Privacy Policy
Last updated: 17 August 2026
Short version: we collect what we need to send you your order, plus anonymous analytics that show us how the site is used. We do not sell your data. We do not have a mailing list you did not ask to join.
Who we are
undim ("we", "us") operates the website getundim.com. For any question about this policy or your data, contact hello@getundim.com.
What we collect
Information you give us when you order:
- Name
- Shipping and billing address
- Email address
- Phone number, when the carrier requires it for delivery
Payment information. We never see or store your full card details. Payments are processed by Shopify and PayPal, who handle card data under their own security standards. We only receive confirmation that a payment succeeded and the last four digits of the card.
Information collected automatically. Like most websites, our host records basic technical data: IP address, browser type, device type, pages visited and time of visit. This is used to keep the site running and understand what people look at.
How you use the site. We use two analytics tools so we can see what works on this site and what confuses people:
- Vercel Web Analytics counts visitors and page views. It uses no cookies and does not identify you.
- Microsoft Clarity records how visitors move through the page — scrolling, clicks, and mouse movement — and builds heatmaps and anonymised session replays. It sets cookies to recognise a returning session.
Clarity replays show interaction with the page, not your identity. Text you type into form fields is masked before it leaves your browser, and we never see payment details this way because checkout happens on Shopify and PayPal, not here. We use this only to improve the site, never to build a profile of you or to advertise to you.
You can opt out of Clarity entirely by enabling Do Not Track or Global Privacy Control in your browser settings, or by using any standard tracker blocker. We will not treat you differently for doing so.
Language preference. If you switch the site between English and Spanish, that choice is stored in your browser's local storage. It stays on your device, is not sent to us, and you can clear it any time by clearing your browser data.
How we use it
- To process, fulfil and deliver your order
- To send you order confirmation and shipping updates
- To answer you when you email us
- To handle refunds and support requests
- To detect and prevent fraudulent orders
We do not send marketing emails unless you explicitly opt in, and if you do, every message has a one-click unsubscribe link.
Who we share it with
We share the minimum necessary with the services that make the store work:
- Shopify — checkout and order management
- PayPal — payment processing
- Vercel — website hosting and cookieless visitor analytics
- Microsoft Clarity — anonymised heatmaps and session replay, so we can see where the site confuses people. Being a Microsoft product, it also sets Microsoft cookies; see the Cookies section below
- Our fulfillment partner and shipping carriers — your name and address, so the package reaches you
We do not sell, rent or trade your personal information to anyone. We may disclose information if legally required to do so by a valid legal request.
How long we keep it
Order records are retained for as long as needed to handle returns, refunds, disputes and accounting obligations — typically up to 5 years. Support emails are kept for 2 years. You can ask us to delete your data sooner and we will, except where we are legally required to keep a transaction record.
Your rights
Wherever you live, you can email hello@getundim.com to:
- Ask what personal data we hold about you
- Request a copy of it
- Ask us to correct anything inaccurate
- Ask us to delete it
- Object to how we are using it
We respond within 30 days. We will not charge you for this and we will not make it difficult.
If you are in California, the CCPA gives you these rights explicitly, including the right not to be discriminated against for exercising them. We do not sell personal information as defined by the CCPA. If you are in the EEA or UK, the GDPR applies and our legal basis for processing is the performance of your order contract and our legitimate interest in running the store securely.
Cookies
We run no advertising pixels of our own — no Meta pixel, no TikTok pixel, no Google Ads tag — and we do not sell or share your browsing with advertisers.
We should be straight with you about one thing, though. Our analytics tool, Microsoft Clarity, is a Microsoft product, and loading it also sets some Microsoft cookies. One of them, MUID, is an identifier Microsoft can recognise across other sites that use its services. We do not control those cookies, we get no advertising data from them, and we run no Microsoft ad campaigns — but they are set, so you should know.
Here is everything:
| Who | What for | How long |
|---|---|---|
Microsoft Clarity _clck, _clsk | Recognises a browsing session so heatmaps and replays make sense | Up to 1 year |
Microsoft MUID, MR, SRM_B, ANONCHK | Set by Microsoft when Clarity loads. MUID is a Microsoft advertising identifier | Up to 13 months |
| Shopify | Keeps your cart and payment working during checkout | Session and up to 2 years |
Vercel Web Analytics sets no cookies at all. Your language preference is stored in your browser's local storage, not a cookie, and never leaves your device.
How to switch all of this off. If your browser sends Do Not Track or Global Privacy Control, we do not load Clarity at all — no script, no cookies, nothing. That is enforced in our own code, not left to a third party. Any standard tracker blocker works too. You can also clear or block these cookies from your browser settings. None of it affects your ability to browse or buy.
Children
This store is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has given us personal data, email us and we will delete it.
Security
The site is served over HTTPS and payment data is handled entirely by Shopify and PayPal. No method of transmission over the internet is perfectly secure, but we do not store card numbers, and the data we do hold is kept behind the access controls of the platforms above.
Changes to this policy
If we change this policy we will update the date at the top. Material changes affecting how we use your data will be announced on this page.