Privacy policy
Effective date: October 7, 2026
Last updated: October 7, 2026
This Privacy Policy explains how Fabio Alcantara, a sole proprietor doing business as 2YALL and based in North Carolina ("2YALL," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit https://2yall.co (the "Site"), join our waitlist or email list, buy from us, or join our Monthly Drop Club.
Quick summary
- We collect what we need to run the store: your contact details, shipping address, order details, waitlist answers, and anything you upload for a custom product.
- We use some of this information to personalize your experience, such as product recommendations, early access, and emails. See Section 5.
- We don't sell personal information for money. If we use advertising cookies or pixels, you can opt out with the "Your Privacy Choices" link in our footer, and we honor Global Privacy Control (GPC) signals. See Section 7.
- We send marketing emails only if you sign up, and you can unsubscribe anytime. We don't send marketing texts.
- You can ask to access, correct, or delete your information, and more. See Section 15.
This policy is governed by North Carolina law, but that doesn't take away any privacy rights you have under the laws of the state where you live.
1. Who We Are and How to Contact Us
2YALL is operated by Fabio Alcantara, a sole proprietor doing business as 2YALL, based in North Carolina. We're responsible for the personal information described in this policy.
- Email (privacy and support): support@2yall.co
- Mail: 2YALL, Attn: Privacy, 6720 Old Monroe Rd, Ste B PMB 1027, Indian Trail, NC 28079-5353
- Website: https://2yall.co
We don't offer phone support. Email is the fastest way to reach us.
2. Information We Collect
| Type | Examples |
|---|---|
| Contact and identity details | Name, email address, shipping and billing address, and phone number if you give one (for example, for delivery) |
| Order and payment details | Products bought, order number, order history, returns and refunds, discount codes used, and limited payment details such as card type and last four digits. Full card numbers go to our payment processors. We don't receive or store them. |
| Account and membership details | Account login, Monthly Drop Club status, billing dates, skips, pauses, and cancellations |
| Waitlist answers and preferences | Answers you give when you join our waitlist (for example, your placement preference, Low or Back), and the sizes and styles you tell us you like |
| Your uploads | Images, artwork, and text you upload or enter for a custom product, and photos you send with a support request |
| Device and usage information | Pages and products viewed, cart activity, links clicked, referring site, browser and device type, IP address, and cookie or device IDs (including advertising IDs if we use advertising cookies) |
| Email engagement | Whether you open our emails and which links you click |
| Approximate location | City or region, based on your IP address or shipping address. We don't collect precise (GPS) location. |
| Inferences | Likely sizes or style preferences based on your orders and activity |
Sensitive information. We don't ask for Social Security numbers, government ID numbers, health information, precise location, or biometric data. If you create an account, your login details are used only to secure your account. Things you upload for a custom product could reveal sensitive details about you or others. We use uploads only to make and support your order, and we don't use them to infer anything about you.
Information about other people. If you give us someone else's information (for example, a gift recipient's name and address, or a photo of another person), please make sure you have their permission. We use it only to fulfill and support the order.
3. Where We Get Information
- From you, when you join the waitlist or email list, create an account, place an order, join the Monthly Drop Club, upload something for a custom product, or contact us.
- Automatically, through cookies, pixels, and similar technologies on the Site and in our emails (see Section 8).
- From service providers, such as Shopify (our store and checkout), payment processors, our print partners, and shipping carriers (for example, payment status, production status, and tracking).
- From analytics providers and, if we use them, advertising platforms (for example, how you found our Site or whether you clicked one of our ads).
- From social media, if you interact with us there, to the extent the platform's settings allow.
4. How We Use Information
We use personal information to:
- Fulfill orders: process payments, make and ship your items, and handle exchanges, reprints, returns, and refunds.
- Run the Monthly Drop Club, if you subscribe (see Section 11).
- Make custom products from the images or text you upload (see Section 10).
- Provide customer support and communicate with you about your orders and account.
- Send transactional emails, such as order confirmations and shipping updates.
- Send marketing emails, if you've signed up (see Section 9).
- Personalize your experience (see Section 5).
- Measure and improve the Site, our marketing, our products, and our sizing.
- Advertise our products, if we use advertising platforms, subject to your right to opt out (see Section 7).
- Prevent fraud and protect security, including bot purchases and misuse of discount codes. Shopify's fraud tools may flag an order for manual review. If we cancel an order for this reason, you can contact us to review the decision.
- Comply with the law, including tax and recordkeeping rules, and to establish, exercise, or defend legal claims.
- Run our business, including record keeping, and as part of a merger, financing, or sale of the business. In that case, your information would stay protected by this policy.
5. How We Personalize Your Experience
Information we use. To personalize your experience, we may use:
- your waitlist answers (for example, your placement preference, Low or Back);
- the sizes and style preferences you give us, or that we infer from your orders;
- your purchase and order history;
- your browsing on the Site (pages and products viewed, and cart activity), collected through cookies and similar technologies;
- your engagement with our emails (opens and clicks), measured through tracking pixels in our emails; and
- device information and approximate location (city or region, based on your IP address).
How we use it. To personalize product recommendations, early access, emails, Site content, and offers.
Who helps us. Service providers, including Shopify (our store, checkout, Shopify Email, and Shopify Forms), analytics providers, and, if we use them, advertising platforms.
Limits.
- We don't use sensitive personal information for personalization.
- We don't use personalization to make decisions that have legal or similarly significant effects on you.
- We don't use precise geolocation.
Your controls.
- Marketing emails: unsubscribe anytime using the link in any marketing email.
- Cookies: make your choices in our cookie banner or through the "Your Privacy Choices" link in the Site footer.
- Browser settings: block or delete cookies in your browser.
- Personalized ads: opt out through the "Your Privacy Choices" link or by turning on GPC in your browser (see Section 7).
6. How We Share Information
We share personal information with service providers that help us run our business. They may use it only to provide services to us.
| Who | What they do |
|---|---|
| Shopify | Hosts our store, checkout, accounts, and order data; runs Shopify Email and Shopify Forms; provides analytics and fraud screening |
| Payment processors | Process payments and refunds and help prevent payment fraud |
| Print partners | Make and ship your items, using your name, shipping address, order details, and any uploads |
| Shipping carriers | Deliver your orders |
| Subscription app (if you join the Monthly Drop Club) | Handles Club billing, reminders, and the customer portal |
| Analytics providers | Help us understand how people use the Site |
| Advertising platforms (if we use them) | Show our ads and measure how they perform (see Section 7) |
| Professional advisors | Legal, accounting, and tax services |
About Shopify. Shopify processes your information when you visit and buy from our store. Shopify may also use information about your interactions with our store, with other merchants, and with Shopify to provide services such as fraud prevention, personalization, and advertising, under its own privacy policy. Learn more in Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy/customers.
Other disclosures. We may also disclose personal information:
- to comply with the law or respond to legal process;
- to protect rights and safety, including to prevent fraud or respond to intellectual property complaints about an upload;
- in a business transfer, such as a merger or sale, subject to this policy; and
- at your direction, for example when you ask us to ship a gift to someone.
We may share de-identified or aggregated information that can't reasonably identify you.
7. Selling, Sharing, and Targeted Advertising
We don't sell personal information for money. If we use advertising cookies or pixels (for example, from Meta, Google, TikTok, or Pinterest) to show you ads on other sites, some state laws treat that as "selling" or "sharing" personal information for targeted advertising. You can opt out at any time with the "Your Privacy Choices" link in our footer, and we honor Global Privacy Control (GPC) browser signals as an opt-out for that browser.
If we use advertising cookies or pixels, the information involved may include cookie and device IDs, IP address, pages and products viewed, cart activity, purchases, and approximate location. We don't sell or share your uploads, your payment details, or your customer records for advertising.
Minors. We don't knowingly sell or share the personal information of anyone under 16.
8. Cookies and Similar Technologies
Cookies are small files stored by your browser. Pixels and tags are small pieces of code on web pages and in emails. We and our service providers use them to:
- Run the Site: keep your cart, enable checkout, keep you logged in, remember your privacy choices, and protect security. These are always on.
- Remember preferences, such as region and language.
- Understand how the Site is used (analytics).
- Personalize your experience (see Section 5).
- Measure our emails: pixels in our emails tell us whether an email was opened and which links were clicked.
- Advertise, if we use advertising platforms (see Section 7).
Your choices. Use our cookie banner or the "Your Privacy Choices" link in the Site footer, turn on GPC, or block or delete cookies in your browser. If you block all cookies, parts of the Site (like the cart) may not work. Choices stored in cookies may reset if you clear cookies or switch browsers or devices. Some browsers send a "Do Not Track" signal. There's no common standard for it, so we don't respond to it, but we do honor GPC.
9. Email Marketing
- Sign-up is your choice. We send marketing emails, including waitlist and drop announcements, through Shopify Email, and only if you sign up. When you sign up, we'll ask you to confirm by email (double opt-in). Signing up is never required to buy anything.
- Unsubscribe anytime using the link in any marketing email or by emailing support@2yall.co. You'll still get transactional emails about your orders and membership.
- No texts. We don't send marketing text messages. If we ever start, we'll ask for your separate consent first.
- Records. We keep records of when you signed up and unsubscribed so we can honor your choices.
10. Your Uploads for Custom Products
- How we use them. If you upload images or text for a custom product, we use them only to make, ship, and support your order, including reprints and returns. Our team, Shopify, and our print partners can access them for that purpose.
- No marketing use. We won't use your uploads in our marketing, sell them, or put them on products for anyone else unless you give us separate permission.
- How long we keep them. Up to 90 days after your order is fulfilled, and longer only if the law requires it or there's an open dispute or claim. After that, we delete them or ask our partners to delete them. Copies may stay in backups for a limited time.
- Please be careful. Don't upload photos of other people without their permission, and don't upload anyone's sensitive information (such as ID documents or medical details).
11. Monthly Drop Club (If You Subscribe)
If you join the Monthly Drop Club, we and our subscription app keep your membership details (plan, sizes, shipping address, and billing date), billing records, your skips, pauses, changes, and cancellations, and a record of the terms you agreed to and when. We use this to run the Club and comply with automatic renewal laws. We keep consent and cancellation records for at least 3 years after your membership ends, even if you ask us to delete other information.
12. How Long We Keep Information
We keep personal information only as long as reasonably needed for the purposes in this policy, then delete or de-identify it. We may keep it longer if the law requires it, or to resolve disputes, prevent fraud, or enforce our agreements.
| Information | How long we keep it |
|---|---|
| Order, payment, and tax records | 7 years after the order |
| Account information | While your account is open, plus 24 months, or until you ask us to delete it |
| Monthly Drop Club consent, billing, and cancellation records | At least 3 years after your membership ends |
| Your uploads | Up to 90 days after fulfillment |
| Customer support messages | 24 months after the issue is closed |
| Email marketing and waitlist data | Until you unsubscribe, plus 24 months of history. We keep a "do not email" record so we can honor your opt-out. |
| Analytics and advertising cookie data | Up to 14 months, or the period set by the tool |
| Fraud-prevention and chargeback records | 3 years |
| Privacy request records | At least 24 months |
| Intellectual property complaint records | 3 years |
13. How We Protect Information
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. Payments go through Shopify's checkout and our payment processors, so we don't receive or store full card numbers. No system is perfectly secure, and we can't guarantee the security of information sent over the internet. If you think your account has been compromised, email support@2yall.co right away. If a data breach affects your personal information, we'll notify you as the law requires.
14. Children
The Site isn't directed to children under 13, and we don't knowingly collect personal information from them. You must be at least 18 (or the age of majority where you live) to place an order or join the Monthly Drop Club. If you're a parent or guardian and believe your child has given us personal information, contact support@2yall.co and we'll delete it.
15. Your Privacy Rights
We offer these rights to all of our customers, wherever you live in the U.S.:
- Access: ask what personal information we have about you and get a copy.
- Correct: ask us to fix inaccurate information.
- Delete: ask us to delete your information, subject to legal exceptions (for example, records we must keep for tax or automatic renewal laws).
- Portability: get a copy of your information in a usable format.
- Opt out of targeted advertising, sale, and sharing: use the "Your Privacy Choices" link in our footer, turn on GPC, or email us.
- Opt out of profiling for decisions with legal or similarly significant effects. We don't do this kind of profiling.
- Appeal: if we deny your request, you can appeal (see below).
- Non-discrimination: we won't deny you goods, charge you a different price, or give you worse service for using these rights.
How to make a request. Email support@2yall.co with the subject line "Privacy Request." To protect you, we'll verify your identity before acting on a request to access, correct, or delete, usually by confirming details we already have (such as your email address and a recent order number). We use that information only for verification. Opt-out requests don't need verification.
Authorized agents. Someone you authorize can make a request for you. We may ask for proof of your permission and ask you to confirm your identity with us directly, unless the agent has a valid power of attorney.
Timing and cost. We'll respond within 45 days. If we need more time, we may extend that by up to 45 more days where the law allows, and we'll tell you why. We process opt-out requests as soon as we can, and within 15 business days. Requests are free, but we may decline requests that are clearly unfounded or excessive.
Appeals. If we deny your request, email support@2yall.co with the subject line "Privacy Request Appeal" within 45 days of our decision. We'll respond in writing within the time your state's law requires. If you're not satisfied, you may contact your state attorney general.
16. State-Specific Information
California. California residents have the rights in Section 15 under the California Consumer Privacy Act. In the past 12 months, we've disclosed the types of information in Section 2 to the service providers in Section 6 for business purposes. As of the date of this policy, we have not sold or shared personal information. If we use advertising cookies or pixels, the information described in Section 7 may be "sold" or "shared," and you can opt out as described there. We use sensitive personal information only for purposes the law allows without a right to limit, such as completing your order and securing your account. We don't disclose personal information to third parties for their own direct marketing purposes.
Other states. Residents of other states with consumer privacy laws, such as Virginia, Colorado, Connecticut, Utah, Texas, and Oregon, may have similar rights. We honor the rights in Section 15, including GPC, no matter which state you live in.
17. Notice of Early-Access Incentive
If you join our waitlist, you may get early access to new drops before they open to the public. Some state laws call this a "financial incentive," because you give us your email address in exchange. Joining is free and optional, and you can withdraw anytime by unsubscribing. We don't assign a specific dollar value to your information. We consider the value of early access to be reasonably related to the value of your marketing relationship with us.
18. U.S.-Only Store
Our store is intended for customers in the United States, and we currently ship only to U.S. addresses. Our service providers may process information in other countries where they operate, and privacy laws there may differ from those where you live.
19. Third-Party Sites
The Site may link to other sites and services, such as social media or payment providers. Their own privacy policies apply, not this one.
20. Changes to This Policy
We'll review this policy at least once a year and update it when our practices change, including when we add new tools. When we do, we'll change the "Last updated" date above. If we make a material change, especially to how we use or share information we already have, we'll give you notice first (for example, by email or on the Site) and ask for your consent where the law requires.
21. Contact Us
2YALL (Fabio Alcantara, a sole proprietor doing business as 2YALL)
Attn: Privacy
6720 Old Monroe Rd, Ste B PMB 1027
Indian Trail, NC 28079-5353
Email: support@2yall.co
Website: https://2yall.co
If you have a disability and need this policy in another format, email support@2yall.co.