have entered into a data processing agreement with the provider. Further information on Google's privacy practices is available at: https://policies.google.com/privacy

8.4 Enhanced Conversions for Google Ads If we use Google Ads' "Enhanced Conversions" feature, certain customer data you provide and that we collect (e.g., email address, name, address, or phone number) may, in connection with a conversion, be transmitted to Google in hashed form. This helps attribute conversions more accurately and improves the measurement of our advertising efforts.

9. Website Functionality – Address Validation (Endereco) To validate certain entries in the address form during checkout in real time, we use the services of the following provider: Endereco UG, Balthasar-Neumann-Straße 4b, 97236 Randersacker, Germany. This provider validates the address entered, verifies spelling, and, where applicable, completes missing data. Where an address is ambiguous, correct alternative suggestions are displayed. For this purpose, the address data you enter is transmitted to, stored by, and evaluated by the provider. We use this service to ensure accurate collection of customer address data, to properly fulfill our contractual delivery obligations, and to prevent issues with contract performance. The provider processes this data separately, does not combine it with other data sets, and deletes it once its status or accuracy has been confirmed, but no later than 30 days.

10. Your Privacy Rights 10.1 Notice at Collection. In the preceding sections, we describe the categories of personal information we collect (e.g., identifiers, order and payment information, device/browser information, geolocation derived from IP address), the purposes for which we use it (fulfilling orders, marketing, website security and functionality, advertising and analytics), the sources from which it is collected (directly from you, automatically via your device, and from the service providers described above), and the categories of third parties with whom it may be shared (payment processors, shipping carriers, marketing and analytics providers, and advertising platforms, as identified above). We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, or as required by applicable law. 10.2 Your Rights. Depending on your state of residence, you may have some or all of the following rights with respect to your personal information: the right to know/access the personal information we have collected about you; the right to request deletion of your personal information; the right to correct inaccurate personal information; the right to opt out of the "sale" or "sharing" of your personal information (including for cross-context behavioral advertising); the right to limit the use of sensitive personal information, where applicable; and the right to not be discriminated against for exercising any of these rights. 10.3 How to Exercise Your Rights. You may submit a request to exercise these rights by contacting us at support@doyoo.com. You may also designate an authorized agent to submit a request on your behalf, subject to verification. To opt out of the sale or sharing of your personal information for targeted advertising, you may use the "Do Not Sell or Share My Personal Information" link in our website footer, or enable the Global Privacy Control signal in your browser, where supported. 10.4 Right to Appeal. If you are a California resident and disagree with our response to your request, you may appeal by contacting us at support@doyoo.com. You may also lodge a complaint with the California Attorney General or the California Privacy Protection Agency.

11. Data Retention We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or other legal compliance purposes). Where personal information is processed based on your consent, we retain it until you withdraw your consent. Where personal information is processed for direct marketing purposes, we retain it until you opt out of such marketing.