At ucm.digital, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and disclose your personal information when you visit our website or purchase our products and services, in compliance with the European Union's General Data Protection Regulation (GDPR).

1. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: UCM
• Address: Rua Professor Oliveira Andrade, NR. 420 - A
  4470-634 Moreira da Maia
• Email: customer-care@ucm.digital

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: First name, last name, username or similar identifier.
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Financial Data: Payment card details (processed securely via Shopify Payments).
• Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Profile Data: Purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Usage Data: Information about how you use our website, products, and services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and third parties.

3. How We Collect Personal Data

We use different methods to collect data from and about you, including:

• Direct Interactions: You may provide personal data by filling in forms or by corresponding with us via mail, phone, email, or otherwise.
• Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data using cookies, server logs, and other similar technologies.
• Third Parties or Publicly Available Sources:
  • Shopify Platform: Our website is hosted on Shopify Inc., which provides us with the online e-commerce platform that allows us to sell our products and services to you.
  • Shopify Payments: We use Shopify Payments to process payments securely.
  • Analytics Providers: Such as Google Analytics.
  • Advertising Networks: Such as Google Ads, Facebook Ads.

4. How We Use Your Personal Data

We process your personal data for the following purposes:

• To Process and Deliver Your Orders:
  • Manage payments, fees, and charges via Shopify Payments.
  • Communicate with you about your orders.
• To Manage Our Relationship with You:
  • Notify you about changes to our terms or privacy policy.
  • Ask you to leave a review or take a survey.
• To Enable You to Participate in Promotions, Competitions, or Surveys.
• To Administer and Protect Our Business and Website:
  • Troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data via Shopify.
• To Deliver Relevant Website Content and Advertisements to You:
  • Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
• To Make Suggestions and Recommendations to You About Goods or Services That May Be of Interest to You.

5. Legal Basis for Processing

We will only process your personal data when the law allows us to. Most commonly, we rely on the following legal bases:

• Performance of a Contract: Processing necessary for the performance of a contract with you.
• Consent: Where you have given explicit consent for processing (e.g., for marketing purposes).
• Legitimate Interests: Processing necessary for our legitimate interests (e.g., to improve our services) unless overridden by your rights.
• Compliance with Legal Obligations: Processing necessary to comply with a legal obligation.

6. Disclosure of Your Personal Data

We may share your personal data with:

• Shopify Inc.: As our e-commerce platform provider, Shopify processes your personal data on our behalf. Your data is stored through Shopify's data storage, databases, and the general Shopify application. They store your data on secure servers behind a firewall.
• Shopify Payments: For secure payment processing. Your payment card details are encrypted through the Payment Card Industry Data Security Standard (PCI-DSS).
• Service Providers: Third parties who provide IT and system administration services.
• Professional Advisors: Including lawyers, bankers, auditors, and insurers.
• Regulators and Authorities: Who require reporting of processing activities in certain circumstances.
• Third Parties: In the event of a merger, acquisition, or sale of assets.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including Canada and the United States. Shopify Inc. and Shopify Payments adhere to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, ensuring an adequate level of data protection.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

9. Your Rights Under GDPR

Under certain circumstances, you have rights under data protection laws concerning your personal data:

• Access: Request access to your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data.
• Restriction: Request restriction of processing your personal data.
• Portability: Request transfer of your personal data to you or a third party.
• Objection: Object to processing of your personal data.
• Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data.

To exercise any of these rights, please contact us at [email protected].

10. Security Measures

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorization. Shopify also implements strict security measures, including encryption and secure servers, to protect your data.

11. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect data relating to children.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your experience. For detailed information, please refer to our Cookie Policy.

13. Third-Party Links

Our website may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or our data protection practices, please contact us:

• Email: customer-care@ucm.digital
• Address: Rua Professor Oliveira Andrade, NR. 420 - A
  4470-634 Moreira da Maia

Additional Information Regarding Shopify and Shopify Payments:

• Shopify's Privacy Policy: For more information on how Shopify handles your personal data, please refer to Shopify's Privacy Policy.

• Payment Information: All direct payment gateways offered by Shopify Payments adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

• Data Storage: Your data may be stored through Shopify's servers located in the United States and Canada. Shopify is certified under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, ensuring adequate protection for your personal data.