1. Our Commitment to Your Privacy

We, Puredrift ("we", "us"), are committed to protecting your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) (for users in the European Economic Area), the California Consumer Privacy Act (CCPA), and the Personal Information Protection Law of the People's Republic of China (for users in Mainland China). 

This notice explains how we collect, use, and safeguard your data when you use our website (www.puredrifts.com) or services. By accessing our services, you agree to the practices described here.

2. Information We Collect

2.1 Information You Provide

    When you contact us, create an account, or participate in activities (e.g., surveys, forums), we collect:

        Personal details: Name, email address, phone number.

        Account information: Usernames, passwords (hashed and encrypted using industry-standard algorithms like bcrypt).

        Special cases: If you choose to participate in promotional events or contests, we may collect additional information you provide, such as shipping addresses.

You are responsible for ensuring the accuracy of the information provided.

2.2 Information Collected Automatically

    We gather technical data to improve your experience and secure our services:

        Device & Usage Data: IP address, browser type, operating system, pages visited, clickstream data, and interactions on the website.

        Location Data:

            Approximate location: Derived from your IP address.

            Precise location: Collected via GPS or similar technology only if you explicitly enable device location sharing. 

        Cookies and Tracking Technologies: Details outlined in Section 5.

3. How We Use Your Information

We process your data only for legitimate purposes and legal bases, including:

    1.Service Delivery (Necessary to fulfill our contract with you):

        Creating and managing accounts, processing requests, and enabling user communications.

    2.Security & Maintenance (Legitimate interest):

        Detecting fraud, monitoring website performance, and fixing technical errors.

    3.Legal Compliance (Legal obligation):

        Fulfilling regulatory requirements (e.g., responding to subpoenas, tax filings) or enforcing our terms.

    4.Updates & Marketing (Consent or legitimate interest, where permitted by law):

        Notifying you about policy changes, new features, or promotional offers. You may opt out of marketing communications at any time via the "Unsubscribe" link in our emails or by contacting            us. 

For children under 16 years of age (or the applicable age in your jurisdiction), we will only collect and use personal data with verifiable parental consent. 

4. Sharing Your Information

We do not sell your data. We may share information only in the following cases:

    With Your Consent: For specific purposes you explicitly approve (e.g., sharing data with a third-party service you requested).

    Legal Requirements: When required by law enforcement, regulatory authorities, or courts.

    Business Transfers: During mergers, acquisitions, or asset sales, where data may transfer to new owners who are contractually obligated to protect it.

    Trusted Third-Party Providers: We may engage third parties (e.g., cloud providers, analytics tools, payment processors) to assist with our operations. 

    These providers are required to process data only in accordance with our instructions and must maintain equivalent security standards. 

5. Cookies & Tracking Technologies

We use cookies and similar technologies to:

    Analyze website traffic (e.g., identifying popular pages via Google Analytics).

    Remember your preferences (e.g., language settings, login status).

    Personalize content and ads (e.g., displaying relevant products based on your browsing history).

Your Choices:

    You can disable cookies via your browser settings, but some features (e.g., account login) may not function properly.

    For users in the EU/EEA: Upon your first visit, we will prompt you to consent to non-essential cookies via a banner. You may choose to accept all, 

    reject non-essential cookies, or customize your preferences. 

6. Data Retention & Security

6.1 Retention Period

    We retain your data only as long as necessary to fulfill the purposes for which it was collected:

        Account data: Up to 90 days after account deletion, unless required by law (e.g., tax records for 7 years).

        Transaction data: Up to 5 years for financial reporting obligations.

        Marketing data: Until you opt out or we no longer have a legitimate interest in processing it.

6.2 Security Measures

We implement reasonable technical and organizational measures to protect your data, including:

    Encryption of sensitive data (e.g., AES-256 for data at rest, TLS 1.3 for data in transit).

    Access controls (e.g., role-based access, multi-factor authentication for staff).

    Regular security audits and vulnerability assessments.

    While no system is completely immune to breaches, we continuously improve our safeguards. Avoid sharing sensitive information (e.g., credit card details) on 

    public networks.

7. Your Rights & Choices

Depending on your location, you may have the following rights:

7.1 General Rights

    Access: Request a copy of the personal data we hold about you.

    Correction: Update inaccurate or incomplete data.

    Deletion: Request deletion of your data, except where retention is legally required.

    Restrict Processing: Ask us to pause processing your data in certain circumstances (e.g., if you contest its accuracy).

    Data Portability: Obtain a copy of your data in a structured, machine-readable format and request transfer to another controller. 

    Withdraw Consent: If we process your data based on consent, you may withdraw it at any time (without affecting lawfulness of processing before withdrawal).

    Object to Processing: For data processed on the basis of legitimate interest, you may object to processing by contacting us.

7.2 Specific Rights for California Residents (CCPA)

You may:

    Know: Request a list of the categories of data we collect, sell, or share, and the specific pieces of data collected about you.

    Opt Out of Sharing: Although we do not sell data, you may opt out of the "sharing" of personal information (as defined by the CCPA) with third parties for 

    cross- contextual advertising.

    Non-Discrimination: Exercise your rights without being subjected to discriminatory treatment.

How to Exercise Your Rights

To submit a request, contact us at:

    Email: info@puredrifts.com

    Address: Puredrift, Room 701 Building#1, No. 2788 Keji dadao, Qingshanhu Street, Hangzhou

    We will respond to verified requests within 30 days of receipt, free of charge (unless your request is excessive or unfounded). You may appoint an authorized agent 

    to submit requests on your behalf, provided we receive proof of the agent’s authority.

8. Updates to This Notice

We may update this policy to reflect legal changes or operational improvements. (Major changes) (e.g., new data uses, expanded third-party sharing) will be notified via email to your registered address or displayed via a prominent banner on our website 30 days before taking effect. The revised date at the top indicates the latest version. By continuing to use our services after changes take effect, you accept the updated policy.

9. Contact Us

For questions, data requests, or complaints:

    Email: info@puredrifts.com

    Address: Puredrift, Room 701 Building#1, No. 2788 Keji dadao, Qingshanhu Street, Hangzhou

Response Time: We aim to reply within 30 days. For urgent matters, please indicate "URGENT" in the subject line.

10. Additional Provisions for International Users

If your data is transferred outside your country/region (e.g., to our servers in the United States), we ensure transfers comply with applicable laws, such as using Standard Contractual Clauses approved by the European Commission or other equivalent safeguards.