Last updated: May 13, 2026
The short version. We collect the minimum information needed to fulfill your order and improve your experience on the site. We don't sell your data. We use Stripe for payments and a standard set of analytics tools to understand how the site is used.
What we collect
- Information you give us — name, email, shipping/billing address, phone, payment details when you order.
- Information collected automatically — pages visited, time on each, browser, device, IP address, and referrer through standard cookies and analytics tools.
- Information from third parties — from social logins or ad networks, governed by their own privacy policies.
How we use it
To fulfill, ship, and confirm orders. To answer customer service emails. To send the workshop newsletter (if you've opted in). To improve the site and prevent fraud. To comply with applicable law.
What we don't do
We do not sell your personal information. We do not share your contact information with third-party marketers. We do not retain payment card data — Stripe handles all card processing.
Who we share with
- Stripe (payment processing)
- Our shipping carriers and fulfillment partner
- Email service providers (transactional and, with opt-in, newsletter)
- Analytics providers
- Law enforcement, only when legally compelled
Your rights
If you live in California, the EU, the UK, or another jurisdiction with comparable privacy laws, you may have the right to request a copy of your data, request deletion, opt out of sale or sharing (we already don't sell it), or restrict processing. To exercise any of these rights, email privacy@umadeus.shop with your order email. We respond within 30 days.
Cookies
We use essential cookies for the cart and checkout, analytics cookies for aggregate site usage, and marketing cookies to measure the performance of our occasional ads. Disable non-essential cookies in your browser or via our banner.
Data retention
Order records: as long as required by tax and accounting law (typically seven years in the U.S.). Inactive newsletter subscribers: deleted after two years of no opens or clicks.
Children
The website and purchase flow are intended for adults aged 18+. We do not knowingly collect information from anyone under 13.
Changes to this policy
We may update this policy from time to time. The "Last updated" date will always reflect the latest revision. Material changes will be posted on the homepage for 30 days.
Contact: privacy@umadeus.shop