Privacy policy

Last updated: October 28, 2025

Pure Spa Direct operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Pure Spa Direct is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

“Personal information” means information that identifies or can reasonably be linked to you or another person. Personal information does not include data that has been anonymized or de-identified. Depending on how you interact with the Services, where you live, and as permitted by law, we may collect or process the following categories (including inferences made from them):

  • Contact details (name, address, billing and shipping address, phone number, email address).
  • Financial information (payment method details and transaction information; we do not store full payment card numbers).
  • Account information (username, password, security questions, preferences, settings).
  • Transaction information (items viewed, added to cart/wishlist, purchased, returned, exchanged, or canceled; order history).
  • Communications with us (customer support inquiries, survey responses, product reviews).
  • Device information (device type, OS, browser, IP address, mobile carrier, identifiers).
  • Usage information (how and when you interact with the Services; pages viewed; links clicked; referrers).
  • Approximate location information (e.g., from IP address or shipping address for localization, tax, shipping estimates, and fraud prevention).
  • SMS program information (mobile number, consent/opt-in status and time stamps, message interactions, preferences if you join our text program).

Sources of Personal Information

  • Directly from you (account creation, checkout, support, reviews, email/SMS opt-ins).
  • Automatically via cookies, pixels, SDKs, and similar technologies on your device/browser when you use the Services.
  • Service providers (payments, analytics, fulfillment, customer support, marketing, security).
  • Partners/third parties (ad networks, social platforms, fraud-prevention providers, where permitted).

How We Use Personal Information

  • Provide, tailor, and improve the Services (orders, payments, shipping, returns, account management, remembering preferences, product recommendations, site optimization).
  • Marketing and advertising (email, SMS/text messaging if you opt in, and online ads across our site and third-party properties).
  • Security and fraud prevention (authentication; detecting, investigating, and preventing fraudulent, illegal, or malicious activity).
  • Communications (customer support, transactional updates, service announcements).
  • Legal compliance and enforcing our terms and policies.

Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to operate and improve the Services (e.g., enabling site functionality, remembering items in your cart, analytics, personalization, and advertising). You can control certain cookies in your browser settings; some features may not function properly if cookies are disabled.

SMS Abandoned Cart Disclosure

“Pure Spa Direct’s website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS.”

Our SMS/Text Messaging Program

If you consent to receive text messages from us, we will send messages (e.g., order updates, account alerts, cart reminders, promotions) to the mobile number you provide. Message frequency varies. Message and data rates may apply. Consent is not a condition of purchase.

  • Program details: Messages may be sent using an automatic telephone dialing system or other technology through our SMS provider. Supported carriers are not liable for delayed or undelivered messages.
  • Opt-out: Text STOP to +1 833-408-7685 or use the unsubscribe link (where available). You will receive a one-time confirmation text.
  • Help: Text HELP to +1 833-408-7685 or email service1@purespadirect.com.
  • What we collect: Your mobile number, opt-in/opt-out status and time stamps, and interaction data necessary to deliver and improve the program.
  • How we use it: To operate the SMS program (e.g., cart reminders, shipping alerts, promotions), prevent abuse/fraud, and improve performance.

Important SMS Carve-Out: The disclosures below about sharing do not apply to text messaging originator opt-in data and consent. This information will not be shared with any third parties.

How We Disclose Personal Information

We may disclose personal information in the following circumstances, subject to this Privacy Policy:

  • With Shopify and other vendors/service providers (IT, payments, analytics, support, cloud hosting, fulfillment, shipping, marketing) who process data on our behalf.
  • With business/marketing partners to provide marketing services and to advertise to you across sites and apps, per their privacy notices. Depending on where you live, you may have rights to opt out of “sale,” “sharing,” or targeted advertising.
  • At your direction or with your consent (e.g., to ship products, enable social media features, honor integrations you choose).
  • Within our corporate group and affiliates.
  • For legal/safety reasons or in connection with a business transaction (e.g., merger, acquisition, financing, or bankruptcy), or to enforce our terms and protect users and the Services.

SMS exception: As noted above, text messaging originator opt-in data and consent are not shared with third parties.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services. Information you submit to the Services will be transmitted to Shopify and to third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

We may use Shopify features that incorporate information from your interactions with our store, with other merchants, and with Shopify. In such cases Shopify is responsible for processing, including responding to requests to exercise rights regarding that processing. For more information, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may link to websites or platforms operated by third parties. If you follow links to sites not controlled by us, review their privacy and security policies. We are not responsible for the privacy or security of such sites or for information you provide on public or semi-public areas of those platforms.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided personal information, contact us to request deletion. As of the Effective Date, we do not have actual knowledge that we “share” or “sell” (as defined by applicable law) personal information of individuals under 16.

Security

We implement reasonable safeguards; however, no security measures are perfect. Information transmitted to us may not be secure in transit. Do not use unsecure channels to send sensitive information.

Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy—such as maintaining your account, providing Services, complying with legal obligations, resolving disputes, and enforcing agreements and policies.

Your Rights and Choices

Depending on your location, you may have some or all of the following rights (subject to limitations under applicable law):

  • Access/Know the personal information we hold about you.
  • Delete personal information.
  • Correct inaccurate personal information.
  • Data portability (receive a copy and/or request transfer, where feasible).
  • Opt out of “Sale,” “Sharing,” or targeted advertising (as defined by law).
  • Manage communications (unsubscribe links in emails; reply STOP to SMS; see cookie controls in your browser/device).

EEA/UK residents: You may also have the right to object to processing, request restriction of processing, and withdraw consent where we rely on consent. Withdrawal will not affect prior processing.

You can exercise rights where indicated on the Services or by contacting us (see “Contact”). We will not discriminate against you for exercising your rights. We may verify your identity as permitted by law. You may authorize an agent to make requests on your behalf; we may require proof of authorization and direct verification.

Location Information and Location-Based Services

We may collect approximate location (e.g., from IP address or shipping address) to provide localized content (currency, taxes), shipping options, fraud prevention, and analytics. If you grant your device or browser access to more precise location (e.g., GPS), we will use it only for the specific feature you enable (e.g., store locator or delivery estimates) and will disclose the purpose at the point of collection. You can disable precise location in your device/browser settings.

International Transfers

We may transfer, store, and process your personal information outside your country. If we transfer personal information from the EEA/UK, we rely on recognized transfer mechanisms (e.g., the European Commission’s Standard Contractual Clauses and UK equivalents) unless the destination offers an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Policy on this site, update the “Last updated” date, and provide notice as required by law.

Contact

Questions about our privacy practices or this Policy, or to exercise your rights: service1@purespadirect.com or 114 New South Road, Hicksville, NY 11801, US. For data protection purposes, Pure Spa Direct is the controller.