Privacy policy
Effective date: 4 March 2026. This privacy policy describes how Ummahti processes personal data.
1. Data Controller
Ummahti, Coolsingel 104, 3011 AG Rotterdam, the Netherlands (Chamber of Commerce 70523363), is the controller for the processing of personal data described in this policy. You can reach us at privacy@ummahti.net.
2. Data We Process
Account data (such as name, email address, and language preference).
Order and payment-related data (via payment provider).
Delivery data (address, country, tracking information).
Support data (questions, tickets, correspondence).
Technical data for security and error analysis.
3. Purposes and Legal Bases
Performance of the contract (ordering, delivery, support).
Legal obligations (e.g., fiscal administration).
Legitimate interest (security, service improvement, fraud prevention).
Consent, where legally required (e.g., certain marketing cookies).
4. Retention Periods
We retain personal data no longer than necessary for the purpose for which it was collected. Order and invoice data are kept for seven years, as required by Dutch tax law. Support correspondence is deleted when it is no longer needed to handle your question or order.
5. Sharing with Third Parties
We only share personal data with processors and partners necessary for our services: Shopify (online store, checkout and payments), our website host (Vercel), the carriers that deliver your order (PostNL, DHL) and, only with your consent, Meta Platforms Ireland Ltd. (advertising cookies). We enter data processing agreements where required.
6. Transfers Outside the EEA
If personal data is processed outside the EEA, we implement appropriate safeguards, such as standard contractual clauses or an adequacy decision.
7. Your Rights
Under the GDPR, you have the right to:
access, rectification, and erasure of personal data;
restriction of processing;
data portability;
objection to certain processing.
Requests can be sent to privacy@ummahti.net. Where processing is based on your consent, you can withdraw that consent at any time; this does not affect processing that took place before.
8. Complaints
If you have a complaint about our processing of personal data, we would like to hear from you first via privacy@ummahti.net. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your country of residence.
9. Changes
We may update this privacy policy. The most recent version is always available on this page with an updated effective date.
10. Cookies and Tracking
We use cookies and similar technologies on our website. Strictly necessary cookies are always active. Analytics and advertising cookies (such as the Meta/Facebook Pixel) are only placed after you give explicit consent via our cookie banner.
The Meta Pixel collects data about your visit (pages viewed, actions taken) and shares it with Meta Platforms Ireland Ltd. to measure the effectiveness of our advertisements and to show you relevant ads on Facebook and Instagram. This data may be transferred to the United States under standard contractual clauses.
You can withdraw your consent to optional tracking by clearing this website’s site data in your browser, including cookies and local storage. Then revisit the website and reject optional tracking in the cookie banner. For help, contact support@ummahti.net.