Last updated: August 2026
At URMA, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit weareurma.com, purchase products from us, create an account, contact us, subscribe to marketing communications or otherwise interact with URMA.
Our online store is powered by Shopify.
This Privacy Policy should be read alongside our Cookie Policy, Terms & Conditions, Returns & Refunds Policy and Shipping & Delivery Policy.
1. WHO WE ARE
For the purposes of applicable UK data protection law, the organisation responsible for deciding how and why your personal information is processed is the relevant URMA trading entity.
Trading name: URMA
Email: hello@weareurma.com
Website: weareurma.com
Legal trader: [LEGAL NAME]
Business address: [BUSINESS ADDRESS]
As URMA is currently being set up, the legal business name and business address should be added to this Privacy Policy once confirmed.
If you have questions about this Privacy Policy or how we use your personal information, contact:
hello@weareurma.com
2. PERSONAL INFORMATION WE COLLECT
Depending on how you interact with URMA, we may collect the following categories of personal information.
Information you provide to us
This may include:
- Your name
- Email address
- Telephone number
- Billing address
- Delivery address
- Account login information
- Order details
- Products purchased, viewed or added to your basket
- Payment and transaction information
- Returns, refunds and customer-service information
- Information you provide when contacting us
- Marketing preferences
- Information you provide when participating in promotions or other activities
Information collected automatically
When you use our website, we and certain service providers may collect information such as:
- IP address
- Browser type and version
- Device type
- Operating system
- Website pages visited
- Products viewed
- Referring website
- Approximate location derived from technical information
- Website interaction information
- Cookie and similar technology information
The exact information collected will depend on the features and technologies enabled on our website.
3. PAYMENT INFORMATION
When you make a purchase, payment information is processed through the payment services available through our online store.
We do not generally need to store your full payment card details ourselves in order to process your purchase.
Payment providers and Shopify may process information necessary to authorise and complete transactions.
4. HOW WE USE YOUR PERSONAL INFORMATION
We may use personal information to:
- Process and fulfil orders
- Take and process payments
- Deliver products
- Process returns, refunds and cancellations
- Provide customer support
- Manage customer accounts
- Send order confirmations and other transactional communications
- Respond to enquiries
- Prevent fraud and detect suspicious activity
- Protect the security of our website and systems
- Maintain and improve our website
- Understand how customers use our website
- Analyse sales and website performance
- Administer promotions and competitions
- Comply with legal, accounting and regulatory obligations
- Send marketing communications where permitted by law
- Establish, exercise or defend legal claims
We will only use personal information for purposes that are compatible with applicable data protection law.
5. OUR LAWFUL BASES FOR PROCESSING
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on the following lawful bases.
Contract
We may process personal information where this is necessary to enter into or perform a contract with you.
For example, this may include processing your name, address and order information so that we can process and deliver your purchase.
Legal obligation
We may process personal information where necessary to comply with a legal obligation.
This may include tax, accounting, consumer protection, fraud prevention and other legal requirements.
Legitimate interests
We may process personal information where this is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.
Our legitimate interests may include:
- Operating and improving URMA
- Providing customer service
- Protecting our business and customers against fraud
- Maintaining website and information security
- Managing customer relationships
- Understanding how our website and products are used
- Establishing or defending legal claims
Where we rely on legitimate interests, we consider the potential impact on your rights and interests before processing your information.
Consent
Where required by law, we may rely on your consent.
For example, consent may be required for certain marketing communications or non-essential cookies.
Where we rely on consent, you can withdraw it at any time.
Withdrawal of consent does not affect processing that took place before you withdrew your consent.
6. EMAIL MARKETING
If you subscribe to URMA marketing communications, we may use your email address to send information about:
- New collections
- Product launches
- Restocks
- Promotions
- Events
- Brand news
- Other URMA products or services
Where consent is required, we will only send marketing emails after obtaining appropriate consent.
You can withdraw your marketing consent at any time by using the unsubscribe link in our marketing emails.
We may also, where permitted by applicable law, send marketing communications to existing customers about similar URMA products where the legal requirements for the relevant soft opt-in are satisfied. UK PECR requires the relevant opt-out opportunity to be provided when contact details are collected and in subsequent marketing communications.
Marketing consent is not required for necessary transactional communications, such as order confirmations, dispatch information, refund communications or important information about an existing purchase.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to operate, including features such as shopping baskets, checkout and security.
Other cookies may be used for purposes such as:
- Remembering preferences
- Analytics
- Understanding website usage
- Advertising
- Measuring marketing performance
- Personalising content or advertising
Where consent is legally required, we will ask for your consent before placing or using the relevant non-essential cookies.
For more information about the cookies we use and how you can manage your preferences, please see our Cookie Policyand the cookie settings available on our website.
8. HOW WE SHARE PERSONAL INFORMATION
We may share personal information with third parties where reasonably necessary to operate URMA and provide our services.
These may include:
Shopify
Our ecommerce store is powered by Shopify.
Shopify and its service providers may process information relating to your use of our store, including information necessary to operate the website, process transactions and provide ecommerce services.
Payment providers
Payment providers may process payment and transaction information to authorise and complete purchases.
Delivery and fulfilment providers
We may provide delivery information, such as your name, address and contact details, to couriers, postal services and fulfilment providers so that your order can be delivered.
Technology and service providers
We may use providers for:
- Website hosting
- IT services
- Security
- Analytics
- Customer support
- Email delivery
- Marketing
- Fraud prevention
Professional advisers
We may share information with professional advisers such as accountants, lawyers, insurers or other advisers where reasonably necessary.
Authorities
We may disclose personal information to courts, regulators, government authorities or law-enforcement bodies where required or permitted by law.
We aim to ensure that third parties only receive information that is reasonably necessary for the relevant purpose.
9. SHOPIFY
Our online store is hosted and powered by Shopify.
Shopify may process personal information in connection with the operation of our online store and the services Shopify provides to merchants and customers.
Shopify may process information in accordance with its own privacy terms and policies.
You can find further information about Shopify's privacy practices through Shopify's privacy information.
10. INTERNATIONAL DATA TRANSFERS
Some of the service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps required by UK data protection law.
Depending on the circumstances, this may include relying on:
- UK adequacy regulations
- Appropriate safeguards such as approved contractual protections
- Another lawful transfer mechanism permitted under applicable UK data protection law
Where required, further information about relevant safeguards can be obtained by contacting us.
11. HOW LONG WE KEEP YOUR INFORMATION
We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The length of time depends on the type of information and why we need to keep it.
For example, we may retain information relating to purchases for periods necessary to:
- Complete and administer the transaction
- Handle returns, refunds and complaints
- Meet tax and accounting obligations
- Comply with consumer protection requirements
- Prevent fraud
- Establish or defend legal claims
Marketing information may be retained until you unsubscribe or otherwise request that we stop using it for direct marketing, subject to any information we need to retain for suppression or compliance purposes.
When personal information is no longer required, we will delete it or anonymise it where reasonably appropriate.
12. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances, UK data protection law may give you rights including the right to:
- Request access to your personal information
- Ask us to correct inaccurate or incomplete information
- Ask us to erase personal information in certain circumstances
- Ask us to restrict processing in certain circumstances
- Object to certain processing
- Object to direct marketing
- Request portability of certain personal information
- Withdraw consent where processing is based on consent
These rights are not absolute and may depend on the circumstances and the lawful basis on which we process your information.
To exercise a privacy right, contact:
hello@weareurma.com
We may need to verify your identity before completing certain requests.
We will normally respond to valid data protection requests within the timeframe required by applicable law.
13. RIGHT TO OBJECT TO DIRECT MARKETING
You have an absolute right to object to the processing of your personal information for direct marketing purposes.
If you object to direct marketing, we will stop using your personal information for that purpose.
You can also unsubscribe from URMA marketing emails by using the unsubscribe link included in our marketing communications.
We may retain limited information necessary to ensure that we respect your request not to receive marketing.
14. AUTOMATED DECISION-MAKING AND PROFILING
We do not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects.
Our website and service providers may use analytics, personalisation or advertising technologies that involve automated processing or profiling for purposes such as understanding website usage, measuring advertising and improving customer experiences.
Where required by law, we will provide additional information and rights relating to such processing.
15. SECURITY
We take reasonable technical and organisational measures designed to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Alteration
- Unauthorised disclosure
- Destruction
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
If we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps required by law.
16. THIRD-PARTY WEBSITES
Our website may contain links to websites, applications or services operated by third parties.
Those websites are independent from URMA and may have their own privacy policies.
We are not responsible for the privacy practices of independent third parties.
We recommend reviewing the privacy information of any third-party website before providing personal information.
17. CHILDREN'S PRIVACY
Our website and products are not specifically directed at children.
We do not knowingly collect personal information from children where doing so would require parental or guardian consent under applicable law.
If you believe a child has provided us with personal information inappropriately, please contact:
hello@weareurma.com
We will review the matter and take appropriate action where necessary.
18. COMPLAINTS
If you have concerns about how URMA uses your personal information, please contact us first:
hello@weareurma.com
We will try to resolve your concerns.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information Commissioner's Office
You can find information about making a complaint through the ICO's official website.
Information Commissioner's Office (ICO)
19. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to:
- Our business
- Our website
- Our services
- Technologies we use
- The personal information we collect
- Our processing activities
- Applicable laws or regulatory requirements
When we make changes, we will publish the updated version on our website and update the “Last updated” date.
20. CONTACT US
If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information is handled, contact:
URMA
Email: hello@weareurma.com
Website: weareurma.com
Legal trader: [LEGAL NAME]
Business address: [BUSINESS ADDRESS]
Last updated: August 2026