1. Introduction

Urban Wellness Collective ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website your-domain.com and use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register on the website
• Make a purchase or book a service
• Subscribe to our newsletter
• Fill out a contact form
• Participate in surveys or promotions

This information may include:

• Name and contact information (email, phone number, address)
• Payment information (processed securely through third-party providers)
• Account credentials (username and password)
• Health and wellness preferences
• Demographic information

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address and browser type
• Operating system and device information
• Referring/exit pages and URLs
• Date and time stamps of visits
• Clickstream data and page interactions

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience. See our Cookie Policy section below for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain our wellness services
• Order Processing: To process transactions and send related information
• Communication: To respond to inquiries, send updates, and provide customer support
• Marketing: To send newsletters, promotional materials, and personalized offers (with your consent)
• Improvement: To analyze usage patterns and improve our website and services
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with legal obligations and protect our rights

4. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:

• Consent: You have given explicit consent for specific purposes
• Contract: Processing is necessary to fulfill our contract with you
• Legal Obligation: We must comply with legal requirements
• Legitimate Interests: Processing serves our legitimate business interests while not overriding your rights

5. Cookie Policy

5.1 What Are Cookies

Cookies are small text files stored on your device that help us provide and improve our services. We use both session cookies (temporary) and persistent cookies (remain after you close your browser).

5.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Performance Cookies: Help us understand how visitors use our site
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing to show relevant advertisements

5.3 Managing Cookies

You can control cookies through your browser settings. Please note that disabling cookies may affect website functionality. Most browsers accept cookies automatically, but you can modify your settings to decline cookies or receive notifications when cookies are being sent.

6. Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our website and conducting our business:

6.1 Service Providers

• Payment Processors: Secure processing of payment transactions
• Email Services: Newsletter delivery and email communications
• Analytics Providers: Website traffic analysis (e.g., Google Analytics)
• Cloud Storage: Secure data storage and backup services
• Customer Support: Help desk and support ticket systems

6.2 Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

6.3 Social Media

Our website may include social media features. Your interactions with these features are governed by the privacy policies of the respective social media companies.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize us to share your information
• Service Providers: With trusted partners who help operate our business
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Aggregated Data: Non-identifiable aggregated information for analytics and marketing

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Secure server infrastructure and firewalls
• Regular security audits and vulnerability assessments
• Access controls and authentication protocols
• Employee training on data protection practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law.

• Account Data: Retained while your account is active and for a reasonable period afterward
• Transaction Records: Kept for accounting and legal compliance (typically 7 years)
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Analytics Data: Typically retained for 26 months (Google Analytics default)

After the retention period expires, we will securely delete or anonymize your personal information.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

10.1 GDPR Rights (EEA Residents)

• Right to Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time

10.2 CCPA Rights (California Residents)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

10.3 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within 30 days.

11. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your personal information internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant authorities

13. Email Marketing and Communications

With your consent, we may send you marketing emails about our services, promotions, and wellness tips. You can opt-out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in your account settings
• Contacting us directly at the email below

Please note that even if you opt-out of marketing communications, we may still send you transactional emails related to your account or services.

14. Do Not Track Signals

Some web browsers have a "Do Not Track" feature. Currently, we do not respond to Do Not Track signals. However, you can manage cookies and tracking preferences through your browser settings.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date at the top
• Sending an email notification for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer:

Email: [email protected]

Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.