Privacy Policy

1. Introduction

At PurCity, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We respect your privacy and are committed to protecting it through our compliance with this policy. This policy applies to information we collect on our website and in email, text, and other electronic messages between you and our website.

2. GDPR Compliance

European Union Data Protection

We comply with the General Data Protection Regulation (GDPR) which came into effect on May 25, 2018. This regulation gives EU citizens more control over their personal data and ensures that organizations handle this data responsibly.

Your Rights Under GDPR:

• Right to be Informed: You have the right to know how we collect and use your data
• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can ask us to correct inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can limit how we use your data
• Right to Data Portability: You can receive your data in a portable format
• Right to Object: You can object to certain types of processing
• Right to Withdraw Consent: You can withdraw consent at any time

3. Information We Collect

Personal Information:

• Name and contact information
• Email address
• Phone number
• Address and location information
• Professional information

Technical Information:

• IP address and location data
• Device and browser information
• Usage patterns and preferences
• Cookie data (with your consent)

4. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Improve our website and services
• Comply with legal obligations

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies, such as your browser's local storage and small scripts from other companies. Some are needed for the website to work. All others start only after you have said yes.

Your choice

On your first visit a bar at the bottom of the page asks for your choice: "Accept all", "Essential" (only what is necessary), or the settings icon, where you can choose purpose by purpose. Until you choose, only the necessary ones are used, and the bar stays at the bottom with the page dimmed behind it; you can still scroll and read. Waiting or scrolling is never a yes: nothing more is started. After your choice a small cookie button stays in the bottom left corner of every page. With it you can open your preferences again at any time and change or withdraw your choice, as easily as you gave it.

Necessary (always on)

• Session and security cookies of the website: they keep you logged in, keep your cart and protect our forms.
• The cookie "cookie_consent": it remembers your cookie choice for 12 months.
• The chat: when you use it, a session token is kept in your browser so that the conversation continues from page to page.
• Delivery and protection of the website through our network provider (Cloudflare).
• Payment: when you pay, our payment provider (Stripe) uses the cookies it needs to carry out and secure the payment.

Statistics (only with your consent)

• Google Analytics: which pages are visited, for how long, from which kind of device and from which region.
• Inspectlet: records how the pages are used (mouse movements, clicks, scrolling and the page as it was shown), so that we can find and fix problems.

Marketing (only with your consent)

• Albacross: recognises which company a visit comes from, based on the network address, for our business-to-business sales.

On your request

• Videos: a video from YouTube is loaded, and YouTube's own cookies are set, only when you press play.

Protection of forms

• Google reCAPTCHA is loaded on pages with a form, to protect the form against misuse.

Who provides these tools

• Google Analytics, YouTube and reCAPTCHA: Google. Data can be processed in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework and uses the European Commission's standard contractual clauses where required. See Google's privacy policy.
• Inspectlet: Inspectlet, Inc., California, USA. Data can be processed in the USA. See Inspectlet's legal page.
• Albacross: Albacross Nordic AB, Stockholm, Sweden. The script collects browser and operating-system version, IP address, cookie information, time stamps and clickstream information; the data is stored on servers in Ireland, and cookie-related personal data is kept for 24 months. See Albacross's privacy policy.
• Stripe (payments): transfers outside the EU/EEA are made under the standard contractual clauses and the EU-U.S. Data Privacy Framework. See Stripe's privacy policy.
• Cloudflare (delivery and protection of the website): see Cloudflare's privacy policy.

How long Google Analytics and Inspectlet keep data depends on the settings and the plan of our accounts with them.

Non-essential cookies and tools are only used with your consent. You can also delete or block cookies in your browser's settings; the website's necessary functions may then stop working.

6. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except:

• With trusted service providers who assist us in operating our website
• When required by law or to protect our rights and safety
• In connection with a business transfer or merger
• With your explicit consent

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Data backup and recovery procedures

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies.

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict data processing
• Receive your data in portable format
• Object to data processing
• Withdraw consent
• Lodge a complaint

10. Contact Information

Questions About This Policy?

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

 Stay Informed: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.