Privacy Policy

Last updated: May 15, 2026

URBNED ("URBNED", "we", "our", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, the legal bases we rely on, and the rights you have. It is designed to comply with the EU/UK General Data Protection Regulation (GDPR & UK GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Who is the data controller

URBNED is the controller of personal data processed through this site. You can reach us at support@urbned.com.

2. Data we collect

  • You provide: name, email, phone, identification documents, payment details, transaction information when you sign up or send money.
  • Automatic: IP address, device, browser, pages viewed, referrer, approximate location (country/region from IP).
  • Optional analytics: with your consent we use Mixpanel (autocapture + session replay) to understand product usage.

3. Why we use it & legal basis (GDPR Art. 6)

  • Provide the service and complete transactions — contract.
  • Comply with KYC/AML, tax and accounting law — legal obligation.
  • Prevent fraud, secure the platform — legitimate interest.
  • Analytics, session replay, marketing — your consent (you can withdraw it any time).

4. Sharing

We share data with vetted processors that help us run the service: payment partners, KYC/AML providers, cloud hosting (Lovable Cloud / Supabase), Mixpanel (analytics), and authorities when legally required. We do not sell personal information.

5. International transfers

Some processors are located outside the EEA/UK/Canada (e.g. United States). When we transfer your data we rely on Standard Contractual Clauses, the EU–US Data Privacy Framework, or equivalent safeguards.

6. Retention

Account and transaction records are kept for as long as required by financial regulations (typically 5–7 years). Analytics data is kept up to 12 months. You can request earlier deletion (see rights below).

7. Your rights

Depending on where you live you may have the right to:

  • Access, rectify, delete or port your data (GDPR / UK GDPR / PIPEDA).
  • Object to or restrict processing, withdraw consent at any time.
  • Know, correct, delete, limit use of sensitive data, and opt out of "sale" or "sharing" — including via Global Privacy Control signals (CCPA/CPRA).
  • Lodge a complaint with your local supervisory authority (e.g. your EU DPA, the UK ICO, the CNPD in Portugal, or Canada's OPC).

Send requests to support@urbned.com. We respond within 30 days.

8. Cookies

See our Cookie Policy for the full list and to change your choices.

9. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We will post any updates here and, where required, notify you by email.