PRIVACY POLICY - 

Last Updated: September 9, 2025

Company Information:

• Company Name: NoCap Pay Limited 
• Address: 50 Bonham Strand, Sheung Wan, Hong Kong
• Website: https://ummashield.com/
• Email: contact@ummashield.com

1. INTRODUCTION

This Privacy Policy describes how Umma Shield ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website or make purchases from our Shopify-powered online store.

By using our services, you consent to the collection and use of information in accordance with this Privacy Policy.

2. INFORMATION WE COLLECT

Personal Information You Provide

When you create an account, make a purchase, or contact us, we may collect:

Account Information:

• Full name
• Email address
• Phone number
• Password (encrypted)

Billing and Shipping Information:

• Billing address
• Shipping address
• Payment method information (processed securely by Shopify Payments and third-party payment processors)

Order Information:

• Products purchased
• Order history
• Purchase dates and amounts
• Shipping preferences

Communication Information:

• Customer service inquiries
• Product reviews and feedback
• Newsletter subscriptions
• Marketing preferences

Information Collected Automatically

When you visit our website, we automatically collect:

Device and Browser Information:

• IP address
• Browser type and version
• Operating system
• Device type (mobile, desktop, tablet)
• Screen resolution

Website Usage Information:

• Pages visited
• Time spent on pages
• Click patterns and navigation paths
• Referring websites
• Search terms used to find our site

Shopify Analytics:

• Shopping behavior
• Cart abandonment data
• Conversion tracking
• Performance metrics

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your login information
• Keep items in your shopping cart
• Analyze website performance
• Provide personalized experiences
• Enable social media features
• Support marketing campaigns

3. HOW WE USE YOUR INFORMATION

Order Fulfillment

• Processing and fulfilling your orders
• Sending order confirmations and shipping updates
• Handling returns and refunds
• Providing customer support

Account Management

• Creating and managing your account
• Authenticating your identity
• Resetting passwords
• Maintaining order history

Communication

• Responding to inquiries and support requests
• Sending transactional emails (order updates, shipping notifications)
• Providing important account or policy updates
• Newsletter and promotional communications (with consent)

Business Operations

• Analyzing website performance and user behavior
• Improving our products and services
• Preventing fraud and maintaining security
• Complying with legal obligations
• Conducting market research

Marketing and Advertising

• Personalizing your shopping experience
• Sending promotional offers and product recommendations
• Retargeting advertisements on other websites
• Social media marketing campaigns
• Analyzing marketing effectiveness

4. INFORMATION SHARING AND DISCLOSURE

Shopify Platform

Our store is hosted by Shopify Inc. Shopify provides us with the e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify's data storage, databases and general applications.

Third-Party Service Providers

We share information with trusted third parties who help us operate our business:

Payment Processors:

• Shopify Payments, PayPal, Stripe, or other payment gateways
• Information shared: billing details, payment information

Shipping Partners:

• Postal services and courier companies
• Information shared: shipping address, contact information, order details

Analytics and Marketing:

• Google Analytics, Facebook Pixel, or similar services
• Information shared: website usage data, demographics (anonymized when possible)

Email Marketing:

• Mailchimp, Klaviyo, or similar platforms
• Information shared: email address, purchase history, preferences

Customer Service:

• Live chat providers, help desk software
• Information shared: contact information, inquiry details

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our Terms of Service
• Protect the rights and safety of others

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. You will be notified of any such change.

5. DATA RETENTION

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal obligations
• Resolve disputes and enforce our agreements

Specific Retention Periods:

• Account Information: Until account deletion or 7 years after last activity
• Order Information: 7 years for tax and legal compliance
• Marketing Data: Until unsubscribed plus 2 years
• Website Analytics: Up to 26 months (Google Analytics default)
• Customer Service Records: 3 years after last contact

6. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information:

Security Measures:

• SSL encryption for data transmission
• Secure hosting with Shopify's infrastructure
• Regular security updates and monitoring
• Access controls and authentication
• Staff training on data protection

Payment Security:

• PCI DSS compliant payment processing
• No storage of credit card information on our servers
• Tokenization of payment data
• Fraud detection systems

Please Note: No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. YOUR RIGHTS AND CHOICES

Access and Control

You have the right to:

• Access your personal information
• Update or correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Restrict or object to certain processing activities

Marketing Communications

You can control marketing communications by:

• Unsubscribing from email lists using the unsubscribe link
• Updating your email preferences in your account settings
• Contacting us directly to opt-out
• Adjusting cookie preferences in your browser

Cookie Management

You can manage cookies through:

• Browser settings to block or delete cookies
• Third-party opt-out tools for advertising cookies
• Our cookie preference center (where available)

Note: Disabling certain cookies may affect website functionality.

8. INTERNATIONAL DATA TRANSFERS

Hong Kong Operations: Our business is based in Hong Kong. Your information may be transferred to, and processed in, Hong Kong and other countries where our service providers operate.

Shopify Hosting: Shopify may store your data in various global data centers. Shopify is committed to protecting your privacy and complies with applicable data protection laws.

Cross-Border Transfers: When transferring data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Privacy frameworks and certifications

9. CHILDREN'S PRIVACY

Our services are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. THIRD-PARTY LINKS AND SERVICES

Our website may contain links to third-party websites or integrate with third-party services (such as social media platforms). This Privacy Policy does not apply to those third-party services.

We encourage you to read the privacy policies of any third-party services you use.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws.

When We Update:

• We will post the new Privacy Policy on this page
• We will update the "Last Updated" date
• For material changes, we will notify you by email or website notice
• Continued use of our services constitutes acceptance of the updated policy

12. DATA PROTECTION OFFICER

For privacy-related inquiries, you can contact our Data Protection Officer:

Contact Information:

• Email: privacy@ummashield.com (or your designated email)
• Address: 50 Bonham Strand, Sheung Wan, Hong Kong
• Response Time: We aim to respond within 30 days

13. REGIONAL PRIVACY RIGHTS

European Union (GDPR)

If you are in the EU, you have additional rights under GDPR:

• Right to be informed about data processing
• Right of access to your data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

California (CCPA)

If you are a California resident, you have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising your rights

Other Jurisdictions

We respect the privacy rights established by applicable laws in your jurisdiction. Contact us for information about your specific rights.

14. CONTACT INFORMATION

For questions about this Privacy Policy or our privacy practices:

Umma Shield Privacy Team

• Email: contact@ummashield.com
• Phone: [Your Phone Number]
• Address: 50 Bonham Strand, Sheung Wan, Hong Kong
• Business Hours: [Your Business Hours]

Shopify Privacy Information: For information about Shopify's privacy practices, visit: https://www.shopify.com/legal/privacy

IMPORTANT NOTICE: This Privacy Policy is designed to be transparent about our data practices and comply with applicable privacy laws. By using our services, you acknowledge that you have read and understood how we collect, use, and protect your personal information.