This Privacy Policy (the “Policy”) sets out the practices of Haur B.V. (the “Platform Operator”, “We”, “Our”, or “Us”) regarding the collection, use, disclosure, and protection of your personal data as a customer (“You”) on the website https://glpura.com (the “Website”). It applies when you visit the Website, make a purchase, or otherwise interact with any of our services (collectively, the “Services”). The Platform Operator provides a platform on which you may purchase products from STR.VERT CONSULTANTS LTD (the “Seller”). When you carry out a transaction on the Website, you enter into a binding agreement with the Platform Operator for the provision of the Services. Your use of the Services is also subject to our Terms and Conditions (the “Terms and Conditions”), and by using the Services you confirm your acceptance of both the Policy and the Terms and Conditions.

We are committed to protecting your privacy and to processing your personal data in a transparent and secure manner, in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please review the Terms and Conditions and this Policy carefully before continuing to use the Website or making a purchase.

1. Personal Data We Collect

In this Policy, “personal data” refers to any information that identifies you or can reasonably be linked to you. In order to provide the Services and fulfil our contractual obligations, we collect and process the following categories of personal data:

1. Your full name, delivery and billing addresses, telephone number, and email address.
2. Information required to process your payments, such as credit or debit card details, transaction records, and other billing information.
3. A history of your transactions, including products you have viewed, purchased, returned, or exchanged.
4. Records of your correspondence with us, including customer-service enquiries and any feedback you provide.
5. Information about the device, browser, and network connection you use to access our Services, including your IP address and other unique identifiers.
6. Information about how you navigate and interact with our Services, such as the pages you visit and the features you use.

We may collect personal data from various sources – directly from you, automatically through cookies and similar tracking technologies during your use of the Website, and from third-party service providers or partners who are essential to the operation of our business.

2. How We Use Your Personal Data

We process your personal data for a number of essential purposes, depending on how you interact with the Services:

• To provide, customise, and improve the Services, we use your data to perform our contract with you. This includes processing your payments, fulfilling your orders by sharing details with the Seller for shipping and handling returns, for which we use your identity and contact data, financial and payment data, and commercial and activity data. This processing is based on contractual necessity (Article 6(1)(b) UK GDPR), and data relating to transactions is retained for ten years. We also use your data, including technical data and interaction data, to personalise your experience, save your preferences, and suggest products based on your activity. This is based on our legitimate interests (Article 6(1)(f) UK GDPR) in improving and personalising the Services; such data is retained for one month after your last use of the Website.
• For marketing and advertising purposes, we may, on the basis of your express consent (Article 6(1)(a) UK GDPR), send you promotional offers and updates by email or SMS, using your identity and contact data as well as commercial and activity data. In addition, on the basis of our legitimate interests (Article 6(1)(f) UK GDPR), we may display advertising on the Website that is relevant to your interests, using your purchase history and browsing activity, which includes your commercial and activity data, technical data, and interaction data. Data used for these marketing purposes is retained for five years from your last interaction or until you withdraw your consent.
• For risk management and the protection of the Website and our customers, we process your identity and contact data, financial and payment data, technical data, and interaction data to verify transactions, monitor potentially fraudulent or illegal activity, and ensure the security of your payments. This processing is based on our legitimate interests (Article 6(1)(f) UK GDPR) in maintaining a secure platform. Data used for these purposes is retained for one month after your last use of the Website, although data relating to specific security incidents may be retained for up to ten years.
• For customer service and customer-relationship management, we use your identity and contact data, communication data, and commercial and activity data to provide customer support, answer your queries, and keep you informed about your orders. Our legal basis for this processing is contractual necessity (Article 6(1)(b) UK GDPR) for enquiries relating to your orders, while for general enquiries we rely on your consent when you contact us (Article 6(1)(a) UK GDPR). Data used for customer-service purposes is retained for ten years from the date of your last communication with us.
• For legal compliance and the protection of rights, we may process your information to comply with applicable laws, respond to lawful requests from government authorities, and enforce the Terms and Conditions or protect our legal rights. This may involve all relevant information and may include any of the categories of data we collect. Our legal basis is a legal obligation (Article 6(1)(c) UK GDPR) where we are complying with the law, and our legitimate interests (Article 6(1)(f) UK GDPR) where we are protecting our rights. Data is retained for the period required by law (e.g. ten years for financial records) or for the duration of legal proceedings plus a subsequent period to take account of limitation periods.

3. How We Share Your Personal Data

In order to operate our business and provide the Services, we may share your personal data with the following categories of trusted partners:

• To fulfil your order, we provide the Seller with your shipping and contact details. The Seller is an independent entity responsible for the products you purchase as well as their preparation and dispatch.
• We share the necessary transaction information with secure payment-service providers to authorise and process your payments securely.
• We work with providers who perform services on our behalf, such as IT management, data analytics, marketing, and customer support. We supply only the information they need to carry out their specific function.
• We may share information within our corporate group (e.g. with a parent company or subsidiaries). If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• We may disclose information to comply with the law, enforce the Terms and Conditions, or protect the rights, property, or safety of the Platform Operator, our users, or others.

Any disclosure of personal data is carried out in compliance with the principle of data minimisation. We maintain legally binding data-processing agreements with our third-party service providers to ensure the confidentiality, integrity, and security of your personal data in accordance with the UK GDPR.

4. Your Rights and Choices

Under applicable data-protection law, as a data subject you have the right to exercise the following rights in relation to your personal data:

• You have the right to obtain a copy of the personal data we hold about you. This enables you to verify what data we hold and to ensure that we are processing it lawfully. You may request this information to understand exactly what we have collected, such as your name, email address, purchase history, or other data you have provided.
• If you find that personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. For example, if your address is misspelt or your telephone number has changed, you may request that we update our records.
• You are entitled to ask us to delete your personal data. This right applies in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and there is no other legal basis for us to continue processing it.
• You have the right to restrict the way we use your data without necessarily having it deleted. This right may be exercised where the accuracy of the data is contested or where the processing is unlawful but you do not wish the data to be deleted. We may continue to store your data but may not use it for other purposes.
• You may request to receive your personal data in a structured, commonly used, and machine-readable format, enabling you to transfer your data from one service to another.
• You have the right to object to the processing of your personal data, in particular where we process it on the basis of our legitimate interests. If you object, we must cease processing your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims. This right also enables you to object to the use of your data for direct marketing.

To make a request to exercise any of these rights, please contact us using the methods set out in Section 11 of this Policy. We reserve the right to verify your identity before processing any such request in order to ensure the security of your personal data.

You may manage your marketing-communication preferences at any time. All promotional emails we send contain an unsubscribe link through which you can opt out of future correspondence.

5. Complaints

If you have a complaint about the way we handle your personal data, we encourage you to contact us first, using the contact details set out in Section 11, so that we can seek a timely resolution. You have the right at any time to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data-protection matters (ico.org.uk). Depending on your jurisdiction, you may also have the right to appeal our decision regarding your complaint or to request a further review by contacting us.

6. Use of Cookies and Other Tracking Technologies

The Website uses cookies and similar tracking technologies to enhance and personalise your experience, analyse Website performance, and optimise it for marketing purposes. A cookie is a small data file placed on your device that enables our servers to identify your browser and device on subsequent visits.

Types of Cookies We Use:

Strictly Necessary Cookies – these cookies are essential to the operation of the Website and the provision of the Services. They enable core functions such as your authentication, session management, and secure transactions. Under applicable law, these cookies do not require prior consent.

Performance and Analytics Cookies – these cookies collect aggregated data about your interaction with the Website, such as page visits and traffic sources, solely for the purpose of improving Website functionality. The legal basis for the use of these cookies is your express prior consent.

Targeting and Advertising Cookies – these cookies are designed to track your browsing activity across websites in order to build a profile of your interests and display targeted advertising. Their use is subject to your express prior consent.

You can manage cookie preferences through your browser settings. For further instructions, please refer to the help pages of browsers such as Chrome, Firefox, or Safari.

7. Security and Retention of Your Information

We have implemented and maintain appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access. Nevertheless, no method of transmission over the internet or of electronic storage is completely secure.

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was originally collected – including to meet legal, accounting, or reporting obligations and to resolve disputes.

8. Our Data Policy for Children

The Website is restricted to users aged 18 and over. We accept no responsibility for the collection of data from minors who do not comply with this age restriction. We do not knowingly collect personal data from persons under the age of 18.

9. Third-Party Websites

The Website may contain links to external websites for your convenience. We do not endorse, and accept no liability for, the content, security, or privacy practices of such third-party websites. Access to third-party websites is at your own risk, and we recommend that you review their respective privacy policies.

10. Changes to the Policy

We reserve the right to amend this Privacy Policy at any time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The revised Policy will be published on this page together with the updated effective date. Your continued use of the Website after the publication of any changes constitutes acceptance of the revised Privacy Policy.

11. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy or your data, please contact the Platform Operator: