Purpose
At Purple Industries, protecting privacy is a priority. The purpose of this Notice is to explain how Purple Industries and its operators collect, use, store, disclose, and otherwise process personal information about customers, signers, recipients, senders, shipment participants, employees, administrators, and other individuals who access or use our websites, applications, tools, subdomains, or related communications and services (collectively, the "Services"). By using the Services, you understand that Purple Industries may collect and use personal information as described in this Notice.
In some cases, Purple Industries may process personal information pursuant to the instructions of a third-party organization, a sender, an employer, or another user who created a workflow, shipment, or signing event. In those cases, that party may determine certain aspects of the processing, and questions relating to the underlying transaction may need to be directed to that party first.
Purple Industries' core Services help users create, complete, transmit, track, and demonstrate the validity of digital documents, signature workflows, shipment workflows, tracking events, and other operational web transactions. Because of that, we may collect and record information such as names, email addresses, timestamps, IP addresses, device details, routing history, workflow actions, and related operational records.
This Notice does not apply to third-party websites, applications, integrations, payment providers, or external destinations that may be linked from the Services. You should review the terms and privacy notices of any third-party services you choose to use.
Collection of Personal Information
You have choices about whether you visit our websites, use our applications, create accounts, upload content, or otherwise provide personal information to us. However, if you do not provide certain information, you may not be able to use some functionality of the Services, including sending requests, signing documents, receiving transactional communications, verifying access, or managing shipment workflows.
Personal Information You Provide to Us
You may provide personal information when you:
- visit our websites or communicate with us by email or contact form
- upload, send, review, or sign a document through the signing workflow
- enter creator, signer, recipient, sender, or shipment details
- track or manage a shipment, label, or delivery event
- request or verify an email PIN for employee or administrator access
- create, update, or use an employee or administrator profile or session
- contact support or send us feedback, complaints, or operational questions
You may also provide us with personal information about other people when you ask us to send a signature request, complete a shipment workflow, add an employee, or otherwise include another person in a transaction or process.
Examples of the categories of information you may provide include:
- identifiers and contact information, such as name, email address, phone number, and shipping or mailing details
- document and transaction information, such as filenames, form data, signatures, timestamps, recipients, and audit details
- shipment and logistics information, such as sender and recipient details, tracking history, label data, service status, and delivery notes
- account and access data, such as administrator or employee email, session records, role information, and verification events
- customer service and communications information, such as emails, messages, support requests, and related records
Personal Information We Collect Automatically
We may automatically collect personal information from you and your devices when you use the Services, including when you visit a public page without logging in.
- device data, such as IP address, browser type, operating system, device identifiers, and network attributes
- usage data, such as pages visited, links clicked, referring and exit URLs, timestamps, time spent, error logs, and interaction history
- transactional data, such as authentication methods, IP addresses, action history, timestamps, and workflow activity tied to a request or shipment
- preference and session data, such as theme preferences, limited cookie data, local storage data, and security-related session records
Some of this information may be collected through cookies, browser storage, session storage, local storage, server logs, and similar technologies used to remember preferences, maintain sessions, secure the Services, or measure operational performance.
Personal Information We Collect from Other Sources
Subject to applicable law, Purple Industries may receive personal information about you from other sources, including:
- other users who submit your information as part of a document, request, shipment, routing flow, or employee-access request
- organizations or administrators that invite, add, verify, or manage your access to a Purple Industries workflow
- service providers that help us with hosting, email delivery, security, abuse prevention, diagnostics, or support
- public, legal, fraud-prevention, or enforcement sources where disclosure is permitted by law
Information We Process on Behalf of Others
In some cases, Purple Industries processes personal information on behalf of a sender, organization, employer, or other workflow initiator. For example, when a user uploads a document for another person to sign or when an organization manages employee access in a logistics workflow, Purple Industries may process personal information according to that party's instructions. In those situations, the initiating party may be the primary controller for certain aspects of the processing, and questions about the specific transaction may need to be directed to that party first.
Use of Personal Information and Lawful Bases for Processing
In general, and subject to applicable law, Purple Industries uses personal information to provide, maintain, secure, troubleshoot, improve, and enforce the Services. Where applicable data protection law requires a lawful basis for processing and Purple Industries is acting as a controller, the lawful basis for processing depends on the context and the type of information involved.
Purple Industries generally processes personal information where it is necessary to perform a contract or requested service, where the processing is in our legitimate interests and those interests are not overridden by applicable rights, where we have a legal obligation, or where consent is required and has been obtained. If Purple Industries is acting as a processor on behalf of another party, that party may determine the relevant lawful basis.
| Purpose | Examples of personal information used | Typical lawful basis |
|---|---|---|
| Provide and operate the Services you request | contact details, document data, shipment data, account data, verification data | contract, requested service, legitimate interests |
| Record and demonstrate the validity of transactions and workflow events | names, signatures, timestamps, IP addresses, device data, action history, routing history | contract, legitimate interests, legal obligation where applicable |
| Authenticate access, prevent fraud, and protect the platform | email addresses, PIN verification records, session records, device data, usage logs, abuse signals | legitimate interests, legal obligation, requested security service |
| Send transactional and operational communications | email addresses, names, support messages, request status data, shipment status data | contract, legitimate interests |
| Troubleshoot, monitor, and improve the Services | diagnostic logs, usage data, device data, support information, feedback | legitimate interests, consent where required |
| Comply with law and protect legal rights | any information relevant to a dispute, investigation, legal request, or enforcement event | legal obligation, legitimate interests |
Disclosure of Personal Information
Subject to applicable law, Purple Industries may disclose personal information as follows:
- Service providers. We may disclose personal information to service providers that support hosting, storage, email delivery, authentication, security, fraud detection, analytics, support, and platform operations.
- Transaction participants. We may disclose information to signers, senders, recipients, employees, administrators, shipment counterparties, and others involved in a workflow when disclosure is necessary to operate that workflow.
- Organizations and administrators. When an organization or administrator manages access or workflows associated with an email address or user role, that organization or administrator may be able to see or control information related to that workflow or account use.
- Legal, safety, and enforcement purposes. We may disclose information to comply with legal obligations, respond to lawful requests, investigate misuse, protect the Services, protect people or property, or establish, exercise, or defend legal claims.
- Corporate or operational transfers. Information may be disclosed as part of a reorganization, acquisition, financing, asset transfer, or similar transaction involving the business or its operations, subject to applicable law.
- Consent or direction. We may disclose information in other ways where you ask us to do so, direct us to do so, or consent to the disclosure.
Purple Industries does not publicly display private document content or private shipment information except as required by the workflow, directed by a user, or permitted or required by law.
Retention of Personal Information
Purple Industries keeps personal information for no longer than is reasonably necessary for the purposes for which it is processed, including to provide requested services, support platform operations, complete workflows, maintain security, investigate misuse, meet legal obligations, resolve disputes, and enforce our policies and rights.
Retention periods may vary depending on factors such as:
- the type of service, request, document, shipment, or workflow involved
- the sensitivity of the information and the operational need for the record
- applicable legal, regulatory, tax, audit, fraud-prevention, or evidentiary requirements
- backup cycles, technical constraints, and incident-response needs
Where deletion or anonymization is not immediately possible because of legal, technical, or operational constraints, Purple Industries may secure the information and limit active use of it until deletion or further minimization is feasible.
Your Choices
This section describes many of the choices you may have regarding the collection, use, storage, or other processing of personal information.
Providing Information
You may choose not to provide certain personal information. However, if you do not provide information needed for a particular service or workflow, you may not be able to access or use that functionality.
Emails and Communications
Transactional, security, verification, and workflow communications are often necessary to operate the Services. Even if you limit some optional communications, Purple Industries may still send service, security, legal, or account-related messages.
Cookies, Browser Storage, and Device Settings
You may be able to limit certain cookies, browser storage, or device permissions through your browser or device settings. However, if you block some technologies, portions of the Services may not function correctly, including theme preferences, session continuity, and security controls.
Complaints and Questions
If you have questions or complaints regarding this Notice or our data-use practices, you may contact us at info@purpleindustries.uk.
Your Privacy Rights and Choices
Depending on your location and applicable law, you may have rights relating to your personal information, including rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where processing is based on consent.
You may also request information about the categories of personal information involved, the categories of recipients, the business or operational purposes for processing, the source of the information, and how long it is retained or the criteria used to determine retention.
Purple Industries may require information sufficient to verify the identity of the requesting person before fulfilling a request. We may also verify the authority of an authorized agent or representative. Certain information may be exempt from requests under applicable law, and certain information may be required for us to continue providing a requested service.
If Purple Industries processes information on behalf of a sender, employer, organization, or other workflow initiator, we may direct the request to that party or ask that the request be submitted to them first.
Purple Industries may process or store information in jurisdictions other than your own through service providers, infrastructure, or operational support systems. By using the Services where such transfers are permitted by law, you understand that processing may occur in those jurisdictions, subject to applicable safeguards and legal requirements.
If you are dissatisfied with our response, you may also have the right to contact a relevant supervisory or regulatory authority in your jurisdiction.
Children's Privacy
The Services are not directed to children and are not intended for use by anyone under 18 years of age, or any higher age required by applicable law. Purple Industries does not knowingly collect personal information directly from children for independent use of the Services. If you believe that a child has provided personal information to Purple Industries in a way that should be removed, please contact info@purpleindustries.uk.
Notice to California Residents
In addition to the other information in this Notice, California residents may have certain rights under the California Consumer Privacy Act and related laws. This section summarizes the categories of personal information Purple Industries may collect, the business or commercial purposes for which it may be used, and the categories of recipients to whom it may be disclosed for business purposes.
| Category | Typical purpose | Typical recipients | Sold or shared for cross-context advertising |
|---|---|---|---|
| identifiers and contact information | provide services, communicate, verify access, support workflows, enforce security | service providers, transaction participants, administrators, legal authorities where required | not intentionally sold for money |
| transaction, document, and shipment information | operate signing and logistics workflows, maintain history, resolve disputes, establish transaction validity | service providers, transaction participants, legal authorities where required | not intentionally sold for money |
| internet, device, session, and usage information | security, troubleshooting, analytics, abuse prevention, service improvement | service providers, security providers, legal authorities where required | not intentionally sold for money |
| support and communications information | answer questions, investigate issues, improve service reliability, maintain records | service providers, support personnel, legal authorities where required | not intentionally sold for money |
Subject to applicable law, California residents may have the right to request access to categories or specific pieces of personal information, request deletion, request correction, and receive information about disclosures for business purposes. Purple Industries will not discriminate against an individual for exercising applicable privacy rights.
To submit a California privacy request, contact info@purpleindustries.uk. Purple Industries may verify identity before acting on a request.
How We Protect Your Personal Information
Purple Industries uses technical, organizational, and administrative measures designed to protect personal information against accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, acquisition, or access. Depending on the service and context, these measures may include access controls, session controls, audit logs, verification flows, rate limits, provider safeguards, restricted administrative access, and security monitoring.
Access to personal information is intended to be limited to persons who need it for a legitimate operational, support, security, or legal purpose. Even so, no method of transmission, storage, or processing is completely secure, and Purple Industries cannot guarantee absolute security, uninterrupted availability, or error-free operation.
Misuse, Spam, and Enforcement
Spam, harassment, impersonation, fraud, unlawful content, unauthorized document handling, unauthorized shipment activity, and other forms of misuse are prohibited.
Any use of the create PDF function more than 5 times in a 24-hour period may be limited and may be treated by Purple Industries as potential misuse, abuse, or automated activity.
Purple Industries may suspend, block, restrict, investigate, log, preserve records of, or report any account, email, session, IP address, workflow, or activity associated with suspected misuse, policy violations, security incidents, or unlawful conduct.
Platform Rules, Disclaimers, and Liability Limits
Users are solely responsible for all files, documents, signatures, shipment details, contacts, recipients, routing instructions, employee entries, labels, messages, and other content or instructions they upload, submit, generate, direct, or distribute through Purple Industries.
To the maximum extent permitted by applicable law, Purple Industries, its operators, affiliates, personnel, and service providers disclaim responsibility and liability for user-uploaded, user-generated, user-directed, or user-distributed content, instructions, communications, documents, shipments, routing data, labels, recipient selections, or transaction outcomes.
The Services are provided on an "as is" and "as available" basis to the fullest extent permitted by law. Purple Industries does not warrant that the Services will be uninterrupted, error-free, available at all times, legally sufficient for any particular purpose, or free from delay, loss, interception, or misuse by third parties.
Users represent and warrant that they have all rights, permissions, notices, consents, and lawful authority needed to upload content, request signatures, send communications, create shipments, issue labels, add employees, and otherwise use the Services. Users are solely responsible for compliance with applicable law, contract, confidentiality obligations, consumer-protection obligations, privacy duties, export obligations, shipment restrictions, and any other obligations related to their use of the Services.
To the maximum extent permitted by law, Purple Industries is not liable for direct, indirect, incidental, consequential, special, exemplary, punitive, or business-related losses arising out of or related to user conduct, user error, recipient error, inaccurate or unlawful content, unauthorized access, failed delivery caused by user-supplied information, shipment disputes, refusal by a recipient, security events outside Purple Industries' reasonable control, third-party infrastructure failures, or the legality, validity, enforceability, accuracy, completeness, or business consequences of any document, signature, message, shipment, instruction, or transaction processed through the Services.
To the maximum extent permitted by law, Purple Industries has no independent duty to screen, verify, validate, monitor, or guarantee the accuracy, legality, enforceability, authenticity, identity, authority, or completeness of user content, recipient information, shipment instructions, attached documents, or transaction intent, except where a non-waivable legal duty expressly requires otherwise.
To the maximum extent permitted by law, each user agrees to defend, indemnify, and hold harmless Purple Industries, its operators, affiliates, personnel, contractors, and service providers from and against claims, actions, liabilities, damages, judgments, penalties, fines, losses, costs, and expenses, including reasonable legal and enforcement costs, arising out of or relating to user content, user instructions, misuse of the Services, violations of this Notice or platform rules, unauthorized document handling, unlawful communications, shipment disputes, infringement claims, privacy complaints caused by user actions, or violations of any rights of another person or entity.
Nothing in this Notice is intended to exclude or limit liability to the extent such exclusion or limitation is not permitted under applicable law. Any disclaimer, exclusion, or limitation described here will apply only to the fullest extent permitted by law.
Changes to This Privacy Notice
Purple Industries may amend this Notice from time to time to reflect changes in law, technology, operational practices, products, services, or business structure. The version date at the top of this Notice indicates when it was last updated. Depending on the type of change, Purple Industries may provide notice by updating this page, adjusting the version date, or using another reasonable method of communication.
How to Contact Us
For questions, complaints, or requests regarding this Privacy Notice or Purple Industries' processing of personal information, please contact info@purpleindustries.uk.
If your information was processed as part of a document, shipment, or workflow initiated by another person or organization, you may also need to contact that sender, organization, or administrator directly in the first instance.