Privacy Policy

Last Updated: July 14, 2025

Thank you for visiting Yum Yum Donuts and for placing your trust in us to handle your personal information with care and integrity. Your privacy is of the utmost importance to us, and so is maintaining complete transparency about what information we collect, the purposes for which we use it, and the circumstances under which we may share it with others. To put it simply, we only collect the information you voluntarily choose to provide to us, and we require only the minimum amount of personal information that is necessary to fulfill the purpose of your interaction with us. We do not sell your personal information to third parties, and we never will. This Privacy Policy (also referred to as this “Notice”) applies to all information collected through our website located at www.yumyumdonuts.com (the “Site”), as well as any related services, features, content, applications, or communications offered by Yum Yum Donut Shops, Inc.

Important: By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this Notice, we respectfully ask that you do not access or use our Site or provide us with any personal information.

Throughout this Notice, when we refer to “We,” “Us,” “Our,” or “the Site,” we mean Yum Yum Donut Shops, Inc. and its affiliated entities. When we refer to “You” or “Your,” we mean any individual who accesses or uses our Site.

1. Information We Collect About You

Information from Website Browsers

If you are simply browsing our website without creating an account or submitting any forms, we collect the same basic information that most websites collect through the use of common internet technologies, such as cookies and web server logs. This information includes your browser type and version, your language preference, the referring site that directed you to our Site, any additional pages you request during your visit, and the date and time of each request you make to our server. We also collect potentially personally identifying information, such as your Internet Protocol (IP) address. The purpose of collecting this information is to better understand how our website visitors interact with our Site, to improve the quality and performance of the Site, and to monitor and protect the security of the Site and its infrastructure.

We may use aggregated, non-personally identifying information to operate, improve, and optimize our website and the services we provide to our customers. This may include anonymous “traffic data” or tracking information provided by our website’s hosting provider or by similar analytics service providers, such as Google Analytics and Google Website Optimizer. This data does not personally identify you, but it may be useful for marketing purposes or for improving the services we offer. Analytics is the process of collecting, analyzing, and reporting aggregate data about how visitors use our website. To learn more about Google Analytics and how to opt out, please visit Google’s Analytics opt-out page.

When you visit our Site, we may also log your anonymized IP address, which serves as a unique identifier for your computer or other access device. This information helps us diagnose problems with our server, administer our Site more effectively, and display content according to your preferences and geographic region.

Information from Customers

When you enter information on this Site through forms, sign-up fields, or other interactive features, we may collect personal information from you, including but not limited to the following categories of data:

Your first and last name
Your email address
Your geolocation information (when you use our store locator or grant location permissions)
Any additional information you voluntarily submit through our contact forms or customer service inquiries

We use this personal information to identify you on the Site, to communicate with you about matters related to your use of the Site, to respond to your inquiries and requests, and to provide you with information about our products, promotions, and services that may be of interest to you.

2. Information We Do Not Collect

Sensitive Personal Information

We do not intentionally collect sensitive personal information from our users. This includes, but is not limited to, financial information such as credit card numbers or bank account details, Social Security numbers, government-issued identification numbers, genetic data, biometric data, health or medical information, religious affiliation or beliefs, political opinions, sexual orientation, or information about racial or ethnic origin. If we inadvertently receive any such sensitive information, we will take reasonable steps to delete it promptly from our systems.

Children’s Information

We do not knowingly collect personal information from children under the age of thirteen (13). Our Site is not directed at or designed to attract children under the age of thirteen. If we learn or have reason to suspect that a user is under the age of thirteen, we will promptly take steps to remove that individual’s personal information from our systems. If you are a parent or guardian and you believe that your child under the age of thirteen has provided us with personal information, please contact us immediately at the contact information provided at the end of this Notice so that we can take appropriate action.

3. How We Use and Share the Information We Collect

How We Use Your Information

We use the personal information we collect from you for a variety of legitimate business purposes, including but not limited to the following: providing you with the services and information you request through our Site; communicating with you regarding your account, inquiries, and requests; sending you promotional communications and newsletters if you have opted in to receive them; improving the functionality, performance, and content of our Site; analyzing usage trends and preferences to enhance the user experience; protecting the security and integrity of our Site, our business, and our users; complying with applicable legal obligations, regulatory requirements, and law enforcement requests; and enforcing our Terms of Use and other agreements.

Information We Do Not Sell

We want to be absolutely clear on this point: we do not share, sell, rent, or trade your personal information with third parties for their commercial or marketing purposes. We do not host advertising on the Site, and we have no plans to do so in the future. Your personal information is not a commodity to us; it is a trust that you have placed in our care, and we take that trust seriously.

Third-Party Service Providers

We do share personal information with a limited number of third-party vendors who process it on our behalf in order to provide or improve our services. These vendors perform essential services such as website hosting, customer support, network data transmission, analytics, and other similar operational functions. Each of our third-party vendors is contractually obligated to handle your personal information in a manner consistent with this Privacy Policy and applicable law. The following is a list of the primary third-party service providers that may have access to your personal information:

Google Maps and Google Location Services: We work with Google Maps and Google Location Services to provide you with store location information, driving directions, and localized content. You can learn more about how Google handles location data by visiting Google’s location data policy.
Google reCAPTCHA: We use Google reCAPTCHA to prevent abusive automated traffic, bots, and spam on our Site. You can learn more about this service and how it works by visiting Google’s reCAPTCHA page.
Website Hosting and Infrastructure: We use third-party services to support our website infrastructure, including but not limited to KnownHost for managed hosting services and Apache for web server operations running on the Linux operating system.
Analytics Providers: We use Google Analytics and similar services to analyze traffic patterns, user behavior, and overall website performance. These services collect aggregated, non-personally identifying data to help us understand how visitors use our Site.

Aggregated and Non-Identifying Information

We do share aggregated, non-personally identifying information with third parties for analytical, statistical, or research purposes. For example, in the event of a security incident, we may share information about the number of times a particular file was accessed, or we may share aggregate demographic data about our website visitors with business partners. This information cannot be used to identify any individual user.

Business Transfers

We may share personal information if we are involved in a merger, acquisition, sale of assets, bankruptcy, reorganization, or similar business transaction. If any such change of ownership occurs, we will ensure that the transition takes place under terms that preserve the confidentiality and protection of your personal information, and we will notify you on our website or by email before any transfer of your personal information to a new entity.

4. Your Rights and Choices

We believe that you should have meaningful control over the personal information you share with us. Generally, we will retain your personal information for as long as it is needed to provide you with our services, to fulfill the purposes described in this Privacy Policy, or as required by applicable law. We may retain certain personal information indefinitely unless you request its deletion. For example, we do not automatically delete inactive user information; unless you contact us and request deletion, we will retain your information in our records.

You have the following rights and choices regarding your personal information:

Right to Access: You have the right to request a copy of the personal information we hold about you. To make such a request, please contact our customer service team using the contact information provided at the end of this Notice.
Right to Deletion: You may request that we delete any personal information we have collected from or about you. To request deletion, please send an email to info@yumyumdonuts.com. Please note that we may need to retain certain information as required by law or for legitimate business purposes.
Right to Opt Out of Email Communications: If you no longer wish to receive promotional emails from our team, you can opt out or unsubscribe by contacting us at info@yumyumdonuts.com. If you have multiple email addresses on file with us, you will need to submit an opt-out request for each email address to be fully removed from our active email database.
Right to Control Location Services: You may have the ability to turn location-based services on and off by adjusting the settings of your internet browser or mobile device, or by revoking the permission you previously granted to our website to access your location information.
Right to Manage Cookies: Your browser may offer the ability to block or delete cookies from your device. Please follow your individual browser’s instructions on how to block and clear cookies. Please be aware that blocking cookies may affect the functionality of the Site.
Right to Correct Inaccurate Information: If you believe that the personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.

5. Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files that are placed on your computer or mobile device by the websites you visit. They are widely used to make websites work more efficiently, to remember your preferences and settings, and to provide information to the owners of the website about how visitors use the site. A cookie is a small string of information that the website you visit transfers to your computer for identification purposes. Cookies can be used to follow your activity on the website, and the information collected helps websites understand your preferences and improve your website experience. Cookies are also used for such activities as remembering your user name and password if you use such a feature on this Site.

How We Use Cookies

We use cookies to make interactions with our Site easy, meaningful, and efficient. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device until they expire or you delete them. Our cookies serve several functions, including essential site functionality, authentication, security, preference storage, and analytics. You can turn off all cookies in the event you prefer not to receive them. You can also have your computer warn you whenever cookies are being used. There are also software products available that can manage cookies for you. Please be aware, however, that when you choose to reject cookies, this choice may limit the functionality of the website and you may lose access to some of its features.

Web Beacons

A web beacon (also known as a tracking pixel or clear GIF) is an invisible pixel-sized graphic image embedded in a web page, web-based document, or email message. Web beacons help us perform functions such as viewing the URL of the page on which the beacon appears, recording the time the page, document, or email was viewed, confirming the receipt of and response to our emails (including those that you forward to friends and family), and delivering a more personalized online experience for our visitors.

Third-Party Analytics and Tracking

We use a number of third-party analytics and service providers to help us evaluate how our users interact with the Site, to compile statistical reports on website activity, and to improve our content and overall website performance. These services may use cookies, web beacons, and similar technologies to collect information about your use of our Site, including your IP address, browser type, pages visited, time spent on pages, links clicked, and conversion information. In addition, we may use our own internal analytics software to provide certain features and improve the quality of our content and performance.

Do-Not-Track Signals

We do not currently recognize automated browser signals regarding tracking mechanisms, which may include “Do-Not-Track” instructions. However, you can change your privacy preferences regarding the use of cookies and similar technologies through your browser settings. You may configure your browser to accept all cookies, block certain cookies, require your consent before a cookie is placed in your browser, or block all cookies. Please consult your browser’s help documentation for instructions on how to adjust your cookie settings.

6. Data Storage and Security

We take all measures reasonably necessary to protect your personal information from unauthorized access, alteration, destruction, or disclosure. We are committed to maintaining the accuracy of your data and to ensuring the appropriate use of personal information in accordance with this Privacy Policy. All information you provide to us is stored on secure, managed servers that employ industry-standard security measures, including but not limited to firewalls, encryption technologies, access controls, and intrusion detection systems.

In the event of a data breach that affects your personal information, we will act promptly to mitigate the impact of the breach and will notify any affected users without undue delay, in accordance with applicable data breach notification laws.

Please Note: No method of electronic transmission or method of electronic storage is one hundred percent secure. Whenever you share personal information online, there is an inherent risk that third parties may intercept and misuse that information. While we strive to protect your personal information and privacy using commercially reasonable security measures, we cannot guarantee the absolute security of any information you transmit to or receive from us through the Site. By using our Site, you acknowledge and accept these inherent risks, and you agree that any personal information, general information, or other data you provide to us is provided at your own risk.

7. Data Retention

We retain your personal information for as long as necessary to provide you with our services, to fulfill the purposes for which it was collected, to comply with our legal and contractual obligations, and to enforce our agreements. The specific retention period for different types of data may vary depending on the context, the nature of the data, and the purposes for which it was collected. When personal information is no longer needed for these purposes, we will either securely delete it or anonymize it so that it can no longer be associated with you. If you request deletion of your personal information, we will process your request in a timely manner, subject to any legal obligations that may require us to retain certain data for a specified period.

8. How We Respond to Legal Requests for Disclosure

We may disclose personally identifying information or other information we collect about you to law enforcement agencies, government authorities, or other third parties in response to a valid subpoena, court order, warrant, or similar legal process, or when we believe in good faith that disclosure is reasonably necessary to protect our property or rights, the rights of third parties, or the safety of the public at large. We may also disclose information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Use, or as otherwise required by law.

In complying with court orders and similar legal processes, we strive for transparency. When permitted by law, we will make a reasonable effort to notify affected users of any disclosure of their personal information, unless we are prohibited by law or court order from doing so, or in rare and exigent circumstances where notification could jeopardize an ongoing investigation or endanger public safety. We reserve the right to report to law enforcement agencies any activities that we in good faith believe to be unlawful, as determined in our sole discretion.

9. How We Communicate with You

We will use your email address to communicate with you if you have indicated that this form of communication is acceptable to you. For example, if you contact our customer support team with a request or inquiry, we may respond to you via email. If you sign up for our email list, we will send you newsletters, promotional offers, and updates about Yum Yum Donuts products and events. You may opt out of promotional communications at any time by contacting us at info@yumyumdonuts.com.

Our emails may contain a pixel tag (also known as a web beacon), which is a small, clear image that can tell us whether or not you have opened an email and what your IP address is at the time of opening. We use this pixel tag technology to make our email communications more effective and relevant to you, and to ensure that we are not sending you unwanted or unsolicited email. If you prefer not to have pixel tags in emails you receive from us, please contact us and we will do our best to accommodate your request.

10. Your California Privacy Rights

If you are a resident of the State of California, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These laws provide California residents with specific rights regarding their personal information, including the following:

Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request the deletion of personal information that we have collected from you, subject to certain exceptions permitted by law.
Right to Opt Out of Sale: You have the right to opt out of the sale of your personal information. As stated previously, we do not sell your personal information, so this right is already honored by default.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your privacy rights under California law.
Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information. As noted above, we do not intentionally collect sensitive personal information.

To exercise any of these rights, please contact us using the information provided in the “How to Contact Us” section below. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf. We will respond to your request within forty-five (45) days of receiving it, as required by California law.

11. Users Outside of the United States

Yum Yum Donuts is hosted and operated entirely within the United States of America and is subject exclusively to United States federal and state law. Our Site is not directed at or designed for users located outside of the United States, and we do not operate physical locations outside of the contiguous United States. If you access our Site from a location outside of the United States, please be aware that any information you provide to us may be transferred to, stored in, and processed within the United States, where data protection laws may differ from those in your jurisdiction. By providing your information, you consent to such transfer, storage, and processing.

If you are located outside of the United States and believe that we have inadvertently collected your personal information, please notify us so that we may take appropriate action, which may include deleting your information from our systems. We are committed to resolving any issues related to international data collection. If you have any questions about how we collect or use your information, you may contact us at info@yumyumdonuts.com.

12. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will provide notice to you by prominently posting a notice on our website, by sending an email to the primary email address we have on file for you, or by other means consistent with applicable law. We encourage you to review this Privacy Policy periodically to stay informed about how we are collecting, using, and protecting your personal information. Your continued use of the Site after any changes to this Privacy Policy have been posted constitutes your acceptance of those changes.

13. How to Contact Us

If you have any questions, concerns, or comments regarding this Privacy Policy, the personal information we hold about you, or any of the practices described in this Notice, we encourage you to reach out to us. We are here to help and will do our best to respond to your inquiry promptly and thoroughly.

Yum Yum Donut Shops, Inc.
Corporate Headquarters
17355 Railroad St.
City of Industry, CA 91748-1325
Phone: (626) 964-1478
Fax: (626) 912-2779
Email: info@yumyumdonuts.com
Website: www.yumyumdonuts.com

You may also submit a question through the Contact page on our website. We aim to respond to all inquiries within a reasonable timeframe and will work diligently to address any concerns you may have regarding your privacy.