Privacy Policy

1. Controller

Pure Copywriting GmbH, Paulstraße 9, 44803 Bochum, Germany, represented by Meike Sandhoff. Contact for all data protection matters: support@purecopywriting.com.

2. What we collect, and why

Visiting the site. Our web hosting provider automatically processes technical access data (IP address, browser type, referring page, date and time of access) to serve the site reliably and securely — legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in stable, secure operation. This data is not merged with any other data source and is retained only as long as technically necessary.

Contact form. When you submit the contact form, we process the name, email address, and message content you provide, in order to answer your enquiry — legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (our legitimate interest in responding). At present, form submissions are processed to answer your enquiry only and are not shared with any third-party marketing list. Should we engage a third-party form-processing service in the future, that processor and the applicable data processing agreement (Art. 28 GDPR) will be named here before the change takes effect.

Checkout and orders. Placing an order requires us to process your name, billing address, email, and (optionally) phone number and VAT ID, in order to fulfil the contract — legal basis: Art. 6 (1) (b) GDPR. Payment on this site currently runs through a demonstration checkout: no card data is transmitted to or stored on any server, and no payment is actually processed. We retain order records for the statutory German commercial and tax retention periods (generally six to ten years, §§ 147 AO, 257 HGB) — legal basis: Art. 6 (1) (c) GDPR (legal obligation).

Analytics. We use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how the site is used. Analytics loads only after you actively consent via the cookie banner — legal basis: Art. 6 (1) (a) GDPR (consent). IP addresses are anonymised, and ad personalisation and ad-signal sharing are disabled. You can withdraw consent at any time via “Cookie settings” in the footer; withdrawal stops future data collection and clears the analytics cookies where technically possible.

Cart and checkout state. The shopping cart and checkout step state are stored only in your browser’s local storage, never transmitted to our servers until you complete checkout — see the Cookie Policy for the specific storage keys and their purpose.

3. Recipients

Your data is shared only with: our web hosting provider (processing technical access data on our behalf, Art. 28 GDPR), Google Ireland Limited (analytics, only after consent), and — once selected — a form-processing service for the contact form (updated here before use). We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

4. International transfers

Where a processor is located outside the EU/EEA (such as Google Ireland Limited’s parent Google LLC, USA, for backend processing), transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

5. Retention

Contact-form data: deleted once your enquiry is resolved, unless a longer retention is required by law. Order data: per the statutory retention periods noted above. Analytics data: per Google Analytics 4’s configured retention window, currently 14 months.

6. Your rights

You have the right to: access your data (Art. 15 GDPR), rectify it (Art. 16), have it erased (Art. 17), restrict its processing (Art. 18), receive it in a portable format (Art. 20), and object to processing based on legitimate interest (Art. 21). Where processing is based on consent, you may withdraw it at any time, with no effect on processing carried out before the withdrawal. To exercise any of these rights, contact support@purecopywriting.com.

You also have the right to complain to a supervisory authority. The competent authority for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

7. Hosting

This site is served by a third-party web hosting provider under a data processing agreement (Art. 28 GDPR). The provider’s technical logs are covered under §2 above.