Privacy Policy

Last updated November 11, 2026

This Privacy Policy explains how MONOTY LLC, called "UMBER", "we", "us" or "our" in this Policy, collects, uses and shares personal information when you visit this website, buy from us or write to us. It also explains your choices and your rights, including your rights under US state privacy laws, and it serves as our notice at collection under California law. How we handle consumer health data is explained in more detail in our Consumer Health Data policy, which is part of this Policy.

The shop does not take orders yet. Until online payment opens, our checkout page collects no personal or payment information, and no order can be paid. Today, the only personal information we receive is the technical information any website receives and what you choose to send us by e-mail. The rest of this Policy also describes what will happen once ordering opens.

Summary

• We collect only what we need to sell and deliver your order and to answer you: your name, e-mail address, shipping and billing address, a phone number if you choose to give one for delivery, your order details, your confirmation that you are 18 or older, and your messages.
• We sell dietary supplements. What you buy from us, and anything you tell us about a reaction, a medication or a condition, can reveal something about your health. We handle it as consumer health data: we use it only to sell, deliver and look after your order and to answer you, we share the contents of your orders only with the companies that take your payment and deliver your order, a reaction report only with the maker and the FDA when needed, and we never use any of it for advertising.
• Card details go straight to a third-party payment processor. We never see or store your full card number.
• Your cart is kept in your browser's local storage, on your device.
• We use no analytics, no advertising cookies, no tracking pixels and no scripts from other companies. See our Cookie Policy.
• We do not sell your personal information, and we do not share it for targeted advertising.
• We have no app, no customer accounts and no newsletter.
• You can ask to access, correct, delete or receive a copy of your information, or to opt out, by e-mailing contact@umberdrops.com. We honor Global Privacy Control.

Who is responsible for your information

Responsible for your information: MONOTY LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, United States. Its details are on our Seller Information page. E-mail: contact@umberdrops.com.

Notice at collection

This short notice tells you, at or before the point of collection, what we collect and why. The details follow in the rest of this Policy.

Information we collect

When you visit the website

When your browser requests a page, our hosting provider's servers automatically receive technical information: your IP address, browser type and version, device type, the page requested, the referring page, and the date and time. A general location, such as your country, state or city, can be inferred from your IP address. We do not collect precise geolocation, and we do not link these logs to your name or your orders.

Your cart is kept in your browser's local storage. It stays on your device and is used only to show your cart and, when you go to checkout, to prepare your order. See our Cookie Policy.

When you place an order

• Contact and delivery details: your name, e-mail address, shipping address, billing address, and a phone number if you choose to give one for delivery.
• Order details: the products you buy, quantities, prices, sales tax, and order and delivery dates.
• Age confirmation: your confirmation at checkout that you are 18 or older. We do not ask for your date of birth or an ID document.
• Payment information: collected and processed directly by the third-party payment processor, which receives your card details on its own secure form. We receive only a few details, such as the type of payment method, the card's final four digits and its expiration date, the billing address and whether the payment went through.

When you e-mail us

Your name, your e-mail address, what you write to us and anything you attach, such as an order number, a delivery address, or photos of a damaged product.

When you report a reaction or a safety concern

If you tell us about a reaction or a problem with one of our products, we receive what you choose to send: the product, its lot number, what happened and when, and anything you tell us about your health, such as other supplements or medicines you take. We use it only to answer you, handle your report, keep the adverse event records that federal law requires for dietary supplements, and meet our legal duties, which can include reporting a serious adverse event to the FDA. When we can, we pass a report on to the maker or the FDA with as little personal detail as the report allows. We never sell it, and we never use it for marketing.

From other sources

• The payment processor: confirmation that your payment went through, refund status, the outcome of fraud screening and, if you dispute a charge, the details of the dispute.
• Our warehouse partner and carriers: shipping and delivery status, and address corrections.
• Someone who orders for you: if another adult sends you an order, they give us your name and delivery address.

What we do not ask for

We do not ask for Social Security numbers, government ID numbers, your date of birth, biometric data or precise location, and we never ask about your health to sell you a product. If you choose to tell us something about your health, for example a medication when you ask a question, we use it only to answer you and handle your request, and we delete it on request unless the law requires us to keep it. There are no customer accounts on our website, so there is no password to keep.

How we use your information

• To process, ship and deliver your order, including customs clearance for imported products.
• To take payment, issue refunds, answer card disputes, and detect and stop fraud.
• To sell to adults only, as described in our Terms of Sale.
• To send you e-mails about your order: confirmation, shipping and tracking, delay notices, returns and refunds.
• To answer your questions and handle cancellations, returns, claims for damaged or wrong products, reaction reports, requests for quality documents and privacy requests.
• To contact you about a recall or a safety notice, if one ever concerns a product you bought.
• To run, secure and fix the website.
• To keep business, tax, accounting and adverse event records and to comply with the law.
• To assert our rights and enforce our Terms of Sale.

We do not send marketing e-mails. If we ever start, only people who asked for them will receive them, and every message will include an unsubscribe link. We do not use your information for automated decisions that have legal or similarly significant consequences for you, and we do not build profiles about you.

Why we are allowed to use it

In plain words, we use your information only when one of these reasons applies:

• Your order: we need it to do what you asked, that is, to sell, ship and deliver your order, handle a return or answer your message.
• The law: we must keep tax, accounting and adverse event records, report to authorities when the law requires it, and answer lawful requests from authorities.
• Running a sound business: we have a legitimate need to secure the website, detect fraud and assert our rights, and we do so in ways you would reasonably expect, without overriding your interests.
• Your consent: when you choose to send us photos or details about your health, or if you ever ask for marketing e-mails. You can withdraw your consent at any time by e-mailing us.

Who we share information with

We share personal information only with the recipients below, and only as needed for the purposes above. Service providers act on our behalf, under contracts or terms that restrict how they may use it.

• Payment: once online payment opens, a third-party payment processor, which receives your card details directly, processes your payment and screens it for fraud. It handles your card details under its own privacy notice, which is linked from its payment form. If you pay with a digital wallet, the company behind that wallet also handles your payment under its own terms.
• Delivery: our partner warehouse overseas, the carriers and the customs brokers, which receive your name, shipping address, phone number if given and the order contents, to prepare, import and deliver your order.
• Hosting: our website hosting provider, a company based in the United States, which delivers our pages and receives the technical information described above.
• E-mail: our e-mail provider, which stores and delivers the e-mails we exchange with you.
• Order handling: the people who help us run the shop, answer your messages and handle your orders, under a duty of confidentiality. They may work from outside the United States.
• The maker of a product, only when you report a reaction or a problem with a batch, so it can be looked into, with as little personal detail as possible.
• Advisers: our accountants and lawyers, when needed.
• Customs and tax authorities, when needed to import and deliver your order or to meet our tax obligations.
• The U.S. Food and Drug Administration, when the law requires us to report a serious adverse event or a safety matter.
• Law enforcement, courts and regulators, when the law requires it or when needed for the rights, property or safety of our customers, our business or others.
• A buyer or successor of our business, if we are involved in a merger, acquisition or reorganization. Your information would remain covered by this Policy.
• Anyone else, with your consent or at your direction.

Consumer health data follows stricter rules, explained in our Consumer Health Data policy.

Where your information is processed

This website is meant for customers in the United States, and our hosting provider is based in the United States. The people who handle your orders and messages, our e-mail provider and our warehouse partner may access or store your information from outside the United States, where privacy laws may differ. The carriers and customs brokers that move your package also see your shipping details on the way. We share only what is needed, and we require the people and partners who work for us to use it for nothing else.

We do not sell your information or use it for advertising

We do not sell personal information, and we do not share it for cross-context behavioral advertising (targeted advertising). We have not done so in the past 12 months. We do not sell or share the personal information of anyone under 18. If this ever changes, we will update this Policy before it happens, ask for your consent where the law requires it, and give you a clear way to opt out. Consumer health data is never sold.

No analytics and no tracking pixels

We use no analytics or audience measurement tools, no advertising or social media pixels, no session recording and no browser fingerprinting. Our fonts and images are served from our own website, and our pages load no scripts from other companies. No other company can follow what you do on our website, or which products you look at, or what you do across other websites, through our pages. Once online payment opens, card details are entered on the secure payment form of the payment processor, which may use its own strictly necessary cookies to process the payment and detect fraud. If we ever want to add analytics or advertising tools, we will update this Policy and our Cookie Policy before they are switched on, and give you the choices the law requires, including a way to opt out of targeted advertising.

Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) signal. If your browser sends it, we take it as a valid request to opt out of the selling or sharing of your personal information, targeted advertising and profiling, for that browser and for any information we can link to it. Since we do none of these today, nothing else changes for you, but the signal will be respected if our practices ever change. Because we do not track you across websites, our website runs the same whether or not your browser sends a "Do Not Track" signal.

How long we keep information

When we no longer need information, we delete it or make it anonymous.

How we keep information secure

We use reasonable administrative, technical and physical safeguards suited to the information we hold. The website is served over an encrypted HTTPS connection, card payments are handled by a payment processor that complies with the Payment Card Industry Data Security Standard (PCI DSS), and access to customer information, consumer health data above all, is restricted to the people who need it. No website or e-mail service is completely secure. If a security breach affects your personal information, we will notify you as the law requires.

Children and teens

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13, in line with COPPA, the federal law on children's privacy online. You must be at least 18 years old to place an order, and we do not knowingly sell to anyone younger. If you believe a child or a teen has given us personal information, please e-mail us and we will delete it.

Consumer health data

Some US state laws, such as Washington's My Health My Data Act and Nevada's consumer health data law (Senate Bill 370), cover information that could identify a person's physical or mental health, including information inferred from what they buy. Buying a dietary supplement can reveal an interest in your health, so we handle the contents of every order, and anything you tell us about your health, as consumer health data. We collect it only as needed to provide what you ask for, we share the contents of your orders only with the companies that take your payment and deliver your order, we never sell it, and we never use it for advertising. Our Consumer Health Data policy explains what we collect, why, who receives it, and how to use your rights.

Your US state privacy rights

Residents of California (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and other states with similar laws have rights over their personal information. Some of these laws only apply to businesses above certain size thresholds. To keep things simple and fair, we honor the requests below from every US resident, subject to the exceptions the law allows.

Your rights

• Right to know and access: to confirm whether we process your personal information, and to know the categories and specific pieces of personal information we hold about you, where it came from, why we use it and the categories of recipients we disclose it to. Where your state's law provides for it, you can also ask for the list of specific third parties to which we have disclosed it.
• Right to delete: to ask us to delete the personal information we collected from or about you. We may keep what the law requires us to keep, such as tax records and adverse event records, or what we need to complete your order, handle a return or a claim, or detect fraud. If so, we will tell you.
• Right to correct: to ask us to correct inaccurate personal information.
• Right to portability: to receive your personal information in a portable and readily usable format.
• Right to opt out: of the selling of your personal information, its sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant consequences. We do none of these today. You can still send us an opt-out request, and we honor Global Privacy Control.
• Sensitive personal information: the contents of your orders and anything you tell us about your health are sensitive personal information under several state laws. We collect it only as needed to provide what you asked for and to meet our legal duties, which these laws allow without a separate consent, and we never use it for advertising, profiling or to infer anything about you, so there is nothing to limit. If we ever wanted to use it for anything else, we would first ask for your separate consent, and you could withdraw it at any time. More in our Consumer Health Data policy.
• Right to appeal: to appeal our decision if we decline your request, as described below.
• No discrimination: we will not deny you products, charge you a different price or give you a different level of service because you used any of these rights.

How to make a request

E-mail contact@umberdrops.com with the subject line "Privacy request". Tell us which right you want to use and your state of residence, and include the e-mail address you used with us and, if you have one, an order number. There is no charge, unless a request is manifestly unfounded or excessive and the law allows a fee.

How we verify your request

To keep your information safe, we verify each request before acting on it, usually by matching the details you give us with our records and confirming by e-mail from the address you used with us. For requests for specific pieces of information or for deletion, we may ask for one more detail from a past order, such as its date or the items in it. We use the information you give us for verification only to handle your request. Opt-out requests do not need to be verified.

Authorized agents

You can use an authorized agent to make a request for you. The agent must give us your signed written permission or a valid power of attorney. Unless the agent holds a power of attorney, we may also ask you to verify your identity directly with us and to confirm that you gave the agent permission.

Response times

We confirm receipt of your request within 10 business days and respond within 45 calendar days. If we need more time, we may take up to 45 more days, once, and we will tell you why within the first 45 days. We act on opt-out requests as soon as possible, and within 15 business days at the latest.

Appeals

If we decline your request, in whole or in part, we will explain why. You can appeal by replying to our answer or by e-mailing contact@umberdrops.com with the subject line "Privacy appeal". We will respond in writing within 45 days, explaining what we decided and why. If we deny your appeal, we will tell you how to contact the Attorney General of your state.

Categories of personal information (California disclosures)

We collect the categories below from you, from your browser and from the other sources described above, for the purposes described in this Policy. We disclose each category for business purposes only to the recipients shown. We have not sold or shared any category in the past 12 months, and we do not sell or share any.

We do not collect biometric information, precise geolocation, employment information, education information, or inferences drawn to create a profile about you.

Other state notices

• California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.
• California financial incentives: our prices are the same for everyone, and we do not provide any financial incentive, or any difference in price or service, in exchange for personal information.
• Nevada: we do not sell covered information as defined by Nevada law. You can still send us an opt-out request by e-mail.
• Washington, Nevada and other consumer health data laws: see our Consumer Health Data policy.

Changes to this Policy

We will post any change to this Policy on this page and update its "last updated" date. Before we add any analytics or advertising tool, we will update this Policy. If a change materially alters how we use information we already hold, we will tell you by e-mail or with a notice on the website before it takes effect, and ask for your consent where the law requires it.

Contact us

For any question or request about your personal information, e-mail contact@umberdrops.com. We reply within 2 business days, and we handle formal privacy requests within the times given above. Our mailing address, for letters and legal notices, is 30 N Gould St Ste R, Sheridan, WY 82801, United States, also on our Seller Information page.