Privacy policy

 

This Privacy Policy explains how uurtmc.shop collects, uses, stores, shares, and protects personal information when you visit our website, create an account, place an order, contact us, subscribe to communications, or otherwise use our services.

This policy applies to personal information processed through uurtmc.shop and our related ecommerce, payment, delivery, customer-service, analytics, security, and marketing activities.

For the purposes of applicable United Kingdom data-protection law, uurtmc.shop is the controller of the personal information described in this policy, except where another organisation separately determines how and why it processes personal information.

1. Contact Information

Store Name: uurtmc.shop
Email: info@uurtmc.shop
Phone: +44 7538 958820
Business Address: 31 Harvard Close, Lee-on-the-Solent, PO13 8FS, United Kingdom

For privacy enquiries, data-protection requests, or complaints, contact:

info@uurtmc.shop

Please include “Privacy Request” or “Data Protection Complaint” in the email subject line where possible.

2. Applicable Data-Protection Laws

We process personal information in accordance with applicable United Kingdom privacy and data-protection requirements, including:

  • The UK General Data Protection Regulation;
  • The Data Protection Act 2018;
  • The Privacy and Electronic Communications Regulations 2003;
  • The Data Use and Access Act 2025, where applicable; and
  • Other applicable privacy, electronic-marketing, consumer, and ecommerce laws.

3. Scope of This Privacy Policy

This Privacy Policy applies when you:

  • Visit or browse uurtmc.shop;
  • Create or use a customer account;
  • Add products to your shopping basket;
  • Start or complete checkout;
  • Place, change, or cancel an order;
  • Receive delivery or tracking services;
  • Request a return, replacement, exchange, or refund;
  • Contact customer support;
  • Submit feedback or a product review;
  • Subscribe to marketing communications;
  • Interact with our advertisements;
  • Participate in a promotion; or
  • Otherwise communicate with uurtmc.shop.

This policy does not govern the independent privacy practices of third-party websites or services that we do not control.

4. Personal Information We Collect

The personal information we collect depends on how you interact with our website and services.

Information You Provide Directly

You may provide:

  • Full name;
  • Email address;
  • Telephone number;
  • Billing address;
  • Delivery address;
  • Account information;
  • Order details;
  • Product selections;
  • Payment and transaction information;
  • Customer-support messages;
  • Return and refund information;
  • Photographs or videos submitted in connection with a product issue;
  • Reviews, ratings, and feedback;
  • Marketing preferences; and
  • Any other information you voluntarily provide.

Please do not provide personal information that is not reasonably necessary for us to process your order or respond to your enquiry.

Customer Account Information

If customer accounts are available and you create one, we may collect:

  • Your name;
  • Email address;
  • Login or authentication information;
  • Saved delivery addresses;
  • Order history;
  • Account preferences; and
  • Account activity.

You are responsible for keeping your account details accurate and protecting your login credentials.

Order and Transaction Information

When you place an order, we may collect:

  • Order number;
  • Products ordered;
  • Product options and quantities;
  • Purchase price;
  • Currency;
  • Order date;
  • Billing and delivery information;
  • Payment status;
  • Shipping method;
  • Tracking details;
  • Delivery status;
  • Discount information;
  • Return information;
  • Refund information; and
  • Communications relating to the order.

Payment Information

Payments may be processed by Shopify, payment gateways, card networks, banks, digital-wallet providers, or other payment-service providers.

These providers may collect:

  • Cardholder name;
  • Billing address;
  • Payment-card information;
  • Bank or wallet details;
  • Authentication information;
  • Transaction identifiers;
  • Fraud-prevention information; and
  • Payment status.

uurtmc.shop generally receives limited payment information, such as the payment method, transaction reference, payment status, and partial card details, rather than complete payment-card numbers.

Payment providers process information under their own privacy policies and legal obligations.

Device and Technical Information

When you use our website, we or our service providers may automatically collect:

  • Internet Protocol address;
  • Device type;
  • Browser type;
  • Operating system;
  • Device identifiers;
  • Language settings;
  • Approximate location derived from an IP address;
  • Referring website;
  • Pages viewed;
  • Links selected;
  • Search activity;
  • Session information;
  • Shopping-basket activity;
  • Checkout activity;
  • Cookie identifiers;
  • Advertising identifiers;
  • Website performance information;
  • Error logs; and
  • Security information.

Customer-Service Information

When you contact us, we may collect:

  • Your identity and contact details;
  • Order number;
  • Details of your enquiry;
  • Correspondence history;
  • Delivery information;
  • Complaint information;
  • Return and refund details;
  • Photographs or videos; and
  • Information concerning the resolution provided.

Reviews and User-Generated Content

If you submit a review, rating, photograph, video, comment, or other content, we may collect:

  • Your chosen display name;
  • Review or comment content;
  • Rating;
  • Submitted media;
  • Relevant product information;
  • Submission date; and
  • Information used to verify whether the review relates to a genuine purchase.

Reviews and related content may be displayed publicly. You should not include sensitive or unnecessary personal information in public content.

Marketing Information

Where marketing features are used, we may collect:

  • Name;
  • Email address;
  • Telephone number where applicable;
  • Marketing consent;
  • Communication preferences;
  • Subscription and unsubscribe records;
  • Email interactions;
  • Link selections;
  • Product interests;
  • Promotion participation; and
  • Marketing campaign information.

5. Information Received from Other Sources

We may receive personal information from organisations involved in operating our store and providing services, including:

  • Shopify;
  • Payment-service providers;
  • Banks and card networks;
  • Delivery carriers;
  • Fulfilment providers;
  • Fraud-prevention providers;
  • Customer-service platforms;
  • Analytics providers;
  • Advertising platforms;
  • Social-media platforms;
  • Email and messaging providers;
  • Product-review services;
  • Address-verification services; and
  • Professional advisers.

We may combine this information with information collected directly from you where lawful and reasonably necessary.

6. How We Use Personal Information

We may use personal information for the following purposes.

Providing Products and Services

We may use information to:

  • Operate our online store;
  • Process and fulfil orders;
  • Take and verify payments;
  • Confirm purchases;
  • Arrange packaging and delivery;
  • Provide tracking information;
  • Manage customer accounts;
  • Process order changes and cancellations;
  • Handle returns, exchanges, replacements, and refunds; and
  • Respond to product or order enquiries.

Customer Support

We may use information to:

  • Respond to questions;
  • Investigate delivery problems;
  • Assess damaged, faulty, or incorrect products;
  • Resolve complaints;
  • Verify purchases;
  • Communicate about orders;
  • Maintain support records; and
  • Improve customer service.

Website Operation and Improvement

We may use information to:

  • Maintain website functionality;
  • Remember shopping-basket contents;
  • Save preferences;
  • Maintain user sessions;
  • Diagnose technical problems;
  • Improve website navigation;
  • Analyse website performance;
  • Understand how customers use our services;
  • Improve products and services; and
  • Protect website availability.

Security and Fraud Prevention

We may use information to:

  • Verify identity and payment information;
  • Detect suspicious transactions;
  • Prevent fraud;
  • Protect customer accounts;
  • Maintain website security;
  • Enforce our Terms of Service;
  • Investigate misuse;
  • Respond to security incidents; and
  • Establish, exercise, or defend legal claims.

Marketing and Communications

Where permitted by law, we may use information to:

  • Send product updates;
  • Send promotions or discount offers;
  • Send abandoned-basket reminders;
  • Recommend products;
  • Conduct surveys;
  • Measure marketing effectiveness;
  • Understand customer interests; and
  • Personalise advertising or content.

You may unsubscribe from electronic marketing at any time.

Legal and Regulatory Compliance

We may use information to:

  • Maintain accounting and transaction records;
  • Comply with tax obligations;
  • Meet consumer-protection requirements;
  • Respond to lawful requests;
  • Comply with court orders;
  • Cooperate with regulators;
  • Meet product-safety obligations;
  • Investigate legal complaints; and
  • Fulfil other legal duties.

7. Legal Bases for Processing

We process personal information only where an appropriate legal basis applies.

Performance of a Contract

We may process information where necessary to:

  • Process your order;
  • Take payment;
  • Deliver products;
  • Provide order updates;
  • Maintain your account;
  • Process cancellations;
  • Handle returns and refunds; and
  • Provide services requested by you.

If required information is not provided, we may be unable to complete an order or provide the requested service.

Legal Obligation

We may process information to comply with legal obligations concerning:

  • Tax;
  • Accounting;
  • Consumer protection;
  • Product safety;
  • Fraud prevention;
  • Regulatory requests;
  • Court orders; and
  • Other applicable laws.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of another organisation, provided those interests are not overridden by your rights and freedoms.

Legitimate interests may include:

  • Operating and improving our business;
  • Providing customer service;
  • Maintaining accurate records;
  • Preventing fraud;
  • Protecting website security;
  • Understanding website performance;
  • Managing business risks;
  • Protecting legal rights; and
  • Conducting appropriate direct marketing where permitted.

Where required, we consider the necessity of the processing, your reasonable expectations, the possible effect on you, and available safeguards.

Consent

We may rely on consent for:

  • Non-essential cookies and similar technologies;
  • Certain analytics activities;
  • Personalised advertising;
  • Some electronic marketing communications; and
  • Other processing activities for which consent is required.

You may withdraw consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

Vital Interests

In rare circumstances, we may process information where necessary to protect someone’s life or physical safety.

8. Shopify

Our online store is hosted through Shopify.

Shopify provides ecommerce infrastructure that may be used to:

  • Host our website;
  • Display products;
  • Support customer accounts;
  • Process orders;
  • Support checkout;
  • Facilitate payments;
  • Maintain security;
  • Provide analytics;
  • Manage customer privacy preferences; and
  • Integrate third-party applications.

Shopify may process personal information as a processor or service provider acting on our behalf. For certain features, Shopify may separately determine how and why it processes personal information.

Information may be processed through systems operated by Shopify, its affiliated companies, and its approved service providers.

9. How We Share Personal Information

We may share personal information only where there is a lawful and legitimate reason.

Ecommerce and Hosting Providers

We may share information with Shopify and related service providers to host and operate our online store.

Payment Providers

Information may be shared with payment processors, banks, card networks, digital-wallet providers, and fraud-prevention services to:

  • Authorise transactions;
  • Process payments;
  • Issue refunds;
  • Verify identity;
  • Prevent fraud; and
  • Resolve payment disputes.

Delivery and Fulfilment Providers

We may share information with:

  • Warehouses;
  • Fulfilment providers;
  • Packaging providers;
  • Postal operators;
  • Delivery carriers;
  • Logistics providers; and
  • Customs or import service providers where applicable.

Information shared may include your name, address, telephone number, email address, order details, and tracking information.

Technology and Business-Service Providers

We may share information with providers supporting:

  • Website operation;
  • Cloud storage;
  • Cybersecurity;
  • Customer support;
  • Email delivery;
  • Messaging;
  • Analytics;
  • Advertising;
  • Product reviews;
  • Fraud prevention;
  • Address verification;
  • Accounting;
  • Legal services; and
  • Business administration.

Service providers may use personal information only as permitted by their agreements with us and applicable law.

Analytics and Advertising Partners

Subject to applicable consent requirements, information may be made available to analytics, advertising, search, or social-media providers to:

  • Measure website performance;
  • Understand customer interactions;
  • Measure advertising effectiveness;
  • Attribute purchases to advertising;
  • Limit repeated advertisements;
  • Create relevant advertising audiences; and
  • Personalise advertising.

Professional Advisers

We may share information with lawyers, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary.

Authorities and Legal Recipients

We may disclose information where reasonably necessary to:

  • Comply with law;
  • Respond to a court order;
  • Respond to a lawful government request;
  • Assist law enforcement;
  • Protect customers;
  • Investigate fraud;
  • Enforce agreements; or
  • Establish, exercise, or defend legal claims.

Business Transfers

If the business operating uurtmc.shop is sold, reorganised, transferred, merged, or acquired, personal information may be disclosed to relevant advisers, potential purchasers, or successor operators.

Any recipient must process the information lawfully and respect applicable data-protection rights.

10. International Transfers

Shopify and some of our service providers may process or store personal information outside the United Kingdom.

Where information is transferred internationally, we will take reasonable steps to ensure that an appropriate transfer mechanism or safeguard is used where required, including:

  • United Kingdom adequacy regulations;
  • The United Kingdom International Data Transfer Agreement;
  • The United Kingdom Addendum to approved contractual clauses;
  • Appropriate contractual protections;
  • Binding corporate rules where applicable; or
  • Another legally recognised transfer mechanism or exception.

Additional assessments or safeguards may be used where required by applicable law.

You may contact us for further information about safeguards applying to relevant international transfers.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

When determining retention periods, we consider:

  • The purpose for which the information was collected;
  • The customer relationship;
  • Contractual requirements;
  • Tax and accounting obligations;
  • Consumer-protection requirements;
  • Fraud-prevention needs;
  • Product-safety obligations;
  • Security requirements;
  • Applicable legal limitation periods;
  • Whether a dispute or complaint is ongoing; and
  • Whether continued retention is required or permitted by law.

For example:

  • Order and payment records may be retained for accounting, taxation, consumer claims, fraud prevention, and legal compliance;
  • Customer-support records may be retained while an enquiry or dispute remains relevant;
  • Account information may be retained while an account is active and for a reasonable period afterwards;
  • Marketing information may be retained until you unsubscribe or it is no longer required;
  • Consent and unsubscribe records may be retained to demonstrate compliance; and
  • Security logs may be retained for a reasonable period to investigate misuse or security incidents.

When personal information is no longer required, we will delete, anonymise, or securely dispose of it where reasonably possible.

12. Cookies and Similar Technologies

We and our service providers may use:

  • Cookies;
  • Tracking pixels;
  • Tags;
  • Scripts;
  • Local storage;
  • Device identifiers; and
  • Similar storage or access technologies.

These technologies may be used to:

  • Operate essential website functions;
  • Maintain security;
  • Remember shopping-basket contents;
  • Support checkout;
  • Maintain customer sessions;
  • Save privacy preferences;
  • Analyse website usage;
  • Measure performance;
  • Prevent fraud;
  • Personalise content; and
  • Support advertising.

Strictly Necessary Technologies

Some technologies are required to provide services requested by you or to maintain website security and operation.

These may support:

  • Shopping-basket functions;
  • Checkout;
  • Payment processing;
  • Account authentication;
  • Privacy preferences;
  • Fraud prevention; and
  • Network security.

These technologies may operate without consent where an applicable legal exemption permits.

Functional and Analytics Technologies

Functional or analytics technologies may help us:

  • Remember preferences;
  • Improve website features;
  • Identify technical errors;
  • Measure website performance;
  • Understand how visitors use the website; and
  • Improve the customer experience.

Where consent is required, these technologies will be used only after valid consent has been provided.

Advertising Technologies

Subject to your choices and applicable law, advertising technologies may be used to:

  • Measure advertising performance;
  • Attribute purchases to advertisements;
  • Display more relevant advertising;
  • Build advertising audiences; and
  • Limit repeated advertisements.

Advertising technologies will be subject to consent where required.

13. Cookie Preferences

When you visit our website, you may be presented with a Cookie banner or privacy-preference interface.

Depending on available settings, you may be able to:

  • Accept optional technologies;
  • Reject optional technologies;
  • Select particular categories;
  • Change your preferences; or
  • Withdraw consent.

Rejecting optional technologies should not prevent access to essential shopping functions, although some analytics, personalisation, or advertising features may not operate.

You may also manage cookies through your browser settings. Blocking all cookies may interfere with shopping-basket, account, or checkout functions.

14. Electronic Marketing

We may send electronic marketing communications where:

  • You have provided valid consent;
  • An applicable existing-customer exception permits the communication; or
  • Another lawful basis is available and the communication complies with applicable electronic-marketing rules.

Marketing communications may include:

  • Product announcements;
  • Promotions;
  • Discount codes;
  • Product recommendations;
  • Abandoned-basket reminders;
  • Seasonal offers; and
  • Customer surveys.

You may unsubscribe by:

  • Selecting the unsubscribe link in a marketing email;
  • Using available account or preference settings; or
  • Contacting info@uurtmc.shop.

We may continue to send necessary service communications, including:

  • Order confirmations;
  • Payment notifications;
  • Dispatch updates;
  • Delivery information;
  • Account-security messages;
  • Return instructions;
  • Refund confirmations; and
  • Important legal or service notices.

15. Personalised Advertising

Where permitted and subject to your consent choices, we may use information about website interactions, purchases, or product interests to measure or display personalised advertising.

Advertising partners may use cookies or similar technologies to:

  • Recognise browsers or devices;
  • Measure advertisement performance;
  • Attribute purchases;
  • Select relevant advertisements; and
  • Create or measure audiences.

You may manage these activities through available Cookie or privacy-preference controls.

16. Automated Decision-Making

We may use automated systems to support:

  • Fraud detection;
  • Payment verification;
  • Website security;
  • Product recommendations;
  • Advertising personalisation; and
  • Risk assessment.

These systems may consider:

  • Transaction patterns;
  • Device information;
  • IP address;
  • Account activity;
  • Billing and delivery information; and
  • Previous order activity.

Where a decision is made solely through automated processing and produces legal or similarly significant effects, we will use an appropriate lawful basis and provide safeguards where required.

Depending on the circumstances, you may have the right to request human involvement, express your position, or challenge a decision.

17. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access;
  • Accidental loss;
  • Improper disclosure;
  • Alteration;
  • Misuse;
  • Destruction; and
  • Unlawful processing.

Measures may include:

  • Secure website connections;
  • Access controls;
  • Authentication procedures;
  • Payment-security measures;
  • Data minimisation;
  • Security monitoring;
  • Confidentiality obligations;
  • Service-provider reviews; and
  • Incident-response procedures.

No internet transmission, online platform, or storage system can be guaranteed to be completely secure.

You are responsible for protecting your account credentials and informing us promptly if you suspect unauthorised access.

18. Personal Data Breaches

If a personal-data breach occurs, we will assess:

  • The nature of the information affected;
  • The likely consequences;
  • The number of individuals affected;
  • Available security protections; and
  • The risk to individuals’ rights and freedoms.

Where required by law, we will notify the relevant supervisory authority and affected individuals within the applicable period.

19. Your Data-Protection Rights

Depending on the circumstances and applicable law, you may have the following rights.

Right to Be Informed

You have the right to receive clear information about how your personal information is collected and used.

Right of Access

You may request confirmation of whether we process your personal information and request a copy of relevant information.

Right to Rectification

You may ask us to correct inaccurate information or complete information that is incomplete.

Right to Erasure

You may ask us to delete personal information in certain circumstances.

This right may not apply where continued processing is required for legal compliance, fraud prevention, accounting, consumer claims, or another lawful reason.

Right to Restrict Processing

You may ask us to restrict processing in certain circumstances, including while the accuracy or lawfulness of processing is being reviewed.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request certain information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing based on legitimate interests in certain circumstances.

You have the right to object to the use of your personal information for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect processing that occurred before consent was withdrawn.

Rights Concerning Automated Decisions

Where applicable, you may have rights concerning decisions made solely through automated processing that produce legal or similarly significant effects.

Right to Complain

You may submit a data-protection complaint to us and may also complain to the United Kingdom Information Commissioner’s Office.

20. Exercising Your Rights

To exercise a data-protection right, contact:

info@uurtmc.shop

Please provide:

  • Your full name;
  • The email address connected with your account or order;
  • Your order number where relevant;
  • A clear description of your request; and
  • Information reasonably required to locate the relevant records.

We may request reasonable and proportionate evidence of identity before disclosing, deleting, or changing personal information.

We will respond without undue delay and normally within one month after receiving a valid request and any information reasonably required to verify your identity.

Where permitted by law, the response period may be extended for complex or multiple requests. We will inform you if an extension is necessary.

Requests are generally handled without charge. A reasonable fee may apply, or a request may be refused, where applicable law permits this because the request is manifestly unfounded or excessive.

21. Data-Protection Complaints

You may complain to us if you believe we have handled personal information incorrectly or failed to comply with applicable data-protection requirements.

Send complaints to:

info@uurtmc.shop

Please include:

  • Your full name;
  • Your contact information;
  • Your order or account details where relevant;
  • A clear description of the concern;
  • Relevant supporting information; and
  • The outcome you are seeking.

We will:

  • Provide a clear method for submitting the complaint;
  • Acknowledge the complaint within 30 days of receipt;
  • Take appropriate steps to investigate it without undue delay;
  • Keep you reasonably informed where appropriate; and
  • Communicate the outcome without undue delay.

Submitting a complaint to us does not affect your right to complain to the Information Commissioner’s Office.

22. Complaints to the Information Commissioner’s Office

You have the right to complain to the United Kingdom Information Commissioner’s Office if you believe your personal information has been processed unlawfully.

The Information Commissioner’s Office is the independent United Kingdom regulator responsible for data protection.

We would appreciate an opportunity to address your concern first, but you are not required to contact us before approaching the Information Commissioner’s Office.

23. Correcting Account Information

You may be able to update certain personal information through your customer account.

You may also contact us to:

  • Correct your name;
  • Update contact information;
  • Change a saved address;
  • Close an account; or
  • Request another correction.

Changing account information does not necessarily alter information contained in completed transaction records that must be retained for legal, accounting, fraud-prevention, or consumer-protection purposes.

24. Children’s Privacy

Our website is intended for a general retail audience and is not designed to knowingly collect personal information directly from children who cannot lawfully consent to the relevant processing.

Customers placing orders must have legal capacity to enter into a contract or act with the involvement of a parent or legal guardian.

If we provide an online service likely to be used by children, we will take children’s needs and rights into account when deciding how their personal information is processed.

If you believe a child has provided personal information without appropriate permission, contact info@uurtmc.shop.

25. Special-Category Information

We do not ordinarily request special-category personal information, including information concerning:

  • Health;
  • Race or ethnicity;
  • Religious or philosophical beliefs;
  • Political opinions;
  • Trade-union membership;
  • Genetic information;
  • Biometric identification;
  • Sexual orientation; or
  • Sex life.

Please do not send this information unless it is genuinely necessary for a specific request.

Where special-category information is processed, we will do so only where an appropriate legal basis and condition apply.

26. Third-Party Websites and Services

Our website may contain links to payment providers, delivery carriers, social-media platforms, or other external websites and services.

Third parties control their own privacy practices.

We are not responsible for the privacy, security, availability, or content of third-party services that we do not control.

Please review the relevant third party’s privacy policy before providing personal information.

27. Social-Media Interactions

If you interact with us through a social-media platform, the platform may process information under its own privacy policy.

We may receive:

  • Public profile information;
  • Messages;
  • Comments;
  • Reactions;
  • Advertising interactions; and
  • Campaign information.

Your use of a social-media service is also governed by the relevant platform’s terms and privacy practices.

28. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

  • Our website;
  • Products or services;
  • Shopify features;
  • Service providers;
  • Data-processing activities;
  • Cookie technologies;
  • Security practices; or
  • Applicable law.

The revised policy will be published on this page with an updated “Last updated” date.

Where required, we will provide additional notice or request new consent.

29. Contact Us

For privacy enquiries, data-protection requests, or complaints, contact:

uurtmc.shop
Email: info@uurtmc.shop
Phone: +44 7538 958820
Business Address: 31 Harvard Close, Lee-on-the-Solent, PO13 8FS, United Kingdom

Please include “Privacy Request” or “Data Protection Complaint” in the email subject line where possible.