Privacy Policy 

Last revision: April , 2019

Thanks for visiting Purity Herbs! Purity Herbs (“Purity Herbs”, “we”, “us” or “our”) respects your privacy. When it comes to your personal information, we believe in transparency, not surprises. That’s why we’ve set out here what personal information we collect, what we do with it and your choices and rights.

By using any of Purity Herbs Services, you confirm you have agreed to the Legal Notice and read and understood this Privacy Policy and our Cookie Policy.

1. Some key terms and the data controller (Controller)

In our Privacy Policy, when we refer to “Users”, we mean our customers who use our Services, including visitors to our sites. The Users, visitors and customers of, our Users’ sites are “End Users”.

The data controller is CO PURITY HERBS ORGANICS EHF. Freyjunes 4, 603 Akureyri, Iceland - T: +354 4623028  info@purityherbs.is, in the person of the legal representative pro-tempore. The contact email of the Controller is info@purityherbs.is.

2. How does this Privacy Policy apply?

This Privacy Policy describes what we do with personal information that we collect and use for our own Services, such as your account information and information about how you use and interact with our Services, including information you submit to our customer support.

We use cookies and similar technologies. Our Cookie Policy describes what we do in that regard.  

3. Personal information we collect

We collect various personal information regarding you or your device. This includes the following:

  • Information you provide to create an Account, specifically email address, first name and last name. If you sign up for a payment, we receive a portion of your payment information from our payment processor (such as the last four digits, the country of issuance and the expiration date of the payment card).

  • Your marketing preferences.

  • The emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. Please be aware that information on public parts of our sites is available to others.

  • Information you share with us in connection with surveys, contests or promotions.

  • Information from your use of this site. This includes: IP addresses, preferences, information about your browser, network or device (such as browser type and version, operating system, internet service provider, preference settings, unique device IDs and language and other regional settings), information about how you interact with the Services and our Users’ sites (such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and problems you may encounter, such as loading errors).

4. How we collect personal information

We obtain personal information from various sources. We do this in three main ways:

  • You provide some of it directly.

  • We record some of it automatically when you use our Services or Users’ sites (including with technologies like cookies).

  • We receive some of it from third parties (when you make payments to us using our payment processor).

We’ve described this in more detail below.

a. Personal information you provide

We maintain your marketing preferences and the emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. You might also provide us with information in other ways, including by responding to surveys, submitting a form or participating in contests or similar promotions.

Sometimes we require you to provide us with information for contractual or legal reasons. We’ll normally let you know when information is required, and the consequences of failing to provide it. If you do not provide personal information when requested, you may not be able to use our Services if that information is necessary to provide you with the service or if we are legally required to collect it.

b. Personal information obtained from your use of our Services

When you use our Services, we collect information about your activity on and interaction with the Services, such as your IP address(es), your device and browser type.

We use this data to evaluate, provide, protect or improve our Services (including by developing new products and services).

Some of this information is collected automatically using cookies and similar technologies when you use this site. You can read more about our use of cookies in our Cookie Policy. Some of this information is similarly collected automatically through your browser or from your device.

c. Personal information obtained from other sources

If you sign up for payment, we obtain limited information about your payment card from our payment processor, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processor is Rapyd. Rapyd uses and processes your complete payment information in accordance with Rapyd’s privacy policy.

5. How we use your personal information

We use the personal information we obtain about you to:

  • Provision of the Services. Provide and personalize our Services, process payments and respond to your inquiries.

  • Communicating with you. Communicate with you, including by sending you emails about your transactions and Service-related announcements.

  • Newsletter sending. To consent our newsletter sending you must give your explicit consent. To give your consent you must complete the form. To withdraw consent, follow the instructions in the newsletter.

  • Surveys and contests. Administer surveys, contests and other promotions.

  • Promotion. Promote our Services and send you tailored marketing communications about products, services, offers, programs and promotions.Measure the success of those campaigns. For example, we may send different marketing communications to you based on what we think may interest you.

  • Advertising. Analyze your interactions with our Services so we can tailor our advertising to what we think will interest you.

  • Customizing the Services. Provide you with customized services. For example, we use your location information to determine your language preferences or display accurate date and time information. We also use cookies and similar technologies for this purpose.

  • Improving our Services. Analyze and learn about how the Services are accessed and used, evaluate and improve our Services (including by developing new products and services and managing our communications) and monitor and measure the effectiveness of our advertising.

  • Security. Ensure the security and integrity of our Services.

  • Third party relationships. Manage our vendor and partner relationships.

  • Enforcement. Enforce our Terms of Service and other legal terms and policies.

  • Protection. Protect our and others’ interests, rights and property (e.g., to protect our Users from abuse).

  • Complying with law. Comply with applicable legal requirements, such as tax and other government regulations and industry standards, contracts and law enforcement requests.

We process your personal information for the above purposes when:

  • Consent. You have consented to the use of your personal information in a particular way. When you consent, you can change your mind at any time.  

  • Performance of a contract. We need your personal information to provide you with services and products requested by you, or to respond to your inquiries. In other words, so we can perform our contract with you or take steps at your request before entering into one. For example, we need your email address.

  • Legal obligation. We have a legal obligation to use your personal information, such as to comply with applicable tax and other government regulations or to comply with a court order or binding law enforcement request.

  • Legitimate interests. We have a legitimate interest in using your personal information. In particular, we have a legitimate interest in the following cases:

    • To analyze and improve the safety and security of our Services - we do this as it is necessary to pursue our legitimate interests in ensuring Purity Herbs is secure, such as by implementing and enhancing security measures and protections and protecting against fraud, spam and abuse.

    • To share your personal information with other companies that help us provide and improve the Services.

    • To anonymize and subsequently use anonymized information.

    • Protecting you and others. To protect your vital interests, or those of others. 

6. How we share your personal information

We share personal information in the following ways:

  • Service providers. We share personal information with our service providers that perform services on our behalf. For example, we may use third parties to help us provide customer support, manage our advertisements on other sites, send marketing and other communications on our behalf or assist with data storage.

  • Process payments. We transmit your personal information via an encrypted connection to our payment processor.  

  • Following the law or protecting rights and interests. We disclose your personal information if we determine that such disclosure is reasonably necessary to comply with the law, protect our or others’ rights, property or interests or prevent fraud or abuse of Squarespace or our Users or End Users. In particular, we may disclose your personal information in response to lawful requests by public authorities, such as to meet national security or law enforcement requirements.

  • Business transfers. If we're involved in a reorganization, merger, acquisition or sale of some or all of our assets, your personal information may be transferred as part of that deal.

7. Your rights and choices

Where applicable law requires (and subject to any relevant exceptions under law), you may have the right to access, update, change or delete personal information.

You can access, update, change or delete personal information either directly in your Account or by contacting us at info@purityherbs,is to request the required changes. You can exercise your other rights (including deleting your Account) by contacting us at the same email address.

You can also elect not to receive marketing communications by changing your preferences in your Account or by following the unsubscribe instruction in such communications.

Please note that, for technical reasons, there is likely to be a delay in deleting your personal Information from our systems when you ask us to delete it. We also will retain personal Information in order to comply with the law, protect our and others’ rights, resolve disputes or enforce our legal terms or policies, to the extent permitted under applicable law.

You may have the right to restrict or object to the processing of your personal information or to exercise a right to data portability under applicable law. You also may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law. If you are subject to EU data protection laws, we suggest you lodge any such complaints with our lead supervisory authority:

Iceland Data Protection Authority
Address: Rauðarárstígur 10, 105 Reykjavík, Iceland.
Tel. +354 510 9600
E-mail: postur@personuvernd.is

Additionally, if we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.

Our Cookie Policy explains how you can manage cookies and similar technologies.

8. How we protect your personal information

While no service is completely secure, we have a security team dedicated to keeping personal information safe. We maintain administrative, technical and physical safeguards that are intended to appropriately protect against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing of, the personal information in our possession. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities.

9. How we retain your personal information

We retain personal information regarding you or your use of the Services for as long as your Account is active or for as long as needed to provide you or our Users with the Services. We also retain personal information for as long as necessary to achieve the purposes described in this Privacy Policy, for example, to comply with our legal obligations, to protect us in the event of disputes and to enforce our agreements and to protect our and others’ interests.  

The precise periods for which we keep your personal information vary depending on the nature of the information and why we need it. Factors we consider in determining these periods include the minimum required retention period prescribed by law or recommended as best practice, the period during which a claim can be made with respect to an agreement or other matter, whether the personal information has been aggregated or pseudonymized, and other relevant criteria. For example, the period we keep your email address is connected to how long your Account is active.

You may delete your Account by contacting us at info@purityherbs.is and Purity Herbs will delete the personal information it holds about you (unless we need to retain it for the purposes set out in this Privacy Policy).

Please note that in the course of providing the Services, we collect and maintain aggregated, anonymized or de-personalized information which we may retain indefinitely.

10. Data transfers

Personal information that you submit through the Services may be transferred to countries other than where you live. We also store personal information locally on the devices you use to access the Services.

Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.

We rely upon a number of means to transfer personal information which is subject to the European General Data Protection Regulation (“GDPR”) in accordance with Chapter V of the GDPR.  These include:

  • Privacy Shield. We transfer, in accordance with Article 45 of the GDPR, personal information to companies that have certified their compliance with the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks (each individually and jointly, the “Privacy Shield”), including Squarespace, Inc.

  • Standard data protection clauses. We may, in accordance with Article 46 of the GDPR, transfer personal information to recipients that have entered into the European Commission approved contract for the transfer of personal data outside the European Economic Area.  

  • Other means. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding enforcement commitments from the recipient to apply the appropriate safeguards, including as regards data subjects’ rights, or to processors which have committed to comply with binding corporate rules.

11. User payment information

Users’ payment information may be processed via third party eCommerce Payment Processors with which we integrate our Account, in accordance with such eCommerce Payment Processors’ terms and policies.

12. Updates to this Privacy Policy

We’ll update this Privacy Policy from time to time to reflect changes in technology, law, our business operations or any other reason we determine is necessary or appropriate. When we make changes, we’ll update the “Effective Date” at the top of the Privacy Policy and post it on our sites. If we make material changes to it or the ways we process personal information, we’ll notify you (by, for example, prominently posting a notice of the changes on our sites before they take effect or directly sending you a notification).

We encourage you to check back periodically to review this Privacy Policy for any changes since your last visit.  This will help ensure you better understand your relationship with us, including the ways we process your personal information.

13. Who is Purity Herbs?

When we say “Purity Herbs” (or “we”, “us” or “our”), we mean:

PURITY HERBS ORGANICS EHF.

Freyjunes 4, 603 Akureyri, Iceland. - Tel: +354 4623028 - Email: info@purityherbs.is

14. How to contact us

If you have questions, comments or complaints about this Privacy Policy or our privacy practices or if you would like to exercise your rights and choices, please email us at info@purityherbs.is.