Privacy Policy

1. Introduction

Pure Factors ("we," "us," "our," or the "Company") operates the website located at purefactors.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site, place an order, interact with our advertisements, or otherwise engage with our services.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Site.

We are committed to protecting your privacy and complying with applicable data protection laws, including the California Consumer Privacy Act (CCPA/CPRA), the General Data Protection Regulation (GDPR), and other applicable state and international privacy regulations.

2. Information We Collect

We collect information in several ways when you interact with our Site and services:

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, shipping address, and billing address
• Account Information: Username, password, and account preferences
• Payment Information: Credit card number, expiration date, and billing details (processed securely by our third-party payment processor; we do not store full card numbers)
• Order Information: Products ordered, order history, and delivery preferences
• Communication Data: Information you provide when contacting customer support, leaving reviews, or submitting inquiries via forms on the Site

2.2 Information Collected Automatically

When you visit our Site, we and our third-party partners automatically collect certain information using cookies, pixels, and similar tracking technologies:

• Device Information: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, scroll depth, referring URLs, and exit pages
• Location Data: General geographic location derived from your IP address
• Interaction Data: How you interact with our advertisements, emails, and marketing communications, including open rates, click-through rates, and conversion events

2.3 Information From Third Parties

• Advertising Platforms: We may receive information from advertising platforms such as Meta (Facebook/Instagram) about how you interacted with our ads
• Analytics Providers: We receive aggregated and anonymized analytics data from third-party services
• Payment Processors: Our payment processor confirms transaction status and provides fraud prevention data

3. How We Use Your Information

We use the information we collect for the following purposes:

4. Meta (Facebook/Instagram) Pixel and Tracking Technologies

Our Site uses the Meta Pixel (formerly Facebook Pixel), a piece of code provided by Meta Platforms, Inc. that allows us to measure, optimize, and build audiences for our advertising campaigns.

4.1 What the Meta Pixel Does

When you visit our Site, the Meta Pixel collects data about your interactions, including:

• Pages you view on our Site
• Products you view or add to your cart
• Purchases or other conversion events you complete
• Your IP address, browser information, and device identifiers
• Time stamps and referring page URLs

This data is transmitted to Meta Platforms, Inc. and used to:

• Deliver targeted advertisements to you on Facebook, Instagram, and the Meta Audience Network
• Measure the effectiveness of our advertising campaigns
• Create Lookalike Audiences to reach people similar to our existing customers
• Retarget visitors who have shown interest in our products

4.2 Meta Custom Audiences

We may use Meta's Custom Audiences feature to deliver targeted advertisements. This may involve:

• Website Custom Audiences: Using data collected by the Meta Pixel to show ads to people who have visited our Site
• Customer List Custom Audiences: Uploading hashed (encrypted) customer email addresses or phone numbers to Meta for ad targeting purposes. Meta matches this data against its own user database to identify matches. The original data is deleted after matching.

You can opt out of Custom Audience targeting by adjusting your ad preferences in your Facebook account settings at facebook.com/adpreferences.

4.3 Conversions API (CAPI)

In addition to the Meta Pixel, we may use Meta's Conversions API (CAPI) to send event data directly from our server to Meta's servers. This server-side tracking may include information about purchases, leads, and other conversion events. This data is used for the same purposes as the Meta Pixel: ad optimization, measurement, and audience building.

4.4 Your Choices Regarding Meta Tracking

You can manage how Meta uses your data for advertising purposes:

• Adjust your Facebook Ad Preferences: facebook.com/adpreferences
• Opt out of interest-based advertising via the Digital Advertising Alliance: optout.aboutads.info
• Use our cookie consent banner to reject marketing cookies before they are activated
• Review Meta's Data Policy: facebook.com/privacy/policy

5. Cookies and Similar Technologies

5.1 Types of Cookies We Use

5.2 Cookie Consent

When you first visit our Site, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. Marketing and analytics cookies will not be activated until you provide affirmative consent. You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our Site.

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction that requires affirmative consent, we will not place non-essential cookies or activate the Meta Pixel until you have provided your explicit consent.

5.3 How to Manage Cookies via Your Browser

Most web browsers allow you to manage cookies through their settings. You can typically find these settings in the "Options," "Preferences," or "Privacy" section of your browser. Please note that disabling cookies may affect the functionality of certain features on our Site.

6. Third-Party Service Providers

We share your personal information with trusted third-party service providers who assist us in operating the Site and conducting our business. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

We do not sell your personal information to data brokers or other unaffiliated third parties for their own marketing purposes.

7. Your Privacy Rights

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business purposes for collecting it, and the categories of third parties with whom we have shared it.
• Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: You may opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. Under the CCPA/CPRA, certain data sharing with advertising platforms like Meta may be considered a "sale" or "sharing."
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of sensitive personal information.

7.2 European Economic Area, United Kingdom, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or equivalent legislation:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your personal data ("right to be forgotten"), subject to legal exceptions.
• Right to Restrict Processing: You may request that we limit how we use your data.
• Right to Data Portability: You may request to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

To exercise your GDPR rights, contact us at: privacy@purefactors.com. We will respond within 30 days.

7.3 Other US State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and other states with comprehensive privacy laws may have similar rights to those described above, including the right to access, delete, correct, and opt out of targeted advertising and sales of personal data. To exercise these rights, contact us at: privacy@purefactors.com.

8. Do Not Sell or Share My Personal Information

Under the CCPA/CPRA, certain transfers of personal information to third parties for advertising purposes may constitute a "sale" or "sharing." This includes data shared with advertising platforms such as Meta via the Meta Pixel and Custom Audiences.

You have the right to opt out of such activities. To opt out:

• Click the "Do Not Sell or Share My Personal Information" link in the footer of any page on our Site
• Email us at privacy@purefactors.com with the subject line "Opt-Out Request"
• We also honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we will treat it as an opt-out request.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements.

• Order and Transaction Data: Retained for 7 years for tax and legal compliance
• Account Information: Retained until you request deletion or close your account
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Analytics and Cookie Data: Retained for up to 2 years
• Customer Support Communications: Retained for up to 3 years

When data is no longer needed, it is securely deleted or anonymized.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and monitoring
• PCI DSS-compliant payment processing through certified third-party processors

While we take commercially reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. International Data Transfers

Your personal information may be transferred to and processed in the United States or other countries where our service providers operate. If you are located in the EEA, UK, or Switzerland, such transfers are conducted in compliance with applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission, or the EU-US Data Privacy Framework where applicable.

12. Children's Privacy

Our Site and products are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA). If we learn that we have inadvertently collected personal information from a child under the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@purefactors.com.

13. Third-Party Links

Our Site may contain links to third-party websites, including social media platforms and advertising partners. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, notify you by email or a prominent notice on our Site. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@purefactors.com
• Mailing Address: Pure Factors, Attn: Privacy Team, [Business Address]

For GDPR-related inquiries, you may also contact our designated representative in the EU by emailing privacy@purefactors.com with the subject line "GDPR Inquiry."