Privacy policy

UBIYAM PRIVACY POLICY

This Privacy Policy explains how we collect, use, share and protect your personal information when you visit https://ubiyam.com (the "Site"), place an order, or contact us.

1. Who We Are

The Site is operated by GRWOOTS LLC, doing business as UBIYAM®, a limited liability company registered in Wyoming, United States.

Address: 30 N Gould St, Ste N1, Sheridan, WY 82801, United States Email: info@ubiyam.com Phone: +1 (307) 317-4207

For customers in the United Kingdom and the European Economic Area, GRWOOTS LLC is the data controller of your personal information.

2. Where We Operate

We currently ship to the United States, the United Kingdom, Australia, Canada, Belgium, France, Germany, the Netherlands, Spain and Switzerland, United Arab Emirates, Qatar, Saudi Arabia, Kuwait, Oman, Bahrain. We may add or remove countries at any time.This policy applies to visitors and customers in all of those countries.

3. Information We Collect

Information you give us

- Name, email address, phone number

- Shipping and billing address

- Order and subscription history

- Messages you send us through our contact form or by email

Marketing preferences and newsletter sign-ups

Payment information

Card payments are processed by our payment providers (including Shopify Payments, PayPal, Apple Pay, Google Pay and Shop Pay). We do not receive or store your full card number. We receive only confirmation of payment and limited details such as the last four digits and card type.

Information collected automatically

Device and browser type, operating system, language

IP address and approximate location (country/region level)

Pages viewed, products viewed, time on site, referring website

Cookie and similar identifiers

4. Cookies and Tracking Technologies

We use cookies and similar technologies to run the Site, remember your cart, understand how the Site is used, and measure and improve our advertising.

We use tracking tools from the following providers:

- Shopify — store operation, cart, checkout and fraud prevention
- Google Analytics — site analytics
- Google Ads / Google tag — advertising measurement
- Meta (Facebook and Instagram) Pixel — advertising measurement
- TikTok Pixel and Events API — advertising measurement
- Snapchat Pixel — advertising measurement

You can manage cookies through the cookie banner on our Site and through your browser settings. If you are in the United Kingdom or the EEA, non-essential cookies are only set where you have given consent, and you may withdraw consent at any time.

You can also opt out directly with these providers:

- Google Analytics: https://tools.google.com/dlpage/gaoptout
- Google Ads personalisation: https://www.google.com/settings/ads/anonymous
- Meta (Facebook and Instagram) ads: https://www.facebook.com/settings/?tab=ads
- Digital Advertising Alliance (multiple networks): https://optout.aboutads.info
- Shopify privacy information: https://www.shopify.com/legal/privacy

5. How We Use Your Information - and Our Legal Bases

Purpose
Legal basis (UK/EU) 
Process and deliver your order, manage returns and refunds Performance of a contract
Manage subscriptions and recurring deliveries Performance of a contract
Provide customer support Performance of a contract / legitimate interests
Send order and shipping notifications Performance of a contract
Send marketing emails and newsletters Consent (you may unsubscribe at any time)
Advertising, retargeting and measurement Consent (via cookie banner)
Site analytics and improving our products Legitimate interests / consent where required
Fraud prevention and site security Legitimate interests / legal obligation
Accounting, tax and record-keeping Legal obligation


6. Who We Share Your Information With

We do not sell your personal information. We share it only with parties who help us run the business:

Shopify Inc. — e-commerce platform hosting our Site and checkout

Payment providers — Shopify Payments, PayPal and other providers you choose at checkout

Shipping, fulfilment and logistics partners — to pick, pack, ship and deliver your order, and to provide tracking. The specific carrier depends on your destination country.

Customs and border authorities — where required to clear your parcel for import

Email and customer-service providers — to send order updates and respond to your messages

Analytics and advertising providers — as listed in Section 4

Professional advisers, accountants and auditors

Law enforcement or regulators — where we are legally required to do so

7. International Transfers of Your Information

We are based in the United States, and our service providers and shipping partners operate in several countries, including outside the United Kingdom and the EEA.

Where we transfer personal information out of the United Kingdom or the EEA, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism.

You may request a copy of the safeguards we use by emailing info@ubiyam.com.

8. How Long We Keep Your Information

Order and transaction records: retained for as long as required by tax and accounting law (generally up to 7 years)

Customer account and subscription data: retained while your account is active, then deleted or anonymised

Marketing contact data: retained until you unsubscribe or ask us to delete it

Support correspondence: generally retained for up to 3 years

Cookie and analytics data: retained according to each provider's retention settings

9. Security

We use technical and organisational measures to protect your information, including encrypted connections (HTTPS), access controls, and payment processing by PCI-DSS compliant providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights United Kingdom and European Union

If you are in the United Kingdom or the EEA, you have the right to:

Access the personal information we hold about you

Rectify information that is inaccurate or incomplete

Erase your information ("right to be forgotten")

Restrict how we process your information

Object to processing based on our legitimate interests, and to direct marketing at any time

Data portability — receive your information in a machine-readable format

Withdraw consent at any time, without affecting processing carried out before withdrawal

Not be subject to decisions based solely on automated processing that have legal or similarly significant effects

To exercise any of these rights, email info@ubiyam.com. We will respond within one month. We do not charge a fee for these requests.

Right to complain: you also have the right to lodge a complaint with your local data protection authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). In the EEA, you may complain to the supervisory authority in your country of residence.

11. Your Rights — Switzerland

If you are in Switzerland, you have equivalent rights under the Swiss Federal Act on Data Protection (FADP), including access, rectification, erasure and objection. Contact us at info@ubiyam.com, and you may also contact the Federal Data Protection and Information Commissioner (FDPIC).

12. Your Rights — United States

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others), you may have the right to:

Know what personal information we collect, use and disclose

Request a copy of your personal information

Request deletion of your personal information

Correct inaccurate personal information

Opt out of the sale or sharing of personal information, and of targeted advertising

Not be discriminated against for exercising these rights

We do not sell personal information for money. However, the use of advertising cookies described in Section 4 may be considered "sharing" or "targeted advertising" under some state laws. You can opt out through our cookie banner or by emailing info@ubiyam.com.

To make a request, email info@ubiyam.com with the subject line "Privacy Request". We may need to verify your identity before we can act.

13. Your Rights — Australia and Canada

If you are in Australia, you have rights under the Privacy Act 1988 to access and correct your personal information, and may complain to the Office of the Australian Information Commissioner (OAIC).

If you are in Canada, you have rights under PIPEDA to access and correct your personal information, and may complain to the Office of the Privacy Commissioner of Canada.

Contact us at info@ubiyam.com to exercise these rights.

14. Your Right for other countries

If you are in the United Arab Emirates, Qatar, Saudi Arabia, Kuwait, Oman or Bahrain, you have rights under your national data protection law, including the right to access, correct and request deletion of your personal information. Contact info@ubiyam.com.

15. Marketing Communications

You can unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by emailing info@ubiyam.com. You will still receive transactional messages about orders you have placed, such as order confirmations and shipping notifications.

16. Children's Privacy

Our Site and products are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us at info@ubiyam.com and we will delete it.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at this page. If the changes are significant, we will notify you by email or by a notice on the Site.

18. Contact Us

For any questions about this Privacy Policy or your personal information, please contact us:

GRWOOTS LLC (dba UBIYAM®) 30 N Gould St, Ste N1, Sheridan, WY 82801, United States Email: info@ubiyam.com | Phone: +1 (307) 317-4207 https://ubiyam.com

Last updated: July 28, 2026