Privacy Policy

1. Data Controller

Ummahti (Netherlands) is responsible for the processing of personal data as described in this policy.

2. Data We Process

• Account data (such as name, email address, and language preference).
• Order and payment-related data (via payment provider).
• Delivery data (address, country, tracking information).
• Support data (questions, tickets, correspondence).
• Technical data for security and error analysis.

3. Purposes and Legal Bases

• Performance of the contract (ordering, delivery, support).
• Legal obligations (e.g., fiscal administration).
• Legitimate interest (security, service improvement, fraud prevention).
• Consent, where legally required (e.g., certain marketing cookies).

4. Retention Periods

We retain personal data no longer than necessary for the purpose for which it was collected, unless a statutory retention period requires otherwise.

5. Sharing with Third Parties

We only share personal data with processors and partners necessary for our services, such as hosting, payments, logistics, and support tools. We enter data processing agreements where required.

6. Transfers Outside the EEA

If personal data is processed outside the EEA, we implement appropriate safeguards, such as standard contractual clauses or an adequacy decision.

7. Your Rights

Under the GDPR, you have the right to:

• access, rectification, and erasure of personal data;
• restriction of processing;
• data portability;
• objection to certain processing.

Requests can be sent to privacy@ummahti.net.

8. Complaints

If you have a complaint about our processing of personal data, we would like to hear from you first via privacy@ummahti.net. You also have the right to file a complaint with your local data protection authority.

9. Changes

We may update this privacy policy. The most recent version is always available on this page with an updated effective date.