Privacy Policy

1. Scope

This Privacy Policy explains how Purpose Driven Marketplace / NewWin Works ("PDM," "we," "us") collects, uses, shares, and protects personal information when you use purposedrivenmarketplace.com, business sites we host, signup/contact forms, ordering tools, messaging, and the Purpose AI assistant.

We do not sell personal information and we do not share it for cross-context behavioral advertising as those terms are commonly used under the CCPA/CPRA.

2. Categories of Personal Information We Collect

Identifiers & contact

• Name, business name, email, phone number, mailing/business address
• Account or lead identifiers, IP address, approximate location derived from IP

Commercial & business content

• Menus/catalogs, prices, photos, hours, services, messages you send through the Service
• Order details (items, instructions, pickup/delivery preferences)

Internet / technical

• Device/browser type, pages viewed, basic diagnostics and security logs
• Consent records (timestamp, Terms/Privacy version IDs, marketing SMS opt-in status, form source)

AI interaction data

• Prompts and drafts in Purpose chats used to provide the assistant and improve reliability/safety

We do not intentionally collect government ID numbers, precise geolocation, or payment card data on the free core Service. If a payment processor is used for optional paid features, card data is handled by that processor under its terms.

3. Sources

Information comes from you (forms, chats, site content you provide), your customers when they place orders or contact you through tools we host, automatic collection (logs/analytics), and service providers acting on our behalf.

4. How We Use Information (Business Purposes)

• Provide, secure, and improve websites, ordering, notifications, and Purpose drafts
• Respond to leads and support requests; send transactional messages
• Send marketing SMS only if you separately opt in
• Detect abuse/fraud; comply with law; enforce Terms
• Maintain consent and audit logs

5. Sharing (No Sale)

We do not sell personal information. We may share limited data with:

• Service providers / processors (e.g., Cloudflare hosting, email/SMS providers such as SendGrid/Twilio, analytics limited to operating the Service) under contracts limiting use to providing services to us
• Business owners — customer order/contact details needed to fulfill an order or respond
• Legal / safety — when required by law, valid legal process, or to protect rights and safety
• Business transfers — as part of a merger, acquisition, or asset transfer, subject to this Policy's spirit

6. SMS & Communications

Transactional SMS may use your or your customer's number for order and account messages. Marketing SMS requires separate opt-in and is never bundled into the Terms acceptance checkbox. Opt out of marketing or a given SMS program by replying STOP where supported.

7. Retention & Security

We retain information as long as needed for the purposes above, including leads/consent logs for compliance, business content while an account is active, and order records for a limited period (typically up to 90 days for routine customer order payloads unless a longer period is required for disputes or law). We use HTTPS, access controls, and reputable infrastructure (including Cloudflare). No method of transmission or storage is 100% secure.

8. Your Choices & CCPA/CPRA-Style Rights

Depending on where you live (especially California), you may have the right to:

• Know / access personal information we hold about you
• Delete personal information (subject to legal exceptions)
• Correct inaccurate personal information
• Opt out of sale/sharing (we do not sell; this is a confirmation)
• Non-discrimination for exercising privacy rights
• Limit use of sensitive personal information (we minimize collection)

To exercise rights, email privacy@purposedrivenmarketplace.com. We will verify requests and respond within timeframes required by law (typically 45 days under CCPA, with possible extension). Authorized agents may submit requests with proof of authority.

"Do Not Sell or Share My Personal Information": We do not sell or share personal information for cross-context behavioral advertising. If that changes, we will update this Policy and provide a required opt-out mechanism.

9. Cookies & Similar Technologies

We use essential cookies/localStorage for site function (e.g., cart state) and limited analytics/security. We do not use third-party advertising cookies for cross-site tracking on the core marketing site.

10. Children

The Service is directed to businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 where required). Contact us to delete any information collected inadvertently.

11. International Visitors

We operate in the United States. If you access the Service from elsewhere, you understand information may be processed in the U.S.

12. Breach Notification

If a breach of personal information occurs, we will notify affected individuals and regulators as required by applicable law and take reasonable steps to mitigate harm.

13. Changes

We may update this Policy and the version ID. Material changes will be posted with an updated effective date; we may also notify you by email or in-product notice.

14. Contact

Privacy contact — NewWin Works
Email: privacy@purposedrivenmarketplace.com
Alternate: contact@purposedrivenmarketplace.com
Los Angeles / Orange County, California