E-commerce

Yampi Virtual store

Yampi is a Brazilian e commerce platform and checkout solution for online stores. It sets functional cookies for the storefront and checkout and can add analytics and marketing, and because it is operated from Brazil it raises consent and international data transfer obligations under the GDPR.

Overview

What does Yampi Virtual store do?

What Yampi is

Yampi is a Brazilian e commerce platform that provides an online store builder and a hosted checkout used by merchants to sell products. It powers the storefront, cart, and payment flow, and can add marketing and analytics features to help merchants grow sales.

What data and cookies Yampi collects

Yampi sets functional cookies for the storefront, cart, and checkout, and can add analytics and marketing cookies that track browsing and support remarketing. It processes the customer and order data entered during a purchase along with browsing data, which is personal data under the GDPR.

GDPR, ePrivacy and data transfers

Functional store and checkout cookies are exempt under Article 5(3) ePrivacy, while analytics and marketing cookies require consent. Because Yampi is operated from Brazil, a country without an EU adequacy decision, personal data is transferred to a third country and you must put Standard Contractual Clauses and a transfer impact assessment in place.

Consent requirements

Load only the strictly necessary store and checkout cookies by default and gate analytics and marketing behind consent. Inform customers that their data is processed in Brazil, and make sure no non essential tag fires before consent is given.

Practical compliance steps

Sign a data processing agreement with the Standard Contractual Clauses, run a transfer impact assessment for the Brazil transfer, and disclose the cookies and the transfer in your policies. Set retention for customer and analytics data and review the configuration as the platform evolves.

Compliance

Yampi Virtual store and the GDPR

Yampi Virtual store is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract under Article 6(1)(b) for store and checkout and consent under Article 6(1)(a) plus Article 5(3) ePrivacy for analytics and marketing cookies
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, LGPD

Impact assessment (DPIA)

Because Yampi transfers personal data to Brazil and can profile customers for marketing, a transfer impact assessment is required and a DPIA is advisable where it processes significant volumes of customer data. Document the safeguards and the necessity of the transfer.

Sample text for your banner

We use Yampi to run our online store and checkout. Analytics and marketing cookies, including transfers to Brazil, are only used if you accept them.
Cookies and trackers

What Yampi Virtual store sets and contacts

Tracking method
Functional storefront and checkout cookies plus optional analytics and marketing
Server location
Brazil
Data transferred outside the EU
Yampi is operated from Brazil, which has no EU adequacy decision. Transfers rely on Standard Contractual Clauses with a transfer impact assessment.

Cookies set (4)

NameTypeDurationPurpose
yampi_cartFunctionalSessionKeeps the storefront and checkout session and cart
yampi_prefFunctional6 monthsRemembers store preferences during the purchase process
yampi_analyticsAnalytics1 yearMeasures how visitors browse the store
yampi_mktMarketing90 daysSupports remarketing and campaign attribution

Third-party domains contacted (2)

  • yampi.com.br
  • cdn.yampi.io
Questions

Frequently asked questions about Yampi Virtual store

Can't find your question? Write to us, we answer fast.

What cookies does Yampi set?

Yampi sets functional cookies for the storefront, cart, and checkout, and depending on configuration analytics and marketing cookies that track browsing and support remarketing. Only the store cookies are strictly necessary.

Is consent required for Yampi?

The functional store and checkout cookies are exempt under Article 5(3) ePrivacy, but the analytics and marketing cookies require prior consent and must stay blocked until the visitor accepts.

What is the legal basis for Yampi?

Running the store and checkout relies on performance of a contract under Article 6(1)(b), while analytics and marketing cookies rely on consent under Article 6(1)(a) and Article 5(3) ePrivacy.

Does Yampi transfer data to a third country?

Yes. Yampi is operated from Brazil, which has no EU adequacy decision, so personal data is transferred to a third country. You need Standard Contractual Clauses, a transfer impact assessment, and clear disclosure.

Is a DPIA needed for Yampi?

A transfer impact assessment is required for the Brazil transfer, and a DPIA is advisable where the store processes significant volumes of customer data or profiles customers for marketing.

How do I implement Yampi compliantly?

Block non essential cookies until consent, sign a data processing agreement with the SCCs, complete a transfer impact assessment, disclose the cookies and Brazil transfer, and set retention for customer data.

Are there alternatives to Yampi?

EU hosted store and checkout platforms avoid the international transfer entirely and simplify compliance. Any platform that adds analytics or marketing cookies still requires consent for those purposes.

How do I update my cookie policy for Yampi?

List the functional, analytics, and marketing cookies with their purpose and duration, state that data is transferred to Brazil, and name the safeguard. Keep the entry current as the platform changes.

Kajabi

Kajabi is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Kajabi integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Kajabi helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

ResDiary

ResDiary is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. ResDiary enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, ResDiary empowers marketing teams to achieve measurable growth.

Preferences

LawPay

LawPay is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. LawPay supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, LawPay ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Elloha

Elloha is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Elloha supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Elloha ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Tabby

Tabby is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Tabby integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Tabby makes advanced AI accessible to all teams.

E-commerce

A2Z Events

A2Z Events is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. A2Z Events supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, A2Z Events ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.