Privacy Policy

Overview

This Privacy Policy explains how The Universal Things (“we”, “us”, or “our”) collects, uses, and shares information when you use our websites, apps, and services (collectively, the “Services”).

By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

Data we collect

We collect information in three ways: provided by you, collected automatically, and from third parties.

• Account & profile: name, company, role, email, phone, password (hashed), preferences.
• Business content: listings, messages, files you upload, reviews, and transaction metadata.
• Usage data: pages viewed, features used, clicks, session duration, referring URLs.
• Device & log: IP address, browser type, OS, language, timestamps, crash logs.
• Cookies/SDK signals: analytics, authentication, personalization, and fraud prevention.
• Third-party sources: identity verification providers, payment processors, marketing partners, and public records.

How we use data

We use information to operate, improve, and secure the Services, including:

• Account creation, authentication, and user support.
• Facilitating listings, matches, and transactions between buyers and suppliers.
• Personalizing content and recommendations (including AI-powered features).
• Analytics, monitoring, and product improvement.
• Communications: service updates, transactional notices, and—if opted in—marketing.
• Fraud prevention, abuse detection, security, and legal compliance.

Legal bases (GDPR)

If you are in the EEA/UK, we process personal data under these legal bases:

• Performance of a contract: to provide and maintain the Services.
• Legitimate interests: to secure and improve the Services, prevent fraud, and grow our business (balanced against your rights).
• Consent: where required (e.g., certain marketing or cookies). You can withdraw at any time.
• Legal obligation: to meet regulatory or law-enforcement requirements.

Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember preferences, analyze usage, and personalize experiences.

You can adjust cookie settings in your browser or device. Some features may not function without required cookies.

• Strictly necessary: authentication, fraud prevention, security.
• Preference: language, layout, saved filters.
• Analytics: usage, performance, crash reports.
• Advertising (if enabled): measurement and personalization.

Sharing & disclosure

We do not sell personal information. We share information in these situations:

• With service providers acting on our behalf (hosting, analytics, support, payments, verification).
• With other users/companies as part of marketplace functionality (e.g., when you contact or transact with a supplier).
• For legal reasons: to comply with law, enforce terms, or protect rights, safety, and security.
• In a business transfer: merger, acquisition, financing, or sale of assets (with appropriate safeguards).

Data retention

We keep information only as long as necessary for the purposes described, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context.

Security

We use administrative, technical, and organizational measures to protect information (e.g., encryption in transit, access controls, monitoring). No method is 100% secure; we encourage you to use strong, unique passwords and enable available safeguards.

International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect cross-border transfers.

Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your data, as well as to object to certain processing and withdraw consent.

To exercise rights or make a complaint, contact us using the details below. You may also lodge a complaint with your local data protection authority.

Children’s privacy

Our Services are not directed to children under 13 (or the age required by local law). We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will take appropriate action.

Changes to this policy

We may update this policy to reflect changes in technology, law, or our Services. Material changes will be notified via the Services or by email where appropriate. The “Last updated” date indicates the latest revision.

Contact us

Email: privacy@yourdomain.com

Address: 123 Business Street, City, Country