Privacy Policy
Last Updated: 09 September 2025
1. Introduction
Welcome to The U ("we," "our," "us"). We operate the website https://the-u.store/ (the "Site"). We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site or make a purchase from us.
This policy is written in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
The U
Email: hello@the-u.shop
For any data protection inquiries, please contact us using the details above.
3. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
4. How We Collect Your Data
We use different methods to collect data from and about you, including:
5. How We Use Your Data (Lawful Basis for Processing)
We will only use your personal data when the law allows us to. Our lawful bases for processing include:
1. Introduction
Welcome to The U ("we," "our," "us"). We operate the website https://the-u.store/ (the "Site"). We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site or make a purchase from us.
This policy is written in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
The U
Email: hello@the-u.shop
For any data protection inquiries, please contact us using the details above.
3. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
- Identity Data: First name, last name, username or similar identifier, title.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Payment card details. Please note: All payments are processed by our secure third-party payment processors (e.g., Stripe, PayPal). We do not store your full credit card details on our servers.
- Transaction Data: Details about payments to and from you, and other details of products and services you have purchased from us.
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.
4. How We Collect Your Data
We use different methods to collect data from and about you, including:
- Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms on our site or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
- Create an account on our site;
- Make a purchase or inquire about our products;
- Subscribe to our newsletter or marketing;
- Enter a competition, promotion, or survey; or
- Give us feedback or contact us.
- Automated technologies or interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
- Third parties or publicly available sources: We may receive personal data about you from various third parties, such as:
- Technical Data from analytics providers like Google;
- Contact, Financial, and Transaction Data from providers of technical, payment, and delivery services.
5. How We Use Your Data (Lawful Basis for Processing)
We will only use your personal data when the law allows us to. Our lawful bases for processing include:
6. Marketing Communications
We will only send you marketing messages (e.g., our newsletter, information about new collections) if you have explicitly consented to receive them or, where permitted by law, if we have a legitimate interest (e.g., you are an existing customer and we are marketing similar products - "soft opt-in").
You can ask us to stop sending you marketing messages at any time by:
7. Disclosures of Your Personal Data
We may share your personal data with the following categories of third parties for the purposes set out in this policy:
8. International Transfers
Some of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:
9. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
10. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
For example, we are required by tax law to keep basic information about customers (including Contact, Identity, Financial, and Transaction Data) for 7 years after they cease being customers.
11. Your Legal Rights Under GDPR
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
12. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at hello@the-u.shop.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
13. Changes to This Privacy Policy
We may update this policy from time to time. The updated version will be indicated by an updated "Last Updated" date and will be effective as soon as it is accessible. We will notify you of any material changes by email or a prominent notice on our website.
Contact Us
For any questions about this Privacy Policy, please contact us:
By email: hello@the-u.shop
We will only send you marketing messages (e.g., our newsletter, information about new collections) if you have explicitly consented to receive them or, where permitted by law, if we have a legitimate interest (e.g., you are an existing customer and we are marketing similar products - "soft opt-in").
You can ask us to stop sending you marketing messages at any time by:
- Clicking the "unsubscribe" link in any marketing email.
- Logging into your account and adjusting your marketing preferences.
- Contacting us at hello@the-u.shop.
7. Disclosures of Your Personal Data
We may share your personal data with the following categories of third parties for the purposes set out in this policy:
- Service Providers: Payment processors (e.g., Stripe, PayPal), delivery and shipping companies (e.g., DHL, UPS, Nova Poshta), IT and system administration services, email marketing platforms, advertising networks, professional advisors.
- Specific third parties: This may include platforms like Shopify (if our store is built on it), Google Analytics, Meta (Facebook/Instagram) Pixel.
- Legal Obligation: We may disclose your data to comply with a legal obligation or to protect our rights, property, or safety.
8. International Transfers
Some of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- We use specific contracts (Standard Contractual Clauses - SCCs) approved by the European Commission which give personal data the same protection it has in Europe.
9. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
10. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
For example, we are required by tax law to keep basic information about customers (including Contact, Identity, Financial, and Transaction Data) for 7 years after they cease being customers.
11. Your Legal Rights Under GDPR
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
- The right to access – You have the right to request copies of your personal data.
- The right to rectification – You have the right to request correction of any inaccurate or incomplete data we hold about you.
- The right to erasure (the "right to be forgotten") – You have the right to request the deletion of your personal data.
- The right to restrict processing – You have the right to request the suspension of the processing of your personal data.
- The right to data portability – You have the right to request the transfer of your data to another organization, or to you.
- The right to object to processing – You have the right to object to our processing of your personal data.
- Rights in relation to automated decision making and profiling – We do not use automated decision-making.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
12. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at hello@the-u.shop.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
13. Changes to This Privacy Policy
We may update this policy from time to time. The updated version will be indicated by an updated "Last Updated" date and will be effective as soon as it is accessible. We will notify you of any material changes by email or a prominent notice on our website.
Contact Us
For any questions about this Privacy Policy, please contact us:
By email: hello@the-u.shop