1. Information You Provide

USM may collect information that customers provide when creating accounts, shopping, purchasing memberships, participating in Rewards, or requesting support.

• Account and contact details: Name, email address, phone number, login/account identifiers, and associated customer preferences.
• Order and delivery details: Billing and shipping addresses, purchased items, quantities, variations, order identifiers, shipping selections, payment status, refund information, and related transaction records.
• Membership information: Vault and TUS Wholesale Club purchase, eligibility, entitlement, and activation records where applicable.
• Rewards information: Saved birthday month/day, qualifying activity records, referral IDs, reward selections, points transactions, and Rewards account information.
• Support and communications: Information supplied in customer-service requests, account corrections, disputes, and related correspondence.

Information collected depends on the features a customer uses. Not every customer supplies or generates every category of information described here.

2. Referral & Rewards Data

When a customer participates in the USM Referral & Rewards program, USM may maintain the following operational records:

• A unique referral identifier and personal referral-share URL.
• Internal account identifiers associated with referring and referred customers.
• Referral codes captured from links, sessions, or ordinary Shopping cart and checkout controls.
• Relevant order identifiers, referred-customer identifiers, qualifying milestone types, point amounts, event keys, timestamps, and protection-hold dates.
• Rewards ledger entries for Available, Pending, Manual Review, Rejected, Void, redemption, restoration, and adjustment transactions.
• Reward merchandise identifiers, variation or colorway selections, inventory validation, and associated fulfillment order records.
• Shipping and applicable tax quotations, monetary payment status, and fulfillment/dispatch review information where relevant to a Rewards order.
• Administrative decisions, documented review reasons, reversals, reconciliation records, and duplicate-event protections.

USM uses these records to calculate points accurately, prevent duplicate spending or awards, track qualifying purchases and referrals, and maintain reliable customer balances.

3. Referral Share Privacy

A customer’s personal referral-share URL includes a USM Referral ID rather than directly publishing the customer’s stored email address, phone number, or account name.

Although the referral identifier is designed to limit disclosure of direct contact information, customers who choose to share their referral links should understand that the link itself can be seen, copied, and forwarded by recipients.

USM uses internal account and order associations to determine legitimate referral attribution. It does not provide a public searchable directory of customer referral identities.

4. Referral Capture Cookies & Sessions

When a visitor follows a valid USM referral link or enters a valid referral code, USM may use a first-party referral cookie and a WooCommerce shopping session to preserve attribution through normal browsing and checkout.

• The referral cookie can retain a valid referral ID for up to 30 days unless removed or cleared earlier.
• The referral implementation uses browser-cookie safeguards including HTTP-only and SameSite settings, with secure transmission on HTTPS requests.
• Customers may update or remove referral attribution through supported Shopping cart or checkout controls before the applicable order attribution is sealed.
• Once attribution is sealed to an order, the ordinary shopping-session referral association is cleared. The order may retain the sealed attribution record for legitimate program, audit, and dispute purposes.
• Browsers and privacy settings may block or remove cookies, which can affect referral attribution.

USM may also use authentication, cart, checkout, session, security, and functional cookies or similar storage mechanisms needed for normal website operation. Additional analytics or other technologies are addressed according to the services actually enabled and applicable disclosure requirements.

5. Self-Referral & Manual Review Signals

USM uses limited identity and transaction comparisons to help prevent self-referrals, duplicate qualifying events, and unauthorized manipulation of Rewards balances.

• Supported checks may compare customer account identifiers and exact billing email or phone information where implemented.
• Referral-award review may compare a referrer’s stored billing street address and postcode with those of a referred order.
• A matching household address and postcode is a Manual Review signal, not an automatic finding of fraud.
• Authorized administrators may review relevant order and referral evidence, approve eligible points, reject or void ineligible awards, and document their decisions.
• Information from such reviews may be retained to explain decisions, prevent duplicated awards, and resolve legitimate disputes.

6. How We Use Rewards Data

USM uses Rewards-related information for the following purposes:

• Issue, calculate, and display eligible points and transaction history.
• Maintain Available, Pending, Manual Review, and other relevant points statuses.
• Determine qualifying referral attribution and protect milestone limits.
• Verify physical-merchandise reward eligibility, points balances, product variations, inventory, and approved redemption tiers.
• Create and administer tracked physical-merchandise reward orders. Although points cover eligible reward merchandise, shipping and applicable taxes may require separate monetary payment.
• Record required checkout, payment, shipping, tax, and dispatch-review information associated with a Rewards order.
• Void, reverse, restore, or reconcile points after cancellation, failure, refund, partial-quantity refund, or another qualifying event.
• Investigate reported errors, suspected abuse, transaction disputes, and security concerns while preserving appropriate audit records.

The current Rewards redemption program is restricted to approved physical merchandise from USM-owned mother-vendor categories. Future games, Vault content, digital products, services, or promotions may have separately approved points-earning rules. Their possible future introduction does not mean that related data collection or tracking features are already active.

7. Ordinary Store, Account & Security Data

In addition to Rewards records, USM may process information reasonably necessary to operate the marketplace, provide customer accounts and purchases, maintain site functionality, prevent abuse, and resolve issues.

• IP addresses, browser or device information, and relevant technical request information.
• Authentication, account-access, session, login/logout, and account-security events.
• Shopping cart and checkout information, product selections, order records, and applicable customer mode or membership context.
• Payment authorization and transaction status, including refund or dispute outcomes.
• Shipping, delivery, membership entitlement, and digital-access events where applicable.
• Security, error, operational, and customer-support records relevant to maintaining the service.

Pages viewed or related usage information may be processed where necessary for enabled site operations or analytics. Any future expanded personalization or recommendation systems should be accompanied by appropriate disclosures and controls when implemented.

8. Service Providers & Information Sharing

USM relies on supporting technology and service providers to operate its marketplace. Depending on the relevant customer activity, these may include WooCommerce, payment processors such as PayPal, hosting and infrastructure providers, performance/CDN services, translation providers, shipping or fulfillment participants, and analytics services where enabled.

USM may provide or make accessible the information reasonably necessary for an applicable provider to perform its function, such as payment processing, order fulfillment, delivery, security, or technical operations. Providers may also operate under their own privacy terms and legal responsibilities.

USM does not sell customer personal data to advertisers for their own marketing use, consistent with the site’s existing stated policy.

USM may disclose information where reasonably necessary to comply with applicable legal obligations, respond to valid legal process, protect the site or its customers, or investigate suspected fraud or security incidents, subject to applicable law.

9. Data Retention & Audit Records

USM retains account, order, membership, referral, Rewards ledger, shipping, payment-status, audit, refund/reversal, dispute, security, and customer-support records as reasonably necessary for legitimate operational and legal purposes.

• Records may be needed to maintain accurate points balances and prevent duplicate awards, redemptions, or reversals.
• Order and accounting information may need to be retained for financial, tax, contractual, or legal obligations.
• Fraud-review and transaction records may be needed to investigate disputes, explain past decisions, and establish or defend legal claims.
• Some records may be retained even after an account-deletion request where retention is permitted or required by applicable law.

Retention periods depend on the type of record, its operational purpose, applicable legal requirements, and legitimate dispute or audit needs.

10. Your Choices, Access & Deletion Requests

Customers may have choices and rights concerning personal information depending on applicable law, the type of information, and the circumstances of a request.

• Use available account tools to review or correct supported account information.
• Use supported cart or checkout referral controls to change or remove unsealed referral attribution.
• Request correction of a saved birthday month/day through USM support when ordinary customer editing is locked.
• Request access to, correction of, or deletion of personal information and exercise other applicable privacy rights where provided by law.
• Contact USM about referral attribution, Rewards ledger discrepancies, or suspected unauthorized account activity.

USM may require reasonable verification before processing a privacy request and may retain certain records where legally required or permitted.

For assistance, visit Contact Us or the Data Deletion page.

11. Policy Updates & Contact

USM may update this Privacy Policy as its services, technology, marketplace operations, Rewards program, or applicable legal obligations evolve. Material changes should be reflected in the current published policy and related customer disclosures as appropriate.

For privacy questions or requests, contact admin@urbanstripmall.shop or use the site’s Contact Us page.