Privacy Policy

Privacy Policy

Last Update: June 26, 2025

Previous version: February 21, 2024.

At Urban Remedy, your privacy is as important to us as your wellbeing.

This Privacy Policy (“Policy”) explains the type of personal information we process, how we use and disclose it, and your rights and controls when it comes to your information. This Policy supplements our Terms of Service (“Terms”) and applies when you (“you”) use www.urbanremedy.com or our other Services (as defined in our Terms). Urban Remedy, Inc. (“we,” “us”, or “our”) operates the Services. By using or accessing the Services, you signify that you have read, understand and agree to be bound by this Policy.

We primarily use Personal Information in conjunction with providing information about or selling our products (“Products”), including through our retail partners, such as Instacart and Whole Foods.

Updates: We update this Policy periodically as our services change. If we materially change the scope or purpose of our processing, we’ll try to notify you. If we have your email address, we may try that way, and we may post a banner or notice on our homepages. The current policy will remain posted on this page as of the Last Update. Therefore, please review this Policy from time to time so that you are aware of the current version.

Contact Us: If you have any questions regarding this policy please contact us at privacy@urbanremedy.com.

When this Policy applies: when you use the Services or we obtain Personal Information about you from any third party. It does not apply:

  • When you exchange data with third-party websites, or any other Outside Links or Materials, as defined in our Terms.
  • To job applicants or current or former personnel. If you are a job applicant, current or former employee or contractor, you are subject to our separate workforce privacy policy.

Again, by using or accessing the Services, you signify that you have read, understand and accept this Policy.

 

Information we collect & why we use it

We and our third-party service providers collect and process information when you interact with the Services. This includes:

  • information you submit or provide directly,
  • data collected automatically by various technologies (which we call “Usage Data”), and

The following tables describe, comprehensively, how the services collect and use your information, and the purpose behind that processing.

 

Information You Submit

What we collect How we use it Why we process it Legal basis

Contact & communications data – if you enroll in our marketing programs, your contact information and your interactions via our SMS or email service providers.

We and our service providers collect, analyze, process, profile and store your contact and communications data. We do not sell or share contact & communications data.

  • To send you relevant marketing emails or texts
  • To improve our Services.

Consent. Opt-out anytime.

As part of performance of a contract (including our Mobile Terms).

Location data –if you use the store locator, Google Maps will collect your input location or, if you consent, your GPS location, to show you nearby stores and is subject to the Google privacy policy.

While we do not store precise geolocation information (GPS), we may process, analyze and store general location information.

  • To help you find nearby retailers
  • To understand our audience and inform our product and retailer roadmap

Consent (browser-level precise geolocation)

Performance of a contract

Our legitimate interest in, and improving our product offerings and local availability to our customer base.

Feedback and ratings data – including ratings and plain text feedback on how we can improve our services.

We process, review, store, and analyze feedback and satisfaction data.

  • To inform our product roadmap and services with user feedback.

Consent.

Our legitimate interest in operating, managing, and improving our Services.

 

Usage Data

What’s processed How we use it Why we process it Legal basis

Device information – IP address, device identifiers, user agent.

We collect, process and store your device information.

  • For fraud prevention.
  • To administer your account and tailor the Services based on your geography.

Our legitimate interest in keeping our services safe and secure and to provide a valid and relevant service to our users.

Activity data – the Web page you came from, the URL you go to next, pages you visit, and the time and duration of the activity.

We and third parties collect, analyze, process, and store activity data including via automated means. For example, the data Facebook collects on our Services allow us and others to show you ads elsewhere.

  • For fraud prevention.
  • To improve our services.

Our legitimate interests in reaching our visitors elsewhere; understanding how users interact with and use our services; and keeping our services safe and secure.

As part of performance of a contract.

 

Information We Receive From Others

What’s processed How we use it Why we process it Legal basis

Analytics and advertising data – we receive unique identifiers and demographic, location and interest-based info

We receive analytics data from providers of analytics and technical services, such as Google Analytics

  • To allow us to advertise to you elsewhere online
  • To develop and enrich datasets about visitors, users and others

Our legitimate interests in reaching those who are interested in our products and services, and ensuring our services are available and secure

Purchase Data – if you use an outbound referral link, we may receive information about any resulting transaction or interaction, such as cart behavior, items purchased and purchase price

We receive purchase data from retailers and providers of technical, payment and delivery services

  • To associate purchases with your account or profile
  • To validate purchases and interactions attributable to activity on the Services

As part of performance of a contract.

Our legitimate interest in operating, managing, and improving our Services.

 

Any personal information that Urban Remedy obtains from other third-party sources will be processed by Urban Remedy in accordance with this Policy and all applicable laws. For example, any use and transfer of information via Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

 

Technologies in use

When you use and interact with the Services, software automatically collects Usage Data. To give you more insight, this section summarizes the main types of technologies the Services to generate and collect Usage Data:

Cookies and Local Storage

Cookies and local storage may be set and accessed on your computer. Upon your first visit to the Services, a cookie or local storage will be sent to your computer that uniquely identifies your browser. “Cookies” and local storage are small files containing a string of characters that is sent to your computer’s browser and stored on your device when you visit a website. Most Web services use cookies to provide useful features for their users.

Most browsers are initially set up to accept cookies. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent; however, if you reject cookies, you will not be able to sign in to the Services or take full advantage of our Services. Additionally, if you clear all cookies on your browser at any point after setting your browser to refuse all cookies or indicate when a cookie is being sent, you will have to again reset your browser to refuse all cookies or indicate when a cookie is being sent.

Pixel Tags

The Services allow the placement of “pixel tags,” which are small graphic files that allow us and third parties to monitor the use of the Services and collect Usage Data. A pixel tag can collect information such as the IP address of the device that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time (and length of time) the page containing the pixel tag was viewed; the type of browser that retrieved the pixel tag; and the identification number of any cookie previously placed by that server on your computer.

Security

Urban Remedy has implemented technical, administrative and physical security measures designed to protect your information from unauthorized access, use or disclosure. Still, no data transmission online is 100% secure, so we cannot guarantee or warrant the security of any information you provide, and you do so at your own risk. We cannot promise that your information will remain absolutely secure in all circumstances. We are not responsible for the circumvention of any privacy settings or security measures we may provide.

 

Our disclosures of information to others

This section describes how and why we exchange personal information with contractors and third parties. It also describes exchanges made for certain purposes, like advertising, legal reasons and consensual direct marketing. We may also disclose deidentified and/or anonymized data for these purposes.

For ads & audience-building

We allow certain advertising partners to record your visit so we can reach you elsewhere with advertising. We also market the Services to you through ads facilitated by marketing vendors.

For example, the pixel tags on the Services allow us to market our products and brand to you on other websites using the data collected by those pixel tags. Facebook uses cookies or unique device identifiers, in combination with their own data, to show you ads based on your visits to our webpages and to other sites.

We try to limit how our third-party advertising technology vendors use information they collect from you. Most providers require us to enter contracts that allow them to optimize their ad services and products. Essentially, they combine any information they may gather about you through our Services with information they receive from their other clients. This helps them target ads to you on behalf of their other clients, not just us.

In the past twelve months, technology on the Services have collected these categories of personal information that can be used to personalize advertising:

  • Device Information (including Personal Identifiers)
  • Internet Activity
  • General Geolocation

With service providers

We contract with companies or individuals to provide certain services in regard to our website. These services include facilitating customer communications, chat functionality, surveys, e-mails and website design functions. We call them our “Service Providers.” They may collect and process your personal information on our behalf, only as necessary to provide their services to us. We make every effort to insure that our Service Providers are bound by contract not to use your information for any other purpose.

For legal reasons

We may disclose your Personal Information: (i) in response to subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us; (ii) when we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of our company, our users, or others; and in connection with our Terms of Use and other agreements; or (iii) in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

With your consent or at your request

We may periodically ask for your consent to share your contact information to third parties. Whenever we ask your consent for this reason, we will summarize the purpose and scope of the disclosure. For example, we may offer discounts to you if you consent to join our mailing list or participate in a promotion involving direct marketing communications.

In those cases, the Services will display a tickbox near an email-entry field explaining that by submitting your information, you agree to share your email with the content provider.

To be clear, we only exchange information about you with third parties for direct marketing purposes if you opt in, and will only do so until you opt out.

 

How long we retain your information

We retain your Personal Information for as long as reasonably necessary to fulfil the purposes set forth in this Policy, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

We determine retention periods by assessing the amount, nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Children under 16

The services are intended for adults. We do not knowingly collect or solicit personal information directly from anyone under the age of 16. In the event that we learn that we have collected personal information from anyone under 16 we will delete that information as quickly as possible.

If you are under 16, please leave the Services. If you are a parent or guardian of a child under 16 years of age and you believe your child has provided us with Personal Information, please contact us at privacy@urbanremedy.com.

 

How to control your privacy

As a user of the Services, you have rights and choices about your personal information. We want you to be in control of your information, so we want to remind you of the following options and tools available to you:

  • Account controls: You can update the personal information in your Account through the account settings made available on the services. Any updated information will be reflected in our records and throughout the services promptly.
  • Marketing opt-outs: you may opt-out of any marketing communications from us by following the unsubscribe instructions in the communication you receive. We may continue to send you communications regarding the Services, such as notices about administrative updates, transaction reports, and changes to the Services, this Policy or the Terms.
  • Exercising rights: If any of the local privacy laws listed below apply to you, see Requesting information to exercise your rights.
  • Disallowing Location Data Collection: If you opted-in to disclose your location to Google for Store Locator purposes, you can change your location sharing settings at the browser or device level at any time.
  • Personalized ads: In addition to any choices the services offer you, there are several ways to exercise choice regarding technologies that are similar to cookies, such as browser storage and plugins. For example, many popular browsers provide the ability to clear browser storage, typically in the settings or preferences area. See your browser’s help function or support area to learn more. For more about targeted advertising, go to the DAA Webchoices Browser Check or the NAI Opt Out of Interest-Based Advertising page. You can download the AppChoices app to opt out in mobile apps.]

 

Information about local privacy laws

Our practices generally do not differ based on your location, but your rights and choices depend in part on the law where you live. If any of these local privacy laws apply to you, that section overrides any contrary descriptions elsewhere in the Policy as they relate to you.

If you have questions about your rights under other data privacy laws, please contact us. However, as our Products are only available in the United States and Canada, we may be unable to accommodate requests under local laws in other jurisdictions.

Requesting information: To exercise any rights described in this Policy, please contact us. Your request must:

  • provide sufficient information to identify you and the law that applies to you, such as your name, e-mail address, home or work address, or other information we maintain.
  • not include social security numbers, driver’s license numbers, third-party account numbers, credit or debit card numbers, or health information.

Verifying requests: We verify requests by attempting to match information in the request to information we maintain. We may require you to confirm your identity by authenticating via your account or other access method.

  • If your request is unclear or we are unable to authenticate your identity, we may ask for more information, in accordance with law that applies to you.
  • If you are an authorized agent submitting a request on a user’s behalf (where permitted), we may require proof of the user’s written authorization before processing the request.
  • If we cannot verify the identity of the data subject in the request, we may deny it, in full or in part.

Responses to requests: We will respond to your request as quickly as we can, taking into account the nature of your request and the volume of pending requests. The content of our response will vary with the nature of your request, but will always respond in accordance with any deadlines or requirements specified by the laws that applies to you.

  • At times, we may be unable to provide responsive personal information, such as when disclosure would create a substantial, articulable and unreasonable risk to the security of the information, user accounts, or the security of our systems or networks. We do not disclose account passwords or any other non-personal information that enables access to an account.
  • We reserve the right to retain an archive of any deleted information, to the extent permitted by law. We may also retain deidentified or aggregate data derived from personal information.

Appealing decisions: If your local law provides for an appeal right, you may appeal our decision regarding a request by contacting us.

Information for Users in Certain U.S. States

Exercising your rights: As described in the “How to control your privacy” section of the Policy, all users have control over their information and can limit what data we process. If you are a resident of California, Colorado, Connecticut, Utah, Virginia or another state with a similar data-privacy law, you may have additional rights that you (or, in certain states, an authorized agent acting on your behalf) can exercise by contacting us, including the right to:

  • More information about the categories and specific pieces of personal information we have collected and disclosed for a business purpose in the last 12 months
  • Access and/or receive a copy of certain personal information we hold about you
  • Correct your personal information
  • Delete certain personal information we hold about you
  • Receive information about the financial incentives that we offer to you, if any
  • Opt out of the processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable

You also have the right to not be discriminated against for exercising your rights. You may also have the right to opt out of “sales” of your information and “sharing/processing of your information for targeted advertising.”

Certain information may be exempt from the requests above under applicable law. For example, we need to retain certain information in order to provide our services to you. We also need to take reasonable steps to verify your identity before responding to a request.

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.

Additional Information for Users in California

In addition to the rights described above, consumers residing in California are afforded the right to certain additional information with respect to their personal information under the California Consumer Privacy Act (“CCPA”). If you are a California resident, this section applies to you.

Our collection and use of personal information: We collect the following categories of personal information: identifiers (such as your username, the email address you used to sign up, and your phone number if you’ve chosen to provide it); commercial information (a record of what you’ve bought from trade-name, if anything); financial data (payment information and your history of purchases from trade-name); internet or other network information (how you interact with the services); location information (because your IP address may indicate your general location); inference data about you (for example, what content you may be interested in); and other information that identifies or can be reasonably associated with you.

For more information about what we collect and the sources of such collection, please see the “Information we collect & why we use it” section of the Privacy Policy. To the extent we collect or use sensitive personal information as defined by law (such as the CCPA), we do so in accordance with applicable legal requirements, and we do not use or disclose it other than for purposes for which there is not a right to limit under the CCPA.

  • Disclosure of personal information: We may disclose and share your personal information with service providers and third parties as described in the “Our disclosures of information to others” section of the Policy. We disclose the categories of personal information mentioned in that section for business or commercial purposes.
  • We disclose personal information for the following categories of purposes, as defined by CCPA:
    • Advertising and Marketing
    • Cross-Context Behavioral Advertising
    • Error Management
    • Internal Research
    • Provide Products or Services
    • Quality Assurance
    • Security
    • Short-Term Transient Use
  • We retain personal information as described in the “How long we retain your information” section of the Policy.

We do not share your personal information with third-parties for their own direct marketing purposes without your consent. We do so only if you have consented and only until you withdraw your consent.

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us.

Information for users in Canada

Overview: As described in the “How to control your privacy” section of the Policy, all our users have control over their information and can limit what data we process. In addition to these rights, users residing in Canada are afforded the right to certain additional information with respect to their personal information under the Personal Information and Electronic Documents Act (PIPEDA). If you are a Canadian resident, this section applies to you.

Exercising your rights: Users in Canada have additional rights that you can exercise by contacting us. Those rights include:

  • Right of access to your personal data
  • Right to rectify your personal data if they are incorrect
  • Right to withdraw consent. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal
  • Right to file a complaint regarding the processing of your personal data with the Office of the Privacy Commissioner of Canada

If you have any questions about these rights, wish to exercise them, or request an appeal, see Requesting information or contact us. Additionally, you may contact trade-name’s Privacy Officer by emailing contact-email.