Privacy Policy

Effective date: July 5, 2026 · Last updated: July 5, 2026

This Privacy Policy explains how Umibites ("we," "us," or "our") collects, uses, discloses, and protects personal information when you visit www.umibites.com (the "Site") or join a first-batch list for our imported Japanese snack drops. It also serves as our notice at collection under California law. By using the Site, you acknowledge this Policy.

1. Personal information we collect

In the past 12 months we may collect the following categories of personal information, as those categories are defined under the California Consumer Privacy Act (CCPA), as amended by the CPRA:

We do not intentionally collect Social Security or government ID numbers, financial account or payment card numbers, precise geolocation, biometric information, health information, or other sensitive personal information as defined by the CPRA. We also do not knowingly collect information from anyone under 18 (see Section 9).

2. How we use personal information

We use the personal information above for the following business and commercial purposes:

• Operating first-batch lists and notifying you when checkout opens.
• Responding to your questions and providing customer support.
• Understanding demand and improving our products, Site, and marketing.
• Measuring and, if enabled, delivering advertising (see Sections 3 and 5).
• Maintaining security, preventing fraud, and complying with legal obligations.

3. Cookies, analytics & online tracking

We and our providers may use cookies and similar technologies to operate the Site and understand usage. We may use Google Analytics and the Meta (Facebook) Pixel to measure traffic and marketing performance and, if enabled, to deliver advertising. These providers may set their own cookies and, as third parties, may collect information about your activity on the Site and over time and across other websites and services (i.e., third-party behavioral tracking).

Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. There is no common industry standard for interpreting DNT, and the Site does not currently respond to DNT signals. However, we do honor the Global Privacy Control (GPC) as an opt-out preference signal for the sale/sharing of personal information, as described in Section 5.

You can control cookies through your browser settings, and you can opt out of Google Analytics using the Google Analytics opt-out browser add-on.

4. How we disclose personal information

We may disclose the categories of personal information above to the following categories of recipients:

• Service providers that support the Site on our behalf — for example, website/hosting, form and email delivery, and analytics providers.
• Advertising and analytics partners in connection with the cookies and tools described in Section 3 (see Section 5 regarding "sharing").
• Legal and government authorities, and other parties, when we believe disclosure is required by law or necessary to protect our rights, safety, or property, or to detect or prevent fraud.
• A successor entity in connection with a merger, acquisition, financing, or sale of assets.

5. Sale & sharing of personal information; your choices

Under California law, "sale" means disclosing personal information for monetary or other valuable consideration, and "sharing" means disclosing personal information for cross-context behavioral advertising. We do not sell your personal information for money and do not knowingly sell or share the personal information of consumers under 16.

However, our use of advertising and analytics technologies such as the Meta Pixel and Google Analytics (Section 3) may be considered a "sale" or "sharing" of identifiers and internet-activity information under the CCPA, if and when those technologies are enabled. In the past 12 months, the categories that may be "sold" or "shared" in this way are identifiers and internet or other electronic network activity information; the third parties are advertising and analytics partners. We do not "sell" or "share" the other categories listed in Section 1.

Your Privacy Choices — Do Not Sell or Share My Personal Information. You have the right to opt out of the "sale" or "sharing" of your personal information. You may exercise this right by:

• Emailing us at baygulzsupport@gmail.com with the subject "Do Not Sell or Share"; and/or
• Using a browser or extension that transmits the Global Privacy Control (GPC) signal, which we treat as a valid opt-out request for the browser and device from which it is sent.

6. Data retention

We keep each category of personal information only as long as reasonably necessary for the purposes described in this Policy. In general, we retain first-batch and contact information until you unsubscribe or ask us to delete it, or until it is no longer needed to operate a drop, whichever is earlier; analytics information is retained according to our providers' default retention periods. We then delete, de-identify, or aggregate the information, unless a longer period is required to comply with law, resolve disputes, or enforce our agreements.

7. Data security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information appropriate to its sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the following rights, subject to certain exceptions:

• Right to know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it.
• Right to delete personal information we collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of the "sale" or "sharing" of personal information (see Section 5).
• Right to limit the use of sensitive personal information — we do not collect sensitive personal information, so no action is needed.
• Right to non-discrimination for exercising your rights.

How to exercise your rights. Email us at baygulzsupport@gmail.com. Because we interact with consumers exclusively online and have a direct relationship with you, email is our designated method for submitting requests. We will verify your request by matching the information you provide (such as your email address) against our records and may ask for additional information to confirm your identity. You may use an authorized agent to submit a request on your behalf, provided the agent gives proof of authorization and we can verify your identity. We aim to respond within 45 days and may extend by an additional 45 days when reasonably necessary, with notice to you.

9. Minors

The Site is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share the personal information of consumers under 16. If you believe a minor has provided us information, contact us and we will delete it.

10. Other choices, third-party links, changes & contact

You can unsubscribe from our emails at any time using the link in any message, or by contacting us. The Site may link to third-party websites; we are not responsible for their privacy practices, and this Policy does not apply to them.

We may update this Policy from time to time. Changes take effect when we post the updated version with a new "Last updated" date above; material changes will be reflected in that date.

Umibites is an independent importer/reseller and is not affiliated with Kinokuniya unless otherwise stated.