Legal

Privacy Policy

Last updated: 2 April 2026

1. Introduction

Ulu Commerce(“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://ulucommerce.com and use our services.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website.

2. Information We Collect

Personal Information

When you contact us or use our services, we may collect:

  • Name
  • Email address
  • Phone number (if provided)
  • Business name and details
  • Any other information you voluntarily provide via our contact form

Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Referring website
  • Device type and operating system

3. How We Use Your Information

We use the information we collect to:

  • Respond to your enquiries and provide customer support
  • Deliver, maintain, and improve our services
  • Communicate with you about your project
  • Send relevant updates about our services (with your consent)
  • Analyse website usage to improve user experience
  • Comply with legal obligations

4. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small files stored on your device.

Types of Cookies We Use

  • Essential cookies: Required for the website to function. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with our website. These are only set with your consent.

You can manage your cookie preferences at any time via the cookie consent banner or your browser settings. For more information, see our cookie consent banner on the website.

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

  • Consent: You have given consent for a specific purpose (e.g., marketing emails, analytics cookies).
  • Contractual necessity: Processing is necessary to fulfil a contract or take pre-contractual steps at your request.
  • Legitimate interests: Processing is necessary for our legitimate business interests, provided they are not overridden by your rights.
  • Legal obligation: Processing is necessary to comply with a legal obligation.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, please contact us at hello@ulucommerce.com.

7. Data Sharing & Third Parties

We do not sell your personal data. We may share information with trusted third-party services solely to operate our business:

  • Resend: For transactional emails (contact form submissions)
  • Stripe: For payment processing (when applicable)
  • Analytics providers: For anonymised website usage data (with consent)

These third parties are obligated to protect your data and only use it for the purposes we specify.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Contact form data is typically retained for up to 12 months unless you request earlier deletion.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

10. International Transfers

Your data may be transferred to and processed in countries outside your own. Where this happens, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

11. Children’s Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: