Privacy Policy

Ubeba Limited – Privacy Policy

Effective Date: August, 2025

Company and Trading Name: Ubeba Limited

Registered Address: Third floor, 3 Hill Street, New Town, Edinburgh, EH2 3JP

Introduction

Ubeba Limited (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, shop at our market stalls, or purchase through our TikTok Shop.By using our services, you agree to the terms of this Privacy Policy.

What Information We Collect

We may collect and process the following types of personal data:

Information You Provide Directly

Name, email address, billing and delivery address, phone number, payment information (processed securely via Stripe, PayPal, or Tide) and marketing preferences (e.g. when you subscribe to our newsletter).

Information Collected Automatically

When you visit our website, we may collect: IP address and browser type, device information (mobile, tablet, desktop), website usage data via cookies and analytics tools. We use this data to improve site performance and user experience.

How We Use Your Information

We use your data for the following purposes:To process and deliver your orders (including payments, shipping, and returns), to communicate with you about your order, updates, or enquiries, to send marketing emails or promotions (only if you’ve subscribed or opted in), to improve our website, services, and customer experience, to comply with legal obligations, such as tax and accounting requirements. We never sell your personal data to third parties.

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases: Contractual necessity: to process and fulfil your order. Consent: for sending marketing communications. Legitimate interest: to improve our services and prevent fraud. Legal obligation: to meet tax, accounting, or compliance requirements

How We Share Your Information

We only share your personal data when necessary to operate our business, for example: Payment processors: Stripe, PayPal, Tide. Delivery providers: Royal Mail, courier services. Email marketing platform: As sent by the Ababa team. Website analytics tools: such as Google Analytics. Each of these third parties is bound by GDPR-compliant data processing agreements to keep your information safe.

Data Retention

We keep your personal data only as long as necessary for the purposes set out in this policy: Order records: 6 years (for tax and accounting purposes). Marketing subscriptions: until you unsubscribe. Analytics data: typically retained for up to 26 months. When data is no longer needed, it will be securely deleted or anonymised.

Marketing Communications

You will only receive marketing emails or promotions if you have: Subscribed on our website, orProvided clear consent at checkout or a market stall.You can opt out anytime by clicking “unsubscribe” in an email or contacting us directly at hello@ubeba.co.uk.

Cookies and Website

Tracking Our website uses cookies to: Ensure basic site functionalityImprove browsing experience. Analyse website traffic and usageYou can manage or delete cookies through your browser settings. For more details, see our separate Cookie Policy (if applicable).

Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

The right to access the personal data we hold about you
The right to rectification of inaccurate or incomplete data
The right to erasure (“right to be forgotten”) in certain circumstances
The right to restrict processing of your personal data
The right to data portability, allowing you to obtain and reuse your data
The right to object to processing based on legitimate interests or direct marketing
The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided in this Privacy Policy.

Data Security

We take data protection seriously. Your information is stored securely on encrypted systems and transmitted via SSL (Secure Socket Layer) technology. Access is restricted to authorised personnel only. In the unlikely event of a data breach, we will notify you and the UK Information Commissioner’s Office (ICO) as required.

International Data Transfers

Some of our third-party service providers may be located outside the United Kingdom or European Economic Area (EEA).

Where personal data is transferred internationally, we ensure it is protected by appropriate safeguards, such as:

UK-approved Standard Contractual Clauses, or
Transfers to countries recognised as providing an adequate level of data protection.

These measures ensure your personal data remains secure and protected in accordance with UK GDPR.

Children’s Privacy

Our products and services are intended for customers aged 18 and above. We do not knowingly collect data from individuals under 18 years of age.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in law or business operations.The most recent version will always be available on our website with the “last updated” date clearly shown.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:

Ubeba Limited: Third floor, 3 Hill Street, New Town, Edinburgh, EH2 3JP

📧 Email: hello@ubeba.co.uk

📅 Last Updated: 18.12.2025

Company Registration No: 856028

VAT No: 8202601419