Privacy Policy

Last Updated: June 11, 2026

1. Information We Collect

We collect information necessary to process orders and provide services:

1.1 Personal Information You Provide

• Account Information: Full name, email address, password (stored encrypted)
• Order Information: Shipping address, billing address, phone number
• Payment Information: Processed securely through Stripe — we do NOT store credit card or bank details on our servers
• Communication Data: Contact form submissions, email correspondence, customer service inquiries

1.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device information, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, referral URLs, search queries
• Cookie Data: Session and preference cookies (see Cookies section below)
• Location Data: Approximate geographic location based on IP address

2. How We Use Your Information

We use collected information for the following purposes:

• Process, fulfil, and ship orders
• Send order confirmations, invoices, and shipping updates via email
• Respond to customer inquiries and support requests
• Improve website functionality, security, and user experience
• Prevent fraud, verify payments, and detect suspicious activity
• Comply with legal, tax, and regulatory obligations
• Conduct anonymised analytics for business improvement
• Personalise your browsing experience and product recommendations

Legal basis for processing (GDPR): We process your data based on: contractual necessity (order fulfilment), legitimate interests (fraud prevention, analytics), legal obligation (tax records), and consent (marketing communications).

3. Cookies & Tracking Technologies

We use cookies and similar technologies to ensure our website functions properly:

• Strictly Necessary Cookies: Required for login sessions, shopping cart, checkout, and basic site functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website so we can improve performance and content.
• Marketing Cookies: Used for relevant advertising (e.g., Meta/Facebook Pixel) to measure campaign effectiveness.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality, including the ability to add items to cart or complete checkout.

4. Data Sharing

We never sell or rent your personal information. We may share data with the following categories of service providers:

• Payment Processor (Stripe): Processes all payment transactions securely in compliance with PCI DSS standards
• Shipping Carriers: UPS, USPS, DHL, or other carriers as needed for order fulfilment
• Email Services (Resend): For transactional emails such as order confirmations and invoices
• Analytics Services: Anonymised usage data to improve our website
• Legal Authorities: When required by law, court order, or to protect our legal rights and safety

All third-party processors are contractually obligated to protect your data and only use it for the specific purposes outlined.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Account Data: Retained until you request account deletion
• Order Records: 7 years (legal/tax retention requirement)
• Communication Records: 2 years from last contact
• Technical Logs: 90 days
• Marketing Consent Records: Duration of consent plus 1 year

6. Data Security

We implement industry-standard security measures to protect your personal data, including:

• SSL/TLS encryption for all data in transit
• Encrypted password storage using modern hashing algorithms
• Regular security audits and vulnerability assessments
• Role-based access controls limiting employee access to personal data
• Secure cloud infrastructure with regular backups

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the event of a data breach.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

GDPR Rights (EU/EEA/UK Residents)

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Restrict processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority (e.g., ICO in the UK)

CCPA Rights (California Residents)

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us. We will respond within 30 days (GDPR) or 45 days (CCPA).

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our servers and some service providers are located. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) where applicable, to protect your data in compliance with GDPR and other applicable data protection laws.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately so we can delete the information.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you via email or a prominent notice on our website. Your continued use of our services after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your data rights, please contact us or write to:

GLUUM. LLC — Data Protection Officer

30 N Gould St, Ste R

Sheridan, WY 82801

USA

Email: support@gluumresearch.com

We typically respond within 24 hours on business days.