Privacy Policy (2025-04-29)

This document has been superceded by our current Privacy Policy.

  • Effective dates revised to show correct effective dates
  • This header placed on the policy.

DataPulse Privacy Policy

Effective Dates: April 30, 2025 through March 26, 2026

We know that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. This Privacy Policy explains how DataPulse (“we,” “us,” or “our”) collects, uses, discloses, and protects information gathered through our websites in the datapulse.global and nononames.global Internet domains, including its e-commerce functionalities, interactive services, and network APIs (collectively, the “Services”). By using DataPulse services, you are consenting to the practices descried in this Privacy Notice..

1. Information We Collect

We collect the following types of information through our Services:

a. Website and E-Commerce

  • Personal Information: When you create an account, make a purchase, or contact us, we may collect:
    • Name
    • Email address
    • Billing and shipping addresses
    • Payment information (processed securely via third-party payment processors)
    • Phone number (optional)
    • Information you type into messages or enter on forms
  • Browsing Data: Information about your interaction with our website, such as:
    • Pages visited
    • Products viewed
    • IP address
    • Browser type and device information
    • Cookies and similar tracking technologies (see Section 6)
  • Customer Support Data: Information you provide when contacting us, such as inquiries or feedback.

b. Network APIs and Interactive Online Services

  • Usage Data: Information about how the API or interactive service is accessed and used, including:
    • Your requests
    • Frequency and patterns of API calls
  • Technical Data: Metadata related to API usage, such as:
    • IP addresses
    • Timestamps
    • Device or system information

For users in the EU and UK, we process personal data under the following legal bases:

  • Consent: For non-essential cookies, marketing communications, or other optional data processing, we obtain your explicit consent, which you may withdraw at any time (see Section 7).
  • Contract: To fulfill e-commerce orders, provide API access, or respond to customer support inquiries.
  • Legitimate Interests: To improve our Services, analyze usage, and prevent fraud, where our interests are not overridden by your rights and freedoms.
  • Legal Obligation: To comply with applicable laws, such as tax or consumer protection regulations.

For Canadian users under PIPEDA, we ensure that data collection is limited to what is necessary, and we obtain consent where required, either expressly or implicitly, based on the context of the data collection.

3. How We Use Your Information

We use the information collected to:

  • Provide and Improve Services:
    • Process and fulfill e-commerce orders, including shipping and payment processing.
    • Provide customer support and respond to inquiries.
    • Monitor and enhance the performance, security, and functionality of the website and API.
  • Analyze Usage:
    • Understand use cases for our Services to improve user experience and develop new features.
    • Analyze website and API usage patterns to optimize content and performance.
  • Marketing and Sales:
    • Develop and refine marketing and sales programs, such as personalized offers or promotions (with your consent, where required, and you may opt out at any time).
    • Send transactional emails, such as order confirmations or account updates.
  • Legal and Security Purposes:
    • Detect and prevent fraud, abuse, or security incidents.
    • Comply with legal obligations or enforce our terms of service.

4. Data Sharing and Disclosure

We do not sell or share your personal information with third parties for their own marketing purposes.

We may share information with contractors or other service providers as needed to operate our Services. Any such sharing occurs under a contract that obligates them to protect your data and use it only for the purposes we specify. Our most important providers include:

  • SquareSpace: Provides web hosting and e-commerce platform services. We share data such as Customer Account Details, Site Usage Information, and Payment Information to enable website hosting, content delivery, and e-commerce functionality. SquareSpace’s Privacy Policy: https://www.squarespace.com/privacy
  • Stripe: Processes payments for our legacy e-commerce applications (e.g., NoNoNames). We share Payment Information and related transaction data to facilitate secure payment processing. Stripe’s Privacy Policy: https://stripe.com/privacy
  • Amazon AWS: Provides cloud compute services for hosting and scaling our Services. We share technical data, including API Usage Data and website content, to support infrastructure and performance. Amazon AWS Privacy Policy: https://aws.amazon.com/privacy/
  • Google: We use Google Analytics to monitor the performance of our sites. Google offers Analytics opt-out functionality and links to their privacy policy at https://tools.google.com/dlpage/gaoptout
  • Jitbit: Hosts our help desk services for customer support. We share Customer Support Data, such as inquiries and contact details, to manage support tickets. Jitbit’s Privacy Policy: https://www.jitbit.com/privacy/

We may also share information in these circumstances:

  • Legal Requirements: We may disclose information if required by law, regulation, or legal process (e.g., subpoenas, court orders), or to protect our rights, property, or safety, in compliance with PIPEDA, GDPR, and UK GDPR.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, with assurances of continued protection and notification where required.
  • Aggregated or Anonymized Data: We may share non-identifiable, aggregated data (e.g., website traffic statistics) with partners or publicly for analytics or reporting purposes, ensuring no personal data is disclosed.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information from unauthorized access, loss, or misuse, in accordance with PIPEDA, GDPR, and UK GDPR requirements. These include encryption for payment processing (via Stripe), secure servers (via SquareSpace and Amazon AWS), and secure help desk systems (via Jitbit). We conduct regular security assessments and apply data minimization principles. However, no system is completely secure, and we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

Our website, hosted by SquareSpace, uses cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. For users in the EU, UK, and Canada, we obtain explicit consent for non-essential cookies (e.g., analytics and marketing cookies) via our cookie consent tool, as required by GDPR, UK GDPR, and PIPEDA. You can manage cookie preferences through your browser settings or our cookie consent tool. Types of cookies we use include:

  • Essential Cookies or Strictly Necessary: Necessary for website functionality (e.g., maintaining your shopping cart).
  • Functionality Cookies: Used to provide you with a more personalized experience on our websites and to remember choices you make while using our site (e.g., to remember your language preferences or login details).
  • Analytics Cookies or Tracking and Performance Cookies: Help us understand how users interact with our website (used only with consent where required).
  • Marketing Cookies or Targeting and Advertising Cookies: Enable personalized ads or promotions (used only with consent where required).

7. Data Retention

We retain your information only for as long as necessary to fulfill the purposes outlined in this policy, provide our Services, or comply with legal requirements, adhering to data minimization principles under PIPEDA, GDPR, and UK GDPR. Specific retention periods include:

  • Usage Data: Data related to website and API usage (e.g., browsing data, API call patterns) is retained for a period sufficient to address billing inquiries and issues, not exceeding 12 months and typically less than 4 months, unless required for legal or operational purposes.
  • E-commerce Data: Order history and related personal information are retained for account management and compliance with tax or consumer protection laws, typically for up to 7 years as required by applicable regulations.
  • Customer Support Data: Support inquiries and related data are retained to resolve issues and improve support services, typically for up to 12 months unless further retention is necessary.
  • Analytics Data: information collected through Analytics cookies will be deleted every two (2) years.

Data no longer needed for these purposes is securely deleted or anonymized.

8. Your Rights and Choices

Depending on your jurisdiction, you have the following rights regarding your personal information:

  • United States (e.g., CCPA):

    • Access: Request a copy of the personal information we hold about you.
    • Correction: Request updates to inaccurate or incomplete data.
    • Deletion: Request deletion of your data, subject to legal obligations.
    • Opt-Out: Opt out of the sale or sharing of your personal information (note: we do not sell your data).
    • Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  • EU and UK (GDPR and UK GDPR):

    • Access: Request access to your personal data and information about how it is processed.
    • Rectification: Request correction of inaccurate or incomplete data.
    • Erasure: Request deletion of your data under certain conditions (e.g., when no longer necessary).
    • Restriction: Request restriction of processing in specific cases.
    • Data Portability: Request a transferable copy of your data in a structured, commonly used format.
    • Object: Object to processing based on legitimate interests or for direct marketing.
    • Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
  • Canada (PIPEDA):

    • Access: Request access to your personal information and details on its use and disclosure.
    • Correction: Request correction of inaccurate or incomplete data.
    • Consent Withdrawal: Withdraw consent for certain data uses, subject to legal or contractual restrictions.

To exercise these rights, please use our Privacy Request Form to ensure a prompt resolution of your request. We will respond within the timeframes required by applicable law (e.g., 45 days for CCPA, 30 days for PIPEDA, one month for GDPR/UK GDPR). For GDPR and UK GDPR, you may also lodge a complaint with a supervisory authority (e.g., your local EU Data Protection Authority or the UK Information Commissioner’s Office). California residents and Canadian users may designate an authorized agent to make requests on their behalf, subject to verification.

9. International Data Transfers

Your information is primarily processed in the United States, where SquareSpace, Stripe, Amazon AWS, and Jitbit operate data centers. For users in the EU, UK, or Canada, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs): For EU and UK data transfers, we use SCCs approved by the European Commission and UK authorities to ensure GDPR and UK GDPR compliance.
  • PIPEDA Compliance: For Canadian users, we ensure transfers align with PIPEDA’s accountability principles, maintaining comparable protection levels.
  • Adequacy Assessments: We assess third-party providers’ privacy practices to ensure compliance with applicable laws.

10. Children’s Privacy

Our Services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will take steps to delete it in compliance with the Children’s Online Privacy Protection Act (COPPA), GDPR, UK GDPR, and PIPEDA.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised effective date. For significant changes affecting EU, UK, or Canadian users, we will provide additional notice (e.g., via email or website pop-up) as required by GDPR, UK GDPR, or PIPEDA. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at using our Privacy Request Form. Your inquiry will be routed to our Privacy Officer, Data Protection Officer, or designee based on our best understandnging of your request. We may, at our discretion, respond by email or telephone.

For EU and UK users, our Data Protection Officer can be reached via our Privacy Request Form.

For US, Canadian, EU, or UK residents choosing to exercise privacy rights, you may submit requests using this Privacy Request Form.

13. Revision History

  • 2025-04-23: initial release.
  • 2025-04-29: updates to route all inquiries to our privacy form.