Privacy Policy — Urbandeam

1. Who We Are

This Privacy Policy describes how Diez Agency LLC ("Urbandeam," "we," "us," or "our") collects, uses, and protects your personal data when you visit urbandeam.com or make a purchase.

Diez Agency LLC · 539 W. Commerce St #3083 · Dallas, TX 75208 · United States
Contact: contact@urbandeam.com

2. Data We Collect

2.1 Data you provide directly

Email address — required to deliver your purchase and send order confirmations.
Name — collected optionally at checkout.
Payment data — processed entirely by Stripe. We never store card numbers, CVV, or full payment details on our servers.

2.2 Data collected automatically

IP address and browser information — collected for security and fraud prevention.
Usage data — pages visited, time spent, referral source (via analytics tools).
Cookies — see Section 7 for details.

2.3 Data we do NOT collect

We do not collect sensitive personal data (health, religion, political views, etc.).
We do not collect data from children under 16. If you are under 16, do not use this site.

3. How We Use Your Data

Order fulfillment: delivering your download link and order confirmation email.
Customer support: responding to your questions and resolving issues.
Legal compliance: meeting our legal and tax obligations.
Fraud prevention: detecting and preventing fraudulent transactions.
Marketing (with consent): sending newsletters if you have opted in. You can unsubscribe at any time.
Analytics: understanding how our site is used to improve our products and user experience.

4. Legal Basis for Processing (GDPR)

For customers in the European Union, we process your data on the following legal bases:

Contract performance (Art. 6(1)(b) GDPR) — to fulfill your order.
Legal obligation (Art. 6(1)(c) GDPR) — for tax and legal compliance.
Legitimate interests (Art. 6(1)(f) GDPR) — for fraud prevention and site security.
Consent (Art. 6(1)(a) GDPR) — for marketing emails and non-essential cookies.

5. Payment Processing — Stripe

All payments are processed by Stripe, Inc. (354 Oyster Point Blvd, South San Francisco, CA 94080, USA). Stripe collects and processes your payment information directly under their own Privacy Policy.

We receive only a transaction confirmation and the last 4 digits of the card for reference. We never store your full card number or CVV.

6. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

Stripe — payment processing.
Resend — transactional email delivery (order confirmations).
Supabase — secure database storage (EU region when possible).
Vercel — website hosting and edge computing.

All third-party processors are bound by data processing agreements and are required to maintain appropriate security standards.

7. Cookies & Tracking

We use the following types of cookies:

Essential cookies: Required for the site to function (session management, cart, security). Cannot be disabled.
Analytics cookies (Umami): Privacy-friendly, cookieless analytics to understand site usage. No personal data is shared with third parties.
Marketing pixels (Meta Pixel): Used to measure ad performance and retargeting. Only activated with your consent. You can opt out via your browser settings or our cookie banner.

You can manage or withdraw cookie consent at any time through your browser settings.

8. Data Retention

Order data: retained for 7 years to comply with tax and accounting obligations.
Email address (newsletter): retained until you unsubscribe.
Analytics data: aggregated and anonymized, retained for up to 24 months.
Download tokens: automatically deleted after 30 days of expiry.

9. International Data Transfers

As a US-based company serving international customers, your data may be transferred to and processed in the United States. For EU customers, such transfers are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) where applicable, as required by GDPR Chapter V.

10. Your Rights

EU / GDPR Rights

Access: request a copy of the personal data we hold about you.
Rectification: request correction of inaccurate data.
Erasure ("right to be forgotten"): request deletion of your data, subject to legal retention requirements.
Portability: receive your data in a structured, machine-readable format.
Restriction: request that we limit the processing of your data.
Objection: object to processing based on legitimate interests or for direct marketing.
Withdraw consent: at any time, for consent-based processing (e.g., newsletter).

California / CCPA Rights

Right to know what personal information is collected, used, shared, or sold.
Right to delete personal information.
Right to opt out of the sale of personal information (we do not sell data).
Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at contact@urbandeam.com. We will respond within 30 days.

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption, secure database access controls, and limited staff access. However, no system is 100% secure. If you suspect a security issue, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. For significant changes, we will notify you by email.

13. Contact & Complaints

For any privacy-related questions: contact@urbandeam.com

EU residents who are not satisfied with our response may lodge a complaint with their local data protection authority (e.g., CNIL in France, ICO in the UK).