This privacy policy (“Policy”) explains how Ordermark by UrbanPiper (“We”, “Us”, “Our”) processes Personal Data collected from You.

‍1. Definitions
‍Terms not specifically defined herein shall have the meaning ascribed thereto in the Terms.

1.1. “Controller” means the natural or legal person, public authority, agency, or other body which alone or jointly with others, determines the purposes and means of the processing of Personal Data

1.2. “Customer” means any person or entity with whom the Merchant interacts using the Services.

1.3. “Merchant” means the natural or legal person that has subscribed to the Services by entering into an agreement with Us.

1.4. “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, including SPDI.

1.5. “To Process/Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.6 “CCPA” California Consumer Privacy Act, 2018

1.7 “CPRA” California Privacy Rights Act, 2018

1.8. “Terms” means the Terms of Service made available at https://www.urbanpiper.com/legal/merchant-agreement

‍1.9. “User” means those who are designated users within the Services, including an Account administrator, agents and other designated users.

1.10. “You” and “Your” means an identified or identifiable natural person who (i) visits the Website(s); (ii) is a User of the Services from whom We collect Personal Data as a Controller, as specified in Section 2 of this Policy 

‍2. Changes to This Policy and Your Consent
‍
‍We may update this Policy from time to time to reflect changes in our data practices or to comply with legal requirements. If we make material changes that affect your rights or how we use your personal information, we will provide clear notice—such as by posting an updated Policy on our Site. By accessing or using Ordermark, you acknowledge and agree to the collection, use, and disclosure of your information as described in this Policy and our Terms and Conditions of Use. If we intend to use your personal information for purposes other than those originally specified at the time of collection, or as otherwise required by law, we will seek your consent before such use. Your continued use of Ordermark after any changes are posted constitutes your acceptance of the updated Policy, except where your consent is required by law. If you do not agree with this Policy or our Terms and Conditions of Use, please do not use the Ordermark Site. 

‍3. Personal Data Collected by us
‍
‍3.1. You directly provide us with most of the data we collect. We collect Personal Data from You directly as follows: a) When You subscribe for any of Our Services, We collect sign-up, account information including Your name, e-mail address, shipping address, billing address, IP address, geographic location, phone number of the account administrator or information required for authentication of a Account into Our Services; b) When a User is added, We collect the name, email address and phone number of the User. c) When You submit forms on Our Website(s) or as You use interactive features of the Website(s), including providing feedback or suggestions, testimonials, making requests, participation in surveys, contests promotions, or sweepstakes, We collect Your feedback, name and e-mail address; d) When You attend an event conducted by Us, including webinars or seminars, We may collect Your contact information such as name, e-mail address, phone number, designation and company name; e) When You request customer support or otherwise communicate with us, We collect Your name, usage information or any other Personal Data You may provide Us in the course of such interaction; f) When you interact with Us on public forums, Our social media channels, Our community forums, or Our blogs, We collect the information You provide Us while interacting with Us and Personal Data such as Your name, location and any information You provide in your bio while registering with such forums; g) When You apply for a job with Us, whether through Our Website or otherwise, We collect Your Personal Data, including your Resume, in connection with Your job application; h) When You are a representative of Our business partners, suppliers or vendors, We collect Your name, e-mail and contact information; (h) When You choose to invite others to join our Services through our referral feature, We collect the email address or any other information You provide us for such referrals i) When you register for Our loyalty programme(s), We may collect Your Personal Data such as name, email address, billing address while registering for such programme(s).

3.2. We may also receive Your Personal Data indirectly as follows: a) from third party sources like marketing lists, databases and social media but only where We have checked that these third parties either have Your consent or are otherwise legally permitted or required to disclose Your Personal Data to Us; b) When You use the Services, We automatically collect information on the type of device You use, and the operating system version, to perform Our agreement with You; c) When You use or view Our Website(s), information is collected via Your browser’s cookies as described in clause 10 herein; d) We may also collect or receive Your Personal Data from other sources such as Our business or channel partners through whom You create or access Your account, publicly available sources, email add-ons and/ or through the combining of information We obtain from third parties along with the Personal Data You provide to Us.

3.3. The Website(s) includes social media features and widgets that are either hosted by a third-party or hosted directly on the Website(s) and Your interaction with these social media features and widgets is governed by the privacy statement of the companies that provide them. You should check Your privacy settings on these third-party services to understand and change the information sent to Us through these services.

‍4. Legal Basis for Processing
‍
‍Our collection and use of your Personal Data is governed by applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other relevant state or sector-specific regulations. We collect and process your Personal Data based on one or more of the following legal bases: (a) Your Consent: Where required, we collect and use your Personal Data with your consent, which you may withdraw at any time, subject to applicable law. (b) Contractual Necessity: We process your Personal Data as necessary to provide the services you request or to fulfill our contractual obligations to you. (c) Legal or Regulatory Obligation: We may process your Personal Data to comply with applicable legal or regulatory requirements. (d) Legitimate Business Interests: We may process your Personal Data for our legitimate business purposes, such as improving our services, ensuring security, or preventing fraud, provided such processing does not override your rights and freedoms as provided by law. 

‍5. Purposes for which personal data will be processed
‍
‍We Process Your Personal Data to: a) facilitate Your access to the Website(s) and Services; b) process and complete payment transactions; c) provide customer service and support; d) to authenticate Your identity and help You log into Our Services; e) send You communication on Your use of the Services, updates on Our Terms or other policies; f) send You communication on new features in the Services or new service offerings; g) perform Our obligations or receive products/services in accordance with any contract that We may have with You or Your organization; h) Organise events or for other marketing/ promotional activities; i) investigate and prevent fraudulent transactions, unauthorized access to the Website(s) and Services, and other illegal activities; j) personalize the Website(s) and Services; k) evaluate You for the job position that You have applied for or any position that We consider You suitable for, to ensure that We can make the best recruitment decisions, l) for providing loyalty programme(s) You may register for; m) inviting, adding invitees to Your social network and sending reminders to invitees to through Our referral feature; and n) for other purposes for which We obtain Your consent.

Where You are a User, We will only collect Personal Data for the purposes mentioned under clauses 4(a), (c), (d), (e), (f), (g), (h), (i), (j), (m) and (n) in Our capacity as a Controller. Except for the Personal Data collected for the purposes mentioned hereunder, You acknowledge that We shall only Process Personal Data on the Merchant’s behalf as a Processor. You will be directed towards the Merchant for any assistance with data privacy questions and requests for such Personal Data. We are not responsible for the Merchant’s privacy or security practices which may be different from Our Privacy Policy. The Merchant is solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements or other obligations, relating to the collection and transmission of Personal Data in connection with the use of Our Services by Users. 

‍6. Sharing of Personal Data
‍
‍6.1. We may share your Personal Data with our group companies and trusted third-party service providers to deliver our Services to you and, if you are a Merchant, to send you information or updates related to our Services.

6.2. For Merchants, when processing your orders, we may share your Personal Data with credit reference agencies to verify your identity and prevent fraudulent transactions.

6.3. We engage sub-processors and service providers to support various business functions, such as website/app maintenance, backup and storage, payment processing, analytics, and other operational services. These third parties may access or process your Personal Data solely for the purpose of performing these services on our behalf and are contractually obligated to protect your information and use it only as directed by us.

6.4. We do not share your mobile information with third parties, platforms, or affiliates for any unsolicited marketing or promotional purposes. This does not include information you have expressly opted in to receive via text messages.

6.5. We may disclose your Personal Data if required to do so by law, such as in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, subpoenas, court orders, or other legal processes. We may also disclose your information to establish or exercise our legal rights or defend against legal claims.

6.6. We may share your Personal Data when necessary to investigate or prevent illegal activities, suspected fraud, threats to the safety of any person, violations of our Terms and Conditions, or as otherwise required by applicable law.

6.7. In the event of a merger, acquisition, restructuring, sale of assets, or other business transaction, we may transfer your Personal Data to the relevant third party as part of the transaction. You will be notified via prominent notice on our website of any change in ownership or uses of your Personal Data, as well as any choices you may have regarding your information.

6.8. Where required by applicable law, including the California Consumer Privacy Act (CCPA/CPRA), you have the right to opt out of the sale or sharing of your Personal Data.  

‍7. International Transfer
‍
‍7.1. We primarily process Personal Data within the United States. However, in certain circumstances, your Personal Data may be transferred to and processed in countries outside of the United States for the purposes described in this Policy.

7.2. When we transfer your Personal Data to other countries, we take appropriate measures to help ensure your information remains protected in accordance with applicable US privacy laws. These measures may include entering into contractual agreements with recipients that require them to safeguard your Personal Data and use it only for the purposes for which it was provided.

7.3. By using our services and providing us with your Personal Data, you acknowledge and consent to the transfer, processing, and storage of your information outside of your country of residence, including in jurisdictions that may have different data protection standards than those in your home country. Where required by law, we will obtain your consent before transferring your Personal Data internationally. 

‍8. Retention of Personal Data
‍
‍8.1. We retain the Personal Data collected where an ongoing legitimate business requires retention of such Personal Data

8.2. In the absence of a need to retain Personal Data under Section 8.1. above, We will either delete it or aggregate it, or, if this is not possible then We will securely store Your Personal Data and isolate it from any further Processing until deletion is possible.  

‍9. Security of Personal Data
‍We use appropriate technical and organizational measures to protect the Personal Data that We collect and Process. The measures We use are designed to provide a level of security appropriate to the risk of Processing Your Personal Data. If You have questions about the security of Your Personal Data, please contact Us immediately as described in this Policy.  

10. Your Rights
‍
‍You are entitled to the following rights:
10.1. You can request Us for access and correction of Your Personal Data.

10.2 If We have collected and processed Your Personal Data with Your consent, then You can withdraw your consent at any time. Withdrawing Your consent will not affect the lawfulness of any processing We have conducted prior to Your withdrawal, nor will it affect Processing of Your Personal Data conducted in reliance on lawful processing grounds other than consent.

10.3. You have the right to complain to a data protection authority about Our collection and use of Your Personal Data. For more information, please contact Your local data protection authority.

10.4. You have the right to opt-out of marketing communications We send You at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails We send You. To opt-out of other forms of marketing (such as postal marketing or telemarketing), please Contact Us.
‍
10.5. If You are a resident of the EEA, UK, US, or Switzerland, You are also entitled to the following rights:

10.5.1. You can request Us for deletion and erasure of Your Personal Data

10.5.2. You can object to the Processing of Your Personal Data, ask Us to restrict Processing of Your Personal Data or request portability of Your Personal Data.

10.6. If You seek to exercise Your rights under this clause, please contact Us at the details provided in clause 14. We will verify any requests before acting on the request and respond to all requests We receive from individuals wishing to exercise their data protection rights within a reasonable timeframe in accordance with applicable data protection laws  

‍11. Cookie Policy
‍
‍11.1. Cookies are text files that are placed on Your computer to collect standard internet log information and visitor behaviour information by Us. When You visit the Website(s), We may collect Personal Data automatically from You through cookies or similar technology. We also set cookies to collect information that is used either in aggregate form to help Us understand how Our Website(s) is being used or how effective Our marketing campaigns are, to help customise the Website(s) for You or to make advertising messages more relevant to You. 

11.2. Essential Cookies: We set essential cookies that enable core functionality such as security, network management, and accessibility. You may not opt-out of these cookies. However, You may disable these by changing Your browser settings, but this may affect how the Website(s) functions.

11.3. Analytics, Customisation and Advertising Cookies: We set these cookies to help Us improve Our Website(s) by collecting and reporting information on how You use it. The cookies collect information in a way that does not directly identify anyone.

11.4. When You visit the Website(s), a cookie banner will be displayed providing additional information about cookies and options to opt out of non-essential cookies as required by applicable laws.  

‍12. Privacy of Children
‍
‍12.1. We recognize the importance of children's safety and privacy. We do not request, or knowingly collect, any Personal Data from children under the age of 18. If a parent or guardian becomes aware that his or her child has provided Us with Personal Data, they should write to us at the email address provided in clause 14. 

‍13. Notice to Customer and other exclusions
‍
‍13.1. Other than the Personal Data collected under clause 3 and for the purposes set forth in clause 5 for which UrbanPiper shall act as the Controller, for any other Processing of Personal Data collected from a Customer, We will only act as a Processor of Personal Data and such Processing will be governed by the terms and conditions of the agreement with the Merchant. The Customer’s data privacy questions and requests should be submitted to the Merchant in its capacity as the Customer’s Controller. We are not responsible for Merchant’s privacy or security practices which may be different from this notice. Merchants to Our Services are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements, or other obligations, relating to the collection of Personal Data in connection with the use of Our Services by Customers. 

13.2. Our Website(s) contain links to other websites. Our Policy applies only to our Website(s), so if You click on a link to another website, You should read their privacy policy. We encourage You to review the privacy statements of any such other websites to understand their Personal Data practices  

‍14. Contact Information
‍
‍You may contact Our Grievance Redressal Officer if You have any enquiries or feedback on Our personal data protection policies and procedures, or if You wish to make any request, in the following manner:

Kind Attention: Anirban Majumdar

Email Address: infosec@urbanpiper.com

Address: Suite 206, 651 N Broad St, Middletown, DE 19709, USA