Shipping
Return Policy
Questions?
Privacy
INTRODUCTION
At Ubravoo UK we know that you care how information about you is used and shared, and we appreciate your trust in us to do that carefully and sensibly. This Privacy Notice describes how UBRAVOO trading as Ubravoo UK (“Ubravoo”, “we”, “us”) collects and processes your personal information through our website, devices, products, services, online marketplace and applications that reference this Privacy Notice.
By using Ubravoo Services, you are consenting to the practices described in this Privacy Notice. If you do not agree, please do not use our website. This notice has been prepared to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 as applicable in 2026.
DOES UBRAVOO SHARE INFORMATION ?
Information about our customers is an important part of our business and we are not in the business of selling it to others. We share customer information only as described below.
Required by Law & Public Interest
We will disclose your information where required to do so by law, or where we have a legitimate public interest, for example: to comply with a legal obligation, to enforce our Conditions of Use, to protect the rights, property or safety of Ubravoo, our users or others, or in connection with fraud prevention and credit risk reduction.
Third Parties — We Never Sell Your Data
We do not sell personal data. We share only with trusted service providers necessary to operate our store:
Website X5. — e-commerce platform, hosting, checkout
Payment processors — PayPal, Klarna, Apple Pay, Google Pay
Delivery partners — Royal Mail, DPD, Evri, DHL, Inpost, Relay
Customer support — helpdesk tools to respond to enquiries
All processors are bound by Data Processing Agreements compliant with UK GDPR Art. 28.
Website X5 Analytics
We use Website X5 Analytics (with IP anonymisation enabled) to understand how visitors use our site. Google Analytics uses cookies to collect anonymised traffic data. You can opt out via Website X5 Analytics Opt-out Browser Add-on. Data retention is set to 14 months.
Remarketing & Advertising
We may use Meta Pixel, Google Ads and TikTok Pixel for interest-based advertising. These services may use cookies to show you relevant Ubravoo products after you leave our site. You can opt out via your browser settings. We do not share your email with these platforms unless you consent.
Email Communication
We use Hostinger Webmail (UK/EU hosted) for transactional emails (order confirmations, shipping updates) and, with your consent, marketing emails. You can unsubscribe at any time via the link in any email. Transactional emails are necessary for contract fulfilment and cannot be unsubscribed while an order is active.
HOW SECURE IS INFORMATION ABOUT ME?
We work to protect the security of your information during transmission and at rest.
We use SSL/TLS 256-bit encryption to protect data transmitted between your browser and our servers. You can verify this by the padlock icon in your address bar.
We reveal only the last four digits of your payment cards when confirming an order. We transmit full card details to payment processors (Apple pay, Google pay, PayPal, Klarna) during order processing only over encrypted channels.
We maintain physical, electronic and procedural safeguards including access controls, firewalls, and staff confidentiality training in accordance with UK GDPR Article 32.
It is important for you to protect against unauthorised access to your password and to your devices. Be sure to sign off when finished using a shared computer.
HOW LONG WE KEEP YOUR INFORMATION?
We retain personal data only for as long as necessary for the purposes set out in this notice, and to comply with legal, accounting and reporting requirements.
Order & transaction records : 6 years (HMRC legal obligation)
Customer account data : Until account deletion + 12 months for fraud prevention
Marketing consent & email logs : Until consent withdrawn + 6 months proof
Support correspondence : 3 years from last contact
Analytics / cookies : 14 months max, or until consent withdrawn
CCTV / fraud logs (if applicable) : 12 months
After these periods, data is securely deleted or anonymised. Backup copies may persist for up to 90 days in encrypted backups.
COOKIES
Cookies are small text files stored on your device. We use cookies to provide, protect and improve our services.
Essential : Required for checkout, login, cart, security, load balancing. Cannot be disabled.
Preferences : Remember your language, region, and cookie choices.
Analytics : Help us understand traffic, popular products, errors — e.g., Google Analytics 4, Shopify Analytics. Anonymised.
Marketing : Show relevant products and measure ad performance — Meta Pixel, Google Ads, TikTok Pixel. Only with consent.
Functional : Enable reviews, chat widgets, video embeds.
You can manage cookies via our consent banner, or via your browser: Chrome → Settings → Privacy; Safari → Preferences → Privacy; Firefox → Settings → Privacy & Security. Disabling essential cookies will prevent checkout from working.
WHAT CHOICES DO I HAVE
- You can always choose not to provide information, even though it might be needed to make a purchase or to take advantage of Ubravoo features.
- You can add or update certain information on pages such as those listed in the Access section. When you update information, we usually keep a copy of the prior version for our records.
- If you do not want to receive e-mail or other mail from us, please adjust your Customer Communication Preferences or contact us. You can also use the unsubscribe link.
- The Help feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.
- You have the right to object to processing based on legitimate interests, to request data portability, and to object to automated decision-making.
UK GDPR AND DATA TRANSFERS
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our legal bases for processing are:
- Contract — to fulfil your order, deliver products, process payments
- Legitimate Interest — fraud prevention, improving our store, customer support, securing our website
- Legal Obligation — tax, accounting, compliance with law enforcement
- Consent — marketing emails, non-essential cookies, personalisation where you have opted in
Our primary data storage is within the United Kingdom and European Economic Area (Hostinger UK/EU data centres). Where data is transferred outside the UK (e.g., to the US for analytics or support tools), we ensure appropriate safeguards:
- UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs
- Transfers to countries with UK adequacy regulations (e.g., EEA)
- Where applicable, US providers certified under the EU-US Data Privacy Framework + UK Extension (which replaced the invalidated Privacy Shield)
We no longer rely on the EU-US Privacy Shield, which was invalidated. All transfers are assessed via Transfer Risk Assessments as required by the ICO.