This policy explains what personal data urmei collects when you browse, shop, or create an account, how we use it, and the choices you have. It applies to the urmei storefront, the mobile app, and creator storefronts hosted by us.
Account data we collect: your name, email address, phone number, delivery addresses, and the one-time codes used to sign you in. We do not store passwords, because sign-in uses email plus a one-time code.
Order data we collect: the items you buy, order value, delivery status, returns, and the creator or campaign an order came from. Card and wallet details are handled by our payment providers — urmei stores only the payment method type and the last four digits.
Usage data we collect: device type, browser, approximate location from your IP address, the region and language you browse in, pages viewed, and products searched or saved to your wishlist.
We use this data to process and deliver your orders, handle returns and refunds, prevent fraud and abuse, provide customer support, show prices and stock for your region, and improve what we recommend to you.
Marketing emails and push notifications are sent only if you opt in, and every message carries an unsubscribe link. Order and delivery notifications are transactional and are sent regardless.
We share data only where necessary: with the brand fulfilling your order, delivery partners, payment providers, and service providers that host or support the platform. Creators see aggregate performance for their campaigns, never your name, address, or contact details.
Your data may be processed outside your country by these providers. Where that happens, we use contractual safeguards that meet the requirements of Singapore's PDPA and the equivalent laws in Malaysia and Indonesia.
We keep account data while your account is open, and order records for as long as tax and consumer-protection law requires — typically seven years — after which they are deleted or anonymised.
Cookies and similar technologies keep you signed in, remember your cart and region, and measure how the storefront performs. Non-essential cookies are set only with your consent, which you can change at any time from cookie settings.
You can access, correct, download, or delete your personal data, and withdraw consent, from your account settings or by contacting us. Deleting your account does not remove order records we are legally required to keep.
We protect data with encryption in transit, restricted internal access, and regular security review. If a breach affects you, we will notify you and the relevant regulator as required by law.
urmei is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
We may update this policy; material changes will be posted here before they take effect. Privacy questions or requests: privacy@urmei.com.