urbanXtracts
Privacy Policy
Updated: June 11, 2026
Privacy Policy
Article 19: Scope of this Privacy Policy
19.1. This Privacy Policy describes how urbanXtracts collects, uses, discloses, and otherwise processes information relating to identified or identifiable individuals, households, or devices, including information collected online or through digital interactions with the Services, customer support interactions, account creation, purchases, subscriptions, promotions, messaging programs, and other interactions with us.
19.2. This Privacy Policy applies only to information processed by or on behalf of urbanXtracts in connection with the Services. It does not apply to information processed by independent third parties that we do not control, including payment processors, social media platforms, analytics providers, advertising platforms, carriers, or websites and services not operated by urbanXtracts, to the extent they process information for their own purposes rather than on our behalf, even if linked from the Services. Those independent third parties have their own privacy policies, which govern their practices.
19.3. The Services are hosted or supported in part through Wix and may incorporate Wix-provided infrastructure, ecommerce functionality, forms, customer relationship tools, analytics, communication tools, and connected applications. As a result, personal information may be processed by Wix and other service providers acting on our behalf or in support of the Services, subject to applicable law and contractual arrangements. Processing performed by these vendors and service providers on our behalf is covered by the practices described in this Privacy Policy, including Article 25.
19.4. Additional disclosures may apply depending on your state of residence or the specific Service, campaign, product, or data-processing context.
Article 20: Information We Collect
We may collect the following categories of information, depending on how you interact with the Services:
Identifiers and contact information. Such as your name, email address, telephone number, postal address, account username, loyalty identifier, customer number, or similar identifiers.
Commercial information. Such as purchase history, product preferences, cart activity, transaction details, order information, loyalty activity, and records of products or services considered or obtained.
Payment and transaction information. Such as billing address, payment token information received from payment processors, transaction metadata, fraud-screening results, and related records. We generally do not store full payment card numbers.
Age, eligibility, and verification information. Such as date of birth, age-gate responses, ID verification status, eligibility confirmations, and related compliance records.
Device, browser, and network information. Such as IP address, browser type, operating system, device identifiers, online identifiers, language preferences, referring URLs, approximate geolocation derived from IP address, and similar technical information.
Usage and interaction information. Such as pages viewed, links clicked, session attributes, site navigation, feature usage, time spent, scrolling or engagement events, and interactions with emails, text messages, or customer support channels.
Communications and support information. Such as the content of communications you send to us, customer service inquiries, chat interactions, support tickets, survey responses, reviews, and related records.
Marketing and preference information. Such as your communication preferences, subscription status, campaign engagement, product interests, and inferred preferences based on interactions with the Services.
User Content and submissions. Such as reviews, comments, photos, testimonials, form responses, and other materials submitted through the Services.
Compliance and security information. Such as records relating to fraud prevention, legal claims, abuse detection, suspicious activity, sanctions screening where applicable, and responses to lawful requests.
Sensitive personal information or sensitive data. Such as account credentials, precise geolocation if enabled, government-issued identifier information if required for verification, contents of communications where you choose to send them to us, and date of birth or age-verification data. We collect and use sensitive personal information only as reasonably necessary for the purposes disclosed in this Privacy Policy, to provide requested services, or as otherwise permitted by law.
We may also collect technical and operational information generated through platform functionality, including Wix-hosted forms, ecommerce workflows, consent tools, inbox or chat tools, and site-administration features, subject to the settings and integrations active on the Services.
We may also collect information that is deidentified, aggregated, or otherwise not reasonably linkable to you. Where we maintain data in deidentified form, we will not attempt to reidentify it except as permitted by law.
Article 21: Sources of Information
We collect information:
-
directly from you;
-
automatically when you use the Services;
-
from devices and browsers you use to access the Services;
-
from Wix and other service providers that support hosting, ecommerce, forms, analytics, customer service, fraud prevention, communications, consent management, or technical operations;
-
from business partners, marketing partners, retail or fulfillment partners, and other third parties where legally permitted; and
-
from public or commercially available sources where legally permitted.
Article 22: How We Use Information
We may use information for the following purposes:
-
to provide, operate, maintain, secure, and improve the Services;
-
to process and fulfill orders, payments, returns, exchanges, and customer requests;
-
to verify age, eligibility, location, and compliance status;
-
to authenticate users and protect accounts;
-
to communicate with you regarding orders, accounts, product safety, legal notices, support matters, and other service-related topics;
-
to send marketing and promotional communications in accordance with applicable law and your preferences;
-
to personalize content, product recommendations, and user experiences;
-
to perform analytics, quality assurance, debugging, and internal reporting;
-
to administer Wix-hosted or Wix-enabled site features, forms, automations, communications, and ecommerce operations;
-
to detect, investigate, prevent, and address fraud, abuse, security incidents, and other harmful or unlawful activity;
-
to comply with legal obligations, regulatory requirements, lawful requests, and industry standards;
-
to establish, exercise, or defend legal claims; and
-
for any other purpose disclosed at the time of collection or otherwise permitted by law.
We do not use sensitive personal information for purposes of inferring characteristics about you except as disclosed or permitted by law.
Article 23: Legal Bases and Consent Framework
To the extent required by applicable law, we process personal information based on one or more of the following: your consent, performance of a contract with you, compliance with legal obligations, protection against fraud or security threats, protection of vital interests, and our legitimate business interests where those interests are not overridden by your rights.
Where applicable law requires consent for cookies, tracking technologies, communications monitoring, targeted advertising, sale or sharing of personal information, processing of sensitive data, or similar activities, we will seek such consent through appropriate mechanisms. Where you provide consent, you may withdraw it using the tools we make available, subject to the lawfulness of processing before withdrawal.
Where Wix-hosted or Wix-integrated tools are used, consent choices will apply only to the extent the relevant tool can be configured, limited, or blocked through available settings, integrations, and implementation controls. urbanXtracts intends to use reasonable efforts to implement lawful consent controls consistent with the Services' actual configuration.
Article 24: Cookies, Similar Technologies, Session Replay, Chat, and Analytics
24.1. We and our service providers may use cookies, pixels, SDKs, local storage, tags, log files, APIs, and similar technologies to support the Services, remember preferences, maintain sessions, measure performance, analyze usage, prevent fraud, and support marketing and site functionality.
24.2. These technologies may collect information about your browser, device, pages viewed, interactions, approximate geolocation, referral source, and other usage information.
24.3. Because the Services are hosted or supported through Wix, some cookies, logs, analytics, operational records, or similar technical data may be generated through Wix infrastructure or through Wix-enabled features and integrations. The specific technologies used depend on the Services' configuration, the features enabled, and the choices you make through any consent tools or browser settings.
24.4. Important Privacy Disclosure Regarding Replay, Chat, and Behavioral Monitoring Technologies. Certain site features may involve tools that log page requests, preserve form state, capture technical troubleshooting data, or record how users interact with site content for analytics, debugging, fraud prevention, customer support, or user experience improvement. urbanXtracts intends to configure its Services so that these tools do not capture the contents of sensitive form fields, payment card information, government ID numbers, health information, or message content unless such capture is strictly necessary for the requested function and clearly disclosed.
24.5. To reduce privacy risk and support compliance with laws such as the California Invasion of Privacy Act and similar state laws, urbanXtracts does not intend to deploy third-party session replay, wiretap-like interception, or chat-monitoring technologies in a manner that records the contents of user communications with urbanXtracts or captures keystrokes, text-entry fields, or message content without appropriate notice, consent where required, and contractual restrictions. We may use tools that generate event-level analytics, page diagnostics, or aggregated behavioral insights, but we intend to configure those tools to avoid unnecessary capture of communication content and to limit use to permitted business purposes.
24.6. If chat, inbox, or messaging tools are enabled through Wix or another provider, those tools may process the contents of communications that you choose to send through them for customer service, transactional support, compliance review, or related operational purposes.
24.7. Some browsers and extensions offer settings that allow you to manage cookies or send Do Not Track or opt-out preference signals. Because there is not yet a universally accepted standard for responding to Do Not Track signals, the Services may not respond to all such signals. Where required by law, we will honor browser-based or platform-based opt-out preference signals for targeted advertising or related processing.
Article 25: How We Disclose Information
We may disclose information to the following categories of recipients, subject to applicable law:
-
affiliates and related entities;
-
vendors, contractors, service providers, and subprocessors that perform services on our behalf, such as hosting, website and ecommerce platform support, payment processing, analytics, communications, customer support, fraud prevention, security, age verification, shipping, professional services, consent management, and legal or compliance support;
-
Wix and other platform or infrastructure providers supporting the Services;
-
business partners and promotional partners, where you direct us to do so or where legally permitted;
-
regulators, law enforcement, courts, governmental authorities, and parties involved in legal process or investigations;
-
parties involved in an actual or proposed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction; and
-
other parties with your consent or at your direction.
The vendors, contractors, service providers, subprocessors, and platform providers described above process personal information on our behalf and in support of the Services, and that processing is covered by this Privacy Policy. Independent third parties described in Article 19.2 process information under their own privacy policies. We may also disclose information as necessary to comply with law, enforce our agreements, protect the rights or safety of any person, detect or prevent fraud or security issues, or respond to emergencies.
We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising except as expressly disclosed, lawfully implemented, and subject to any rights or choices required by law. If our practices change, we will update this Privacy Policy accordingly.
Article 26: Retention
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, complete transactions, maintain business and tax records, comply with legal obligations, resolve disputes, enforce agreements, and protect the Services and our business.
Retention periods vary depending on the nature of the information, the sensitivity of the information, the purpose for collection, the risk of harm from unauthorized use or disclosure, applicable legal requirements, and the capabilities and settings of the systems used to maintain the information.
Article 27: Security
We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. However, no security measure is perfect, and we cannot guarantee absolute security.
You are responsible for maintaining the security of your devices and account credentials and for using the Services in a secure manner.
Article 28: Children and Minors
The Services are not directed to children, and we do not knowingly collect personal information from children under thirteen (13), or under any higher age threshold required by applicable law for the specific Service. If we learn that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it.
Article 29: U.S. State Privacy Rights Generally
29.1. Depending on your state of residence, you may have certain rights regarding your personal information, which may include the right to request access to, correction of, deletion of, or portability of certain personal information, and the right to opt out of certain processing such as targeted advertising, sale, profiling in furtherance of decisions that produce legal or similarly significant effects, or certain uses of sensitive data, where applicable.
29.2. You may submit a privacy request by contacting us at legal@urbanXtracts.com or through https://wkf.ms/4uG6JRZ. We may need to verify your identity before responding to a request. You may also designate an authorized agent where permitted by law.
29.3. We will not discriminate against you for exercising applicable privacy rights.
29.4. If we deny your request, you may have the right to appeal that decision depending on applicable law. Appeal instructions will be provided in our response where required.
29.5 .If required by applicable law, urbanXtracts will honor universal opt-out mechanisms or other recognized browser-based or device-based opt-out preference signals for targeted advertising, sale, or sharing of personal information.
Article 30: California Privacy Supplement
30.1. If you are a California resident, this Article supplements the Privacy Policy and provides additional disclosures required by California law, including the California Consumer Privacy Act, as amended, and related regulations.
30.2. In the preceding twelve (12) months, we may have collected the categories of personal information described in Article 20 above; used those categories for the business and commercial purposes described in Article 22; and disclosed those categories to the recipient categories described in Article 25.
30.3. California residents may have the right to know, access, correct, or delete personal information, to obtain a portable copy of certain information, to limit the use and disclosure of sensitive personal information in some circumstances, and to opt out of sale or sharing where applicable.
30.4. We may use cookies and similar technologies for analytics, site functionality, fraud prevention, and limited marketing support. We intend to configure such technologies in a manner designed to avoid the unnecessary collection or disclosure of the contents of communications or sensitive form entries, and to support compliance with California privacy, eavesdropping, and wiretapping-related laws.
30.5. If urbanXtracts engages in processing that constitutes "sale" or "sharing" under California law, California residents may exercise applicable opt-out rights through the methods listed in Article 29 or through a conspicuous footer link such as "Do Not Sell or Share My Personal Information" or "Your Privacy Choices."
30.6. California residents may designate an authorized agent to exercise rights on their behalf, subject to verification requirements permitted by law.
Article 31: Nevada Privacy Notice
Nevada residents who wish to exercise any applicable opt-out rights under Nevada law regarding certain covered information may contact us using the methods listed in Article 29.
Article 32: Colorado, Connecticut, Virginia, Utah, and Other Comprehensive State Privacy Laws
Residents of states with comprehensive consumer privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Indiana, Kentucky, Minnesota, Maryland, Rhode Island, and other states with applicable privacy rights laws, may have rights to access, correction, deletion, portability, appeal, and opt-out of targeted advertising, sale, profiling, or certain sensitive-data processing, subject to statutory limitations and exemptions.
Where required by applicable law, urbanXtracts will provide an appeal process for denied requests and will recognize opt-out preference signals for targeted advertising or similar regulated processing.
Article 33: Florida, Washington, and Health or Consumer-Specific State Laws
To the extent urbanXtracts collects information that may be subject to state consumer health privacy laws, biometric laws, eavesdropping laws, or sector-specific state privacy laws, urbanXtracts will process such information only as permitted by applicable law and consistent with the notices, consents, and restrictions required for the relevant Service or data type.
urbanXtracts does not intentionally collect consumer health data or biometric information through the Services except where reasonably necessary for a requested service, legal compliance, fraud prevention, or another disclosed and lawful purpose.
Article 34: Shine the Light and Direct Marketing Disclosures
California residents may request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes, if any, by contacting us using the methods listed in Article 29 and including "California Shine the Light Request" in the subject line.
Article 35: International Users
The Services are intended for users located in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate, which may have data protection laws that differ from those in your jurisdiction.
Article 36: Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date and post the updated version through the Services. Your continued use of the Services after the revised Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy, to the extent permitted by law.
Article 37: Contact Us
If you have questions about this Agreement or our privacy practices, you may contact us at:
urbanXtracts
43 John Hicks Drive
Warwick, NY 10990
.png)