Privacy Policy
Last Updated: July 27, 2026
At Sumi & Stamp (“we,” “us,” or “our”), accessible from https://sumiandstamp.com, we respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data in accordance with Bermuda’s Personal Information Protection Act (PIPA).
1. Information We Collect & Sources
We collect personal information directly from you when you visit our website, set up an account, or place an order:
- Contact & Delivery Details: Name, billing address, shipping address, email address, and telephone number.
- Payment Data: Payment transactions are securely processed via third-party payment gateways (e.g., Stripe, PayPal). We do not store or host complete payment card numbers on our local servers.
- Account & Order Records: Usernames, order histories, and customer notes or inquiry details.
- Technical & Browsing Data: IP address, browser type, device details, and site interaction data gathered via essential cookies.
2. Conditions for Use (Legal Basis)
Under PIPA, we only collect and use your personal information where a valid legal condition applies:
- Performance of a Contract: Fulfilling and shipping your orders, managing account registrations, and providing customer support.
- Consent: Sending promotional updates, newsletters, or marketing communications (which you may withdraw at any time).
- Legal Compliance & Security: Meeting accounting/tax obligations and protecting our store against fraudulent activities.
3. Overseas Data Transfers
Sumi & Stamp operates out of Bermuda. To provide seamless e-commerce services, your personal information may be transferred to, hosted, or processed by trusted service providers located outside Bermuda (including the United States and Canada) for web hosting, cloud infrastructure, analytics, and payment processing.
We ensure that all overseas third-party service providers maintain security safeguards and technical protections comparable to the requirements of PIPA.
4. Third-Party Sharing & Cookies
We do not sell, trade, or rent your personal information to third parties. We only share necessary data with essential service partners (e.g., shipping carriers, payment processors, web hosts) required to run the shop.
We use essential session cookies to remember your shopping cart contents and login status. You may disable cookies in your browser settings, though doing so may impact checkout functionality.
5. Retention of Personal Information
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, resolve disputes, or satisfy legal, regulatory, tax, or accounting requirements. Inactive customer account data and historical sales records are periodically reviewed and securely archived or deleted.
6. Your Rights Under PIPA
Under PIPA, you hold specific rights regarding your personal information:
- Access: The right to request access to the personal information we hold about you.
- Correction: The right to request correction or updating of inaccurate or incomplete information.
- Erasure / Blocking: The right to request that we block, erase, or destroy your personal data under certain statutory circumstances.
- Withdraw Consent: The right to withdraw consent for marketing or optional processing at any time.
7. Contacting Us & Privacy Officer
If you have questions about this policy, wish to exercise your privacy rights, or need to contact our designated Privacy Officer, please reach out to us at:
- Privacy Officer Contact: hello@sumiandstamp.com
- Mailing Address: Sumi & Stamp, Bermuda
- Website: https://sumiandstamp.com
Independent Regulatory Authority
If you are unsatisfied with our response or believe your personal data is not being processed in compliance with PIPA, you have the right to lodge a complaint directly with the Office of the Privacy Commissioner for Bermuda (PrivCom) at https://www.privacy.bm.