SUMURI Privacy Policy
Last updated: June 18, 2026
Your privacy is important to us. This Privacy Policy explains what information SUMURI ("SUMURI," "we," "us," or "our") collects through https://sumuri.com (the "Website"), how we use it, who we share it with, and the choices and rights you have. It applies only to information we collect through the Website.
Information We Collect
We collect the following categories of information:
- Information you provide directly — when you create an account, sign up for our newsletter, contact us, use live chat, or place an order, you may provide your name, email address, phone number, billing and shipping address, and the contents of your messages.
- Payment information — when you make a purchase, your payment card details are collected and processed directly by our payment providers. Card numbers are not stored on our servers.
- Information collected automatically — like most websites, we automatically collect technical information such as your IP address, browser type, device and operating system, referring website, pages viewed, and the date and time of your visit, using cookies and similar technologies.
How We Use Your Information
We use personal information to:
- Operate, maintain, and improve the Website.
- Process and fulfill orders and respond to your requests.
- Provide customer support, including live chat.
- Send administrative messages and, where permitted, marketing communications.
- Understand how visitors use the Website.
- Comply with our legal obligations.
Service Providers and Third Parties
To operate the Website and serve you, we use trusted third-party service providers that may process limited information such as your IP address, device and browser details, and pages viewed:
- Google Analytics — to measure website traffic and usage.
- Zoho SalesIQ — to provide live chat and visitor support. If you use our chat, your messages and related details are processed by Zoho on our behalf.
- Zoho Campaigns — to manage our email newsletter and signups.
- Zoho Desk — to manage and respond to customer support requests.
- Stripe, Amazon Pay, and Klarna — to process payments securely. Your card details are handled by these providers and are not stored on our servers.
- Amazon Web Services (AWS) — to host the Website and store data securely.
We maintain data processing agreements with these providers where applicable, and they may use your information only to provide services to us. We do not sell your personal information. If you are a California resident, you can opt out of any “sharing” of personal information for cross- context behavioral advertising using the “Your Privacy Choices” link or GPC, as described below.
Live Chat
Our live chat is provided by Zoho SalesIQ. Conversations may be recorded and stored so that we can respond to and support you. Please do not share sensitive personal information through chat.
Email Marketing
From time to time we may contact you by email to share news, updates, and promotional information about our products and services. We only send marketing emails to people who have purchased from us or asked about our products or services, and who were given a clear opportunity to opt out at the point of collection. Every marketing email includes a working unsubscribe link, and we promptly honor all unsubscribe requests and maintain a suppression list. Our email marketing practices are consistent with the UK Privacy and Electronic Communications Regulations 2003 (PECR) “soft opt-in.” You can unsubscribe at any time using the link in any email or by contacting us at hello@sumuri.com.
Your Privacy Rights
To exercise any of the rights below, contact us at hello@sumuri.com or use the “Your Privacy Choices” link on our Website. We will not discriminate against you for exercising your rights.
California Residents (CCPA/CPRA)
You have the right to know what personal information we collect, to request that we delete or correct it, and to opt out of the sale or sharing of your personal information. We do not sell your personal information. You may opt out of “sharing” for cross-context behavioral advertising using the “Your Privacy Choices” link or by enabling Global Privacy Control (GPC) in your browser.
UK and EU Residents (UK GDPR / GDPR)
You have the right to access, correct, delete, restrict, or object to our processing of your personal information, and to request a copy of your data. Our lawful bases for processing are your consent (for non-essential cookies and marketing), the performance of our contract with you (to fulfill orders and provide services), and our legitimate interests (to operate and improve the Website). You also have the right to lodge a complaint with your local data protection authority.
Data Retention
We keep personal information only as long as necessary for the purposes described in this policy or as required by law. As general guidance:
- Order and transaction records: approximately seven years to meet tax and accounting obligations.
- Live chat transcripts: up to 24 months.
- Marketing contacts: until you unsubscribe.
- Website analytics data: up to 14 months per our analytics provider's settings.
International Transfers
We are based in the United States and process information there, including on AWS infrastructure. If you access the Website from outside the United States, your information will be transferred to and processed in the United States. Where required by law, we apply appropriate safeguards for these transfers.
Security
We protect data using encryption in transit (HTTPS, TLS 1.2/1.3) and at rest (AES-256 via AWS Key Management Service), role-based access controls with multi-factor authentication, and regular security patching of our infrastructure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Children's Privacy
The Website is intended for businesses and professional users and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
Links to Other Sites
The Website may contain links to sites we do not operate. We are not responsible for the content or privacy practices of those sites, and we encourage you to review their policies.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above. We recommend reviewing this policy periodically.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
40 South Main Street, P.O. Box 121
Magnolia, Delaware 19962, USA
Phone: +1 302-570-0015
Email: hello@sumuri.com
Welcome to our Privacy Policy
SUMURI is located at:
40 South Main Street
P.O Box 121
Magnolia, Delaware 19962 USA
13025700015
It is SUMURI’s policy to respect your privacy regarding any information we may collect while operating our website. This Privacy Policy applies to https://sumuri.com (hereinafter, “us”, “we”, or “https://sumuri.com”). We respect your privacy and are committed to protecting personally identifiable information you may provide us through the Website. We have adopted this privacy policy (“Privacy Policy”) to explain what information may be collected on our Website, how we use this information, and under what circumstances we may disclose the information to third parties. This Privacy Policy applies only to information we collect through the Website and does not apply to our collection of information from other sources.
This Privacy Policy, together with the Terms and conditions posted on our Website, set forth the general rules and policies governing your use of our Website. Depending on your activities when visiting our Website, you may be required to agree to additional terms and conditions.
Website Visitors
Like most website operators, SUMURI collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. SUMURI’s purpose in collecting non-personally identifying information is to better understand how SUMURI’s visitors use its website. From time to time, SUMURI may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.
SUMURI also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on https://sumuri.com blog posts. SUMURI only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below.
Gathering of Personally-Identifying Information
Certain visitors to SUMURI’s websites choose to interact with SUMURI in ways that require SUMURI to gather personally identifying information. The amount and type of information that SUMURI gathers depends on the nature of the interaction. For example, we ask visitors who sign up for a blog at https://sumuri.com to provide a username and email address.
Security
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
We take the following steps to protect your data:
- Cloud infrastructure security: Your data is stored on AWS EC2 infrastructure, which uses the AWS Nitro System to enforce strong physical and logical security boundaries. No AWS employee can access your data without our explicit authorisation
- Encryption at rest: All data stored on our servers is encrypted at rest using AES-256 encryption via AWS Key Management Service (KMS)
- Encryption in transit: All data transmitted to and from our website is protected using HTTPS (TLS 1.2/1.3)
- Access controls: Access to our systems is restricted to authorised SUMURI personnel only, using role-based access controls and multi-factor authentication
- Patching: Regular security patches are applied to our server infrastructure and website software
Links To External Sites
Our Service may contain links to external sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy and terms and conditions of every site you visit.
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites, products or services.
Aggregated Statistics
SUMURI may collect statistics about the behavior of visitors to its website. SUMURI may display this information publicly or provide it to others. However, SUMURI does not disclose your personally-identifying information.
Cookies
To enrich and perfect your online experience, SUMURI uses “Cookies”, similar technologies and services provided by others to display personalized content, appropriate advertising and store your preferences on your computer.
A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. SUMURI uses cookies to help SUMURI identify and track visitors, their usage of https://sumuri.com, and their website access preferences. SUMURI visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using SUMURI’s websites, with the drawback that certain features of SUMURI’s websites may not function properly without the aid of cookies.
By continuing to navigate our website without changing your cookie settings, you hereby acknowledge and agree to SUMURI’s use of cookies.
E-commerce
Those who engage in transactions with SUMURI – by purchasing SUMURI’s services or products – are asked to provide additional information, including as necessary the personal and financial information required to process those transactions. In each case, SUMURI collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with SUMURI. SUMURI does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
Email Marketing
From time to time, SUMURI may contact you by email to share news, updates, and promotional information about our products and services. We only send marketing emails to existing customers who have purchased or enquired about our products or services through https://sumuri.com, and who were informed of this possibility at the point of purchase.
Our email marketing practices comply with the UK Privacy and Electronic Communications Regulations 2003 (PECR) under the ‘soft opt-in’ exemption (Regulation 22(3)). This means:
- We only send promotional emails about our own products and services — similar to those you have previously purchased or enquired about
- You were given a clear opportunity to opt out of marketing communications at the point of purchase on our website
- Every marketing email we send includes a clear, working unsubscribe link
- We honour all unsubscribe requests promptly and do not contact opted-out individuals for marketing purposes
- We maintain a suppression list of individuals who have opted out, to ensure they are not contacted again
If you no longer wish to receive marketing communications from us, you can unsubscribe at any time by clicking the unsubscribe link in any of our emails, or by contacting us directly at hello@sumuri.com.
Privacy Policy Changes
Although most changes are likely to be minor, SUMURI may change its Privacy Policy from time to time, and in SUMURI’s sole discretion. SUMURI encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.