Privacy Policy

1. Introduction

Welcome to Uliluu ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it when you visit our website at uliluu.com and make purchases from our store.

Please read this policy carefully. If you have any questions or concerns, contact us at support@uliluu.com.

2. Information We Collect

We collect information you provide directly to us and information collected automatically when you use our services.

Information you provide:

• Account information: your name and email address when you register or sign in via Google or Discord.
• Payment information: billing address and payment details processed securely by our third-party payment provider (Stripe). We never store your full card number on our servers.
• Order information: the products you purchase, transaction records, and download history.
• Communications: any messages or support requests you send us.

Information collected automatically:

• IP address, browser type, and device information
• Pages visited, time on site, and navigation patterns
• Referring website addresses
• Cookies and similar technologies (see Section 6)

3. How We Use Your Information

We use the data we collect to:

• Process and fulfill your orders and deliver digital files
• Manage your account and provide customer support
• Send transactional emails (order confirmations, download links)
• Detect and prevent fraud or unauthorized activity
• Improve our website, products, and services
• Comply with legal and regulatory obligations
• Send marketing communications — only with your explicit consent, and you may opt out at any time

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:

• Contract performance: processing necessary to deliver your order.
• Legal obligation: complying with applicable laws and regulations.
• Legitimate interests: fraud prevention and improving our services.
• Consent: marketing emails — you can withdraw consent at any time.

5. Sharing Your Information

We do not sell your personal data. We share it only with trusted third parties as necessary:

• Stripe: to process payments securely.
• Google / Discord: for OAuth-based authentication (if you choose to sign in via these providers).
• Resend: to deliver transactional and marketing emails.
• Analytics providers: to understand site usage and improve our services (data is anonymized where possible).
• Legal authorities: when required by law or to protect our rights and the safety of others.

All third-party service providers are contractually required to handle your data securely and only for the purposes we specify.

6. Cookies

We use cookies and similar tracking technologies to enhance your experience, keep you signed in, and understand how our site is used. These include:

• Essential cookies: required for authentication and shopping cart functionality.
• Analytics cookies: help us understand how visitors interact with our site.

You can control or disable cookies through your browser settings. Disabling essential cookies may prevent you from signing in or completing purchases.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services and comply with legal obligations. Order records are kept for a minimum of 5 years for accounting and tax purposes. You may request deletion of your account at any time (see Your Rights below).

8. Data Security

We implement appropriate technical and organizational measures — including encryption in transit (HTTPS) and at rest — to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data (right to be forgotten).
• Portability: receive your data in a structured, machine-readable format.
• Restriction / Objection: object to or restrict certain data processing activities.
• Withdraw consent: opt out of marketing emails at any time via the unsubscribe link or by contacting us.

To exercise any of these rights, email us at support@uliluu.com. We will respond within 30 days.

10. International Transfers

Your information may be processed in countries outside your jurisdiction. When we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to ensure your data remains protected.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party services you use.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we may also notify you by email. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

Uliluu
Email: support@uliluu.com