Privacy Policy - Universal

Universal
Operator of the website universal1.easycommerz.com
Effective Date: July 21, 2026
Last Updated: July 21, 2026
Version: 1.0

1. Introduction

This Privacy Policy ("Policy") describes how Universal ("Company," "we," "us," or "our") collects, uses, discloses, retains, transfers, and otherwise processes personal information about you when you visit, browse, register on, or make a purchase through our website located at universal1.easycommerz.com, our mobile applications, and any related online services, features, content, or functionality that link to or reference this Policy (collectively, the "Services").

We are committed to protecting your privacy and to being transparent about the personal information we handle. This Policy is intended to help you understand what information we collect, why we collect it, how we use and share it, and the rights and choices you have in connection with that information. Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood the practices described in this Policy. If you do not agree with our policies and practices, please do not use the Services.

This Policy applies to personal information we collect through the Services and in connection with the products we sell, our marketing and advertising activities, our customer support interactions, and our events. It does not apply to information collected by any third party, including through any application or content that may link to or be accessible from or through the Services. We encourage you to review the privacy policies of any third parties before providing them with your information.

Capitalized terms that are not otherwise defined in the body of this Policy have the meaning given to them in Section 20 (Definitions). Where required by applicable law, additional or region-specific disclosures are provided in the supplemental sections below and, in the event of a conflict, those region-specific terms control for residents of the relevant jurisdiction.

2. Who We Are and How to Contact Us

The data controller responsible for your personal information is Universal, a company organized under the laws of [State/Country], with its principal place of business at [Full Registered Address]. Where we determine the purposes and means of processing your personal information, we act as a "controller" (or the equivalent concept under applicable law). In some cases, we may process personal information on behalf of a third party, in which case we act as a "processor" or "service provider."

If you have any questions, comments, complaints, or requests regarding this Policy or our privacy practices, or if you wish to exercise any of your rights, you may contact us using the details below. We will do our best to respond promptly and, in any event, within the time periods required by applicable law.

By email: [privacy@yourstore.com]
By mail: Universal, Attn: Privacy Office, [Full Mailing Address]
By phone: [+1 (000) 000-0000]

3. Scope of This Policy

This Policy applies to all visitors, users, customers, and others who access or use the Services, regardless of the device or method used to access them. It covers personal information collected online and, where relevant, offline information that we combine with online records. The Services are intended for a general commercial audience and are not directed to children as described in Section 15.

Our Services may contain links to third-party websites, plug-ins, applications, payment providers, social media platforms, and advertising networks. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third-party websites and are not responsible for their privacy statements. This Policy governs only information collected by us.

4. Information We Collect

We collect several categories of personal information from and about you. The information we collect depends on how you interact with us and the Services. Some information you provide to us directly; some we collect automatically through technology; and some we obtain from third-party sources. We have grouped the categories of personal information as follows.

4.1 Information You Provide Directly to Us

You may provide personal information to us when you create an account, place an order, subscribe to marketing communications, complete a form, participate in a promotion or survey, write a review, contact customer support, or otherwise communicate with us. This information may include:

Identity and contact data: first and last name, billing and shipping addresses, email address, telephone number, and username or similar identifier.
Account credentials: password, password hints, and security questions and answers used to authenticate you and secure your account.
Order and transaction data: products or services you view, add to your cart, purchase, return, or exchange; order numbers; and records of the goods and services you have obtained from us.
Payment data: payment card type, the last four digits of your card number, billing address, and other billing details. Full payment card numbers are collected and processed by our third-party payment processors and are not stored by us in the ordinary course of business.
Profile and preference data: your interests, preferences, wish lists, saved items, feedback, and survey responses.
Marketing and communications data: your preferences in receiving marketing communications from us and your communication preferences generally.
User-generated content: product reviews, ratings, photographs, comments, and any other content you post to public or interactive areas of the Services.
Correspondence: the contents of messages, chat logs, call recordings (where permitted and disclosed), and other communications you send to us.

4.2 Information We Collect Automatically

When you access or use the Services, we and our service providers automatically collect certain information about your device and your interaction with the Services using cookies, pixels, software development kits, server logs, and similar technologies. This information may include:

Device and technical data: internet protocol (IP) address, device type, operating system and version, browser type and language, unique device identifiers, mobile network information, and screen resolution.
Usage data: pages and screens you view, the date and time of your visit, the length of your session, the links and buttons you click, the search terms you enter, the referring and exit pages, and other actions you take on the Services.
Location data: approximate location derived from your IP address and, where you enable it, more precise location data from your device.
Cookie and tracking data: information collected through cookies, web beacons, pixels, tags, and similar technologies as described in Section 9.

4.3 Information We Collect from Third Parties

We may receive personal information about you from third-party sources, which we may combine with information we collect directly. These sources may include:

Payment processors and fraud-prevention providers: who confirm payment authorizations and provide risk and fraud scoring.
Shipping and logistics partners: who provide delivery status and address-verification information.
Marketing and analytics partners: including advertising networks, data cooperatives, and social media platforms, who provide audience, attribution, and measurement information.
Social media platforms: when you interact with our pages or log in using social credentials, subject to the settings and permissions of those platforms.
Publicly available and commercial sources: such as public databases, business directories, and identity-verification services.

4.4 Sensitive Personal Information

We do not seek to collect sensitive personal information (such as information revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or precise geolocation) in the ordinary course of operating the Services, except where necessary and permitted by law or where you voluntarily provide it. If we do collect sensitive personal information, we will do so in accordance with applicable law and, where required, with your consent.

5. How We Use Your Information

We use the personal information we collect for a variety of business and commercial purposes, depending on how you interact with us. These purposes include the following:

To provide the Services: to operate, maintain, and deliver the Services; to create and manage your account; to enable you to browse, search, and use features of the Services.
To process transactions: to process and fulfill your orders, arrange shipping and delivery, process payments and refunds, and send you order confirmations, invoices, and related communications.
To provide customer support: to respond to your inquiries, resolve disputes, troubleshoot problems, and handle returns, exchanges, and warranty claims.
To personalize your experience: to remember your preferences, present relevant products and content, populate your cart and wish lists, and tailor the Services to you.
For marketing and advertising: to send you newsletters, promotions, offers, and other communications where permitted; to conduct advertising and remarketing campaigns; and to measure the effectiveness of our marketing.
For analytics and improvement: to understand how users interact with the Services, to conduct research and analysis, to develop new products and features, and to improve the safety, quality, and performance of the Services.
For security and fraud prevention: to detect, investigate, prevent, and address fraud, unauthorized activity, security incidents, and other harmful or unlawful conduct, and to protect the rights, property, and safety of the Company, our users, and others.
For legal and compliance purposes: to comply with applicable laws, regulations, legal processes, and enforceable governmental requests; to enforce our terms and policies; and to establish, exercise, or defend legal claims.
For business operations: to administer our business, maintain records, perform accounting and auditing, and carry out corporate transactions such as mergers, acquisitions, financings, or asset sales.

We may aggregate or de-identify personal information so that it can no longer reasonably be associated with an identified or identifiable individual. We may use, disclose, and retain such aggregated or de-identified information for any purpose permitted by law, and we will maintain and use it in de-identified form and will not attempt to re-identify it except as permitted by applicable law.

6. How We Share and Disclose Your Information

We do not sell your personal information for money in the traditional sense. However, some sharing of personal information for advertising and analytics may be considered a "sale" or "sharing" under certain laws, as described in Section 12. Subject to your rights and choices, we may disclose personal information in the following circumstances:

Service providers and processors: we share personal information with third-party vendors and service providers who perform services on our behalf, such as payment processing, order fulfillment, shipping and logistics, website and application hosting, data storage, customer support, email delivery, analytics, marketing, advertising, and fraud prevention. These parties are permitted to use your information only as necessary to provide services to us and are contractually obligated to protect it.
Payment processors: when you make a purchase, your payment information is transmitted to and processed by our third-party payment processors in accordance with their privacy policies and applicable payment-card industry standards.
Advertising and analytics partners: we share certain information, such as online identifiers and usage data, with advertising networks, analytics providers, and social media platforms to deliver and measure advertising and to analyze use of the Services.
Business partners: we may share information with business partners with whom we jointly offer products, services, or promotions, subject to their respective privacy practices.
Corporate transactions: in connection with, or during negotiations of, any merger, sale of company assets, financing, reorganization, bankruptcy, or acquisition of all or a portion of our business by another company, your information may be disclosed or transferred as part of that transaction.
Legal and safety reasons: we may disclose information where we believe in good faith that disclosure is necessary to comply with a legal obligation, court order, subpoena, or lawful request by a public authority; to enforce our terms and agreements; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of the Company, our users, or the public.
With your consent or at your direction: we may share your information with other third parties when you have given us your consent to do so or have otherwise directed us to share it.
Aggregated or de-identified information: we may share aggregated or de-identified information that cannot reasonably be used to identify you.

8. International Data Transfers

We are a global business and may transfer, store, and process your personal information in countries other than your own, including in [Country/Region], where our servers, offices, or service providers are located. These countries may have data protection laws that differ from the laws of your country and, in some cases, may not be considered to provide the same level of protection.

Where we transfer personal information from the EEA, the UK, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we implement appropriate safeguards to protect your information, such as Standard Contractual Clauses approved by the European Commission (and the UK Addendum or Swiss equivalents, as applicable), or other lawful transfer mechanisms. You may request a copy of the safeguards we use by contacting us using the details in Section 2.

9. Cookies and Similar Tracking Technologies

We and our third-party partners use cookies and similar tracking technologies to collect information about your interactions with the Services. A cookie is a small text file that is placed on your device when you visit a website. Similar technologies include web beacons, pixels, tags, local storage, and software development kits. These technologies help us recognize you, remember your preferences, understand how you use the Services, and deliver and measure advertising.

9.1 Types of Cookies We Use

Strictly necessary cookies: required for the operation of the Services, such as those that enable you to log in, add items to your cart, and complete a purchase. You cannot opt out of these cookies without impairing the functionality of the Services.
Performance and analytics cookies: collect information about how visitors use the Services, such as which pages are visited most often, to help us measure and improve performance.
Functional cookies: allow the Services to remember choices you make and provide enhanced, personalized features.
Advertising and targeting cookies: used to deliver advertisements that are more relevant to you and your interests, to limit the number of times you see an advertisement, and to measure the effectiveness of advertising campaigns.

9.2 Your Cookie Choices

You can manage your cookie preferences through our cookie banner or preference center, where available, and through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that if you disable certain cookies, some features of the Services may not function properly. To learn more about cookies and how to manage them, you may visit your browser’s help documentation.

9.3 Analytics and Advertising Providers

We use third-party analytics services (such as [Google Analytics]) to help us understand use of the Services. These providers may use cookies and similar technologies to collect information about your use of the Services and other websites. We also work with advertising partners that use cookies and similar technologies to serve interest-based advertising. You may be able to opt out of interest-based advertising from participating companies through industry opt-out tools such as those offered by the Digital Advertising Alliance, the Network Advertising Initiative, and the European Interactive Digital Advertising Alliance.

9.4 Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" ("DNT") signal. Because there is no common industry or legal standard for recognizing or honoring DNT signals, we currently do not respond to them. Where required by law, we honor recognized opt-out preference signals, such as the Global Privacy Control ("GPC"), as a valid request to opt out of the sale or sharing of personal information for the browser or device from which the signal is sent.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, tax, or reporting requirements, resolving disputes, enforcing our agreements, and protecting our legal rights. The criteria we use to determine the appropriate retention period include the nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and applicable legal requirements.

When we no longer need your personal information, we will securely delete, destroy, or anonymize it. In some circumstances we may retain information in an aggregated or de-identified form so that it can no longer be associated with you. Where information cannot be immediately deleted for technical reasons (for example, because it exists in backups), we will isolate it from any further processing until deletion is possible.

11. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect against unauthorized access, use, alteration, disclosure, loss, and destruction. These measures may include encryption in transit, access controls, network security, monitoring, and staff training. We also require our service providers to maintain appropriate safeguards.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your personal information. You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your devices. If you have reason to believe that your interaction with us is no longer secure, or that your account has been compromised, please contact us immediately using the details in Section 2. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities where required by applicable law.

12. Your Privacy Rights and Choices

Depending on where you live and subject to applicable law, you may have certain rights regarding your personal information. We honor these rights to the extent they apply to you. Your rights may include the following:

Right to access: to request confirmation of whether we process your personal information and to obtain a copy of the personal information we hold about you.
Right to rectification: to request correction of inaccurate or incomplete personal information.
Right to erasure: to request deletion of your personal information in certain circumstances.
Right to restriction: to request that we restrict the processing of your personal information in certain circumstances.
Right to data portability: to receive your personal information in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller.
Right to object: to object to the processing of your personal information in certain circumstances, including processing for direct marketing and processing based on our legitimate interests.
Right to withdraw consent: to withdraw any consent you previously provided, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to opt out of sale or sharing: to opt out of the "sale" or "sharing" of your personal information and of targeted advertising, where applicable.
Right to limit use of sensitive information: to limit the use or disclosure of sensitive personal information in certain circumstances.
Right to non-discrimination: to not be subjected to discriminatory treatment for exercising your privacy rights.
Right to lodge a complaint: to lodge a complaint with a competent data protection authority or regulator.

12.1 How to Exercise Your Rights

You may exercise your rights by contacting us using the details in Section 2 or by using any self-service tools we make available, such as your account settings or a privacy request form. We will need to verify your identity before fulfilling certain requests, which may require you to provide additional information. You may use an authorized agent to submit a request on your behalf where permitted by law, subject to verification of the agent’s authority.

We will respond to your request within the timeframe required by applicable law. There is generally no fee to exercise your rights, although we may charge a reasonable fee or decline to act on a request that is manifestly unfounded, excessive, or repetitive, as permitted by law. If we decline your request, we will explain the reasons, subject to legal restrictions.

13. Additional Disclosures for United States Residents

This section provides additional information for residents of U.S. states that have enacted comprehensive privacy laws, including California, Virginia, Colorado, Connecticut, Utah, and others, to the extent those laws apply to you. In case of any conflict between this section and the rest of the Policy, this section controls for residents of the applicable state.

13.1 Categories of Information and Purposes

In the preceding twelve (12) months, we have collected the categories of personal information described in Section 4, including identifiers, customer records, commercial information, internet and network activity information, geolocation data, and inferences drawn from the foregoing. We collect this information from the sources and for the purposes described in Sections 4 and 5, and we disclose it to the categories of recipients described in Section 7.

13.2 Sale and Sharing of Personal Information

We do not sell personal information in exchange for monetary consideration. However, our use of certain advertising and analytics technologies may be considered a "sale" or "sharing" of personal information (for cross-context behavioral advertising) under some state laws. You have the right to opt out of such sale or sharing. You may exercise this right through our cookie preference center, by broadcasting a Global Privacy Control signal, or by contacting us using the details in Section 2. We do not knowingly sell or share the personal information of consumers under the age of sixteen (16) without affirmative authorization.

13.3 Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law and that do not require the right to limit. Where such a right applies, you may request that we limit the use of your sensitive personal information as described in Section 12.

13.4 Shine the Light (California)

California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the details in Section 2.

14. Marketing Communications and Your Choices

With your consent where required, we may send you marketing communications about our products, services, promotions, and events by email, SMS, push notification, or other channels. You can opt out of receiving marketing communications at any time by following the unsubscribe instructions included in each message, by adjusting your notification settings in your account, or by contacting us using the details in Section 2.

Please note that even if you opt out of marketing communications, we may still send you non-promotional, transactional, or service-related messages, such as order confirmations, shipping updates, account notifications, and other communications necessary to administer your relationship with us. If you receive SMS messages from us, message and data rates may apply, and you can opt out by replying STOP to any message.

15. Children’s Privacy

The Services are intended for a general audience and are not directed to children under the age of [13/16] ("Children"). We do not knowingly collect personal information from Children without appropriate parental consent where required. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us using the details in Section 2, and we will take steps to delete such information and terminate any account the Child may have created, as required by applicable law.

16. Third-Party Websites, Services, and Social Features

The Services may include links to, or integrations with, third-party websites, products, and services, including social media platforms, payment providers, and advertising networks. When you follow a link to a third-party website or use a third-party feature, that third party may collect information about you in accordance with its own privacy policy. We do not control and are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of every third-party website or service that you visit or use.

17. Automated Decision-Making and Profiling

We may use automated tools and profiling to analyze your preferences, prevent fraud, personalize content and advertising, and improve the Services. In general, we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing without human involvement. Where we do engage in such processing, and where required by applicable law, we will provide additional information about the logic involved and the significance and consequences of the processing, and we will offer you the right to obtain human intervention, to express your point of view, and to contest the decision.

18. Accessibility

We are committed to ensuring that this Policy and our Services are accessible to individuals with disabilities. If you have a disability and would like to access this Policy in an alternative format, or if you experience any difficulty accessing any portion of the Services, please contact us using the details in Section 2, and we will work with you to provide the information or assistance you need.

19. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will revise the "Last Updated" date at the top of this Policy and, where the changes are material, we will provide a more prominent notice, such as by posting a notice on the Services or sending you a notification. We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of the Services after any changes become effective constitutes your acceptance of the revised Policy, to the extent permitted by applicable law.

20. Definitions

Personal information: any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular individual or household. "Personal information" and "personal data" are used interchangeably in this Policy.
Processing: any operation performed on personal information, whether or not by automated means, such as collection, recording, organization, storage, use, disclosure, transfer, and deletion.
Controller: the entity that determines the purposes and means of processing personal information.
Processor or service provider: an entity that processes personal information on behalf of and under the instructions of a controller.
Sale: the disclosure of personal information to a third party in exchange for monetary or other valuable consideration, as defined by applicable law.
Sharing: the disclosure of personal information to a third party for cross-context behavioral advertising, as defined by applicable law.
Sensitive personal information: categories of personal information that are afforded special protection under applicable law, such as government identifiers, financial account details, precise geolocation, and information about health, race, religion, or sexual orientation.
Services: the website, mobile applications, and related online services described in Section 1.

21. How to Contact Us and Make a Complaint

If you have any questions or concerns about this Policy or our handling of your personal information, please contact us first using the details in Section 2 so that we may address your concern. We take all complaints seriously and will investigate and respond to them.