PurePlay Privacy Policy

Effective date: May 21, 2026

1. Introduction

This Privacy Policy explains how PurePlay LLC (“PurePlay,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information when you visit pureplay.ai or another website, landing page, or marketing property that links to this Policy (collectively, the “Website”). It also describes our handling of information when we plan, deliver, optimize, and measure programmatic advertising for advertiser and agency customers (the “Advertising Services”).

PurePlay is a U.S.-based business-to-business software and advertising-services company. The Website introduces our company and the Pulse Intelligence Platform, allows visitors to request a demonstration or contact our team, and publishes research, articles, and product information. The public Website is separate from the authenticated platform.

United States only. Our Website, products, and Advertising Services are intended for businesses and individuals located in the United States. We do not knowingly solicit personal information from, market to, or target advertising toward people outside the United States. Visitors located outside the United States should not submit personal information through the Website. This Policy is not intended to create rights under privacy laws outside the United States.

Website personal information is hosted and processed on cloud infrastructure located in the United States. When a service provider uses global infrastructure, we configure the relevant services to maintain U.S. data residency for our workloads.

Information processed inside the authenticated Pulse Intelligence Platform is governed by the applicable customer agreement and the separate Pulse Intelligence Platform Privacy Notice, rather than this Website Privacy Policy.

For Website information, PurePlay generally acts as a business or controller. For pseudonymous identifiers and customer-provided audiences processed through the Advertising Services, PurePlay generally acts as a service provider or processor on behalf of the advertiser or agency customer that determines the relevant purposes and means of processing.

By using the Website, you acknowledge the practices described in this Policy.

Part A — The Website

2. Information We Collect

We collect information that you provide directly, information collected automatically when you use the Website, and information received from third parties.

Information you provide

When you submit a Website form—such as a demo request, sales inquiry, content download, newsletter registration, event registration, webinar registration, or job application—we collect the information entered in that form. Depending on the form, this may include your name, business email address, company, title, telephone number, U.S. state, and any message you provide. Employment applications may also include a résumé, work history, and other information you voluntarily submit.

Form submissions are affirmative, opt-in actions. If we introduce a survey, form, or other collection activity for a purpose beyond a standard contact, demo, inquiry, or registration request, the collection page will explain the intended use and request any required consent.

We also collect information contained in communications sent to us by email, chat, or telephone. When a call or chat is recorded or transcribed for quality, training, or recordkeeping, we will provide notice at the time of collection.

Information collected automatically

When you interact with the Website, we and our service providers may automatically collect technical and usage information, including:

IP address and approximate location inferred from it, such as city, region, or state;
device type, browser, operating system, language, and related technical settings;
referring page or URL;
pages and content viewed, links clicked, and searches performed on the Website;
visit dates, times, duration, and interaction patterns; and
campaign-attribution information, including UTM parameters.

Analytics providers, including services such as Google Analytics, may collect this information directly from your browser through cookies and similar technologies. PurePlay generally receives aggregated or report-level analytics and does not maintain a separate database of individual Website analytics records.

Hosting and content-delivery providers may retain short-lived access logs containing an IP address, user agent, requested path, response information, and timestamp for security, reliability, and diagnostic purposes. PurePlay reviews these logs primarily when an operational or security issue requires investigation.

Information from third parties

We may receive business contact or company-related information from lead-enrichment and business-data providers. For example, these providers may add publicly available firmographic information—such as company size, industry, or technologies used—to information submitted through a Website form.

We may also receive information from joint-marketing partners, event co-sponsors, or platforms such as LinkedIn when you interact with our content or authorize the platform to share information with us. We require such sources to represent that their collection and disclosure practices comply with applicable law and their own privacy notices.

‍

3. How We Use Website Information

We use Website information to:

respond to demo requests, sales inquiries, support questions, and registrations;
send requested or legally permitted communications about products, research, events, and content;
operate, maintain, troubleshoot, protect, and improve the Website;
prevent fraud, abuse, and security threats;
understand Website usage and improve content, navigation, and performance;
personalize Website experiences and tailor offers or advertising;
measure the effectiveness of marketing campaigns;
create aggregated or de-identified research and business analytics;
evaluate applicants and administer recruiting activities;
meet legal and regulatory obligations; and
enforce agreements and protect PurePlay, our customers, users, and the public.

We do not use information submitted through a form for a materially different, undisclosed purpose without obtaining any consent required for the new use. Website personal information is not used for purposes incompatible with the context in which it was collected.

Artificial intelligence and machine learning

Personal information collected through the public Website—including form submissions, communications, and identifiable behavioral information—is not used to train, fine-tune, or develop generalized artificial-intelligence or machine-learning models. We also do not provide Website personal information to third-party AI providers for model-training purposes.

PurePlay may use aggregated or de-identified Website data for internal analytics, product evaluation, and model evaluation when that information cannot reasonably identify an individual.

PurePlay develops AI and machine-learning capabilities for the Pulse Intelligence Platform using programmatic-performance signals and other inputs appropriate to a model’s purpose, rather than personal information collected from the public Website. Customer data is not used to train models for use outside the originating customer engagement.

When enterprise large-language-model services—such as those offered by Anthropic, OpenAI, or Google—support internal tools or platform functionality, we use contractual arrangements intended to prevent the provider from training its models on our submitted inputs. Website personal information is not submitted to those services. Our AI governance is informed by the NIST AI Risk Management Framework.

‍

4. How We Share Website Information

PurePlay does not exchange personal information for money. Some U.S. state privacy laws, however, use broad definitions of “sale” and “sharing” that may include certain advertising, retargeting, and analytics activities. Available opt-out rights are described below.

Service providers

We disclose information to vendors and contractors that support Website hosting, content delivery, customer-relationship management, marketing automation, analytics, email delivery, lead enrichment, customer support, events, webinars, payments where applicable, recruiting, information technology, and security.

These providers are subject to agreements that limit processing to services performed for PurePlay, restrict selling or unrelated use, and require reasonable safeguards.

Advertising, analytics, and measurement partners

Advertising platforms, ad networks, social-media platforms, retargeting providers, and analytics vendors may help us understand Website audiences, measure campaigns, and reach relevant business audiences on other websites, applications, or platforms.

These parties may place or read their own cookies and may combine Website information with information obtained elsewhere. Their independent processing is governed by their own privacy policies.

Joint marketing and event partners

When you register for co-hosted content, a webinar, or an event, we may provide registration information to the identified partner. We will disclose that arrangement at the point of registration, and the partner will process the information under its own privacy notice.

Affiliates

We may share information with current or future parents, subsidiaries, or other affiliated entities for the purposes described in this Policy.

Legal requirements and protection

Information may be disclosed when we reasonably believe disclosure is necessary to comply with law, regulation, legal process, court order, subpoena, or governmental request; enforce agreements; investigate fraud or security issues; or protect the rights, property, and safety of PurePlay, our customers, employees, users, or others.

Corporate transactions

Information may be transferred or made available in connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of all or part of the company or its assets, subject to customary confidentiality protections.

Aggregated and de-identified information

We may use and disclose aggregated, anonymized, or de-identified information that cannot reasonably identify an individual for research, marketing, analytics, and product development. We maintain safeguards and contractual restrictions intended to prevent re-identification and do not attempt re-identification except when legally permitted to test the effectiveness of a de-identification process.

5. Cookies and Tracking Technologies

The Website may use cookies, pixels, tags, software development kits, local storage, server logs, and related technologies. These technologies generally fall into the following categories:

Strictly necessary: support page delivery, security, load balancing, and essential functionality such as retaining entries during a multi-step form.
Analytics and performance: show how visitors find and use the Website, which pages are most useful, how long visitors remain, and where technical or navigation issues occur.
Marketing and advertising: support audience matching, retargeting, conversion measurement, attribution, and more relevant marketing.

Interest-based advertising and remarketing

Third-party vendors may help deliver interest-based advertising, including PurePlay advertising shown after a Website visit or campaigns intended to reach business audiences similar to our customers. These vendors may include Google Analytics and Google Ads, LinkedIn Insight Tag and audience tools, Meta or Facebook technologies, and our marketing-automation provider.

Each third party processes information under its own privacy terms and may combine information from the Website with information collected elsewhere.

We are working toward providing a Website cookie-consent and preference-management interface. Until that interface is available, you can manage cookies through browser controls, device privacy settings, and recognized industry opt-out tools, including:

Blocking cookies may reduce Website functionality or make advertising less relevant.

The Website does not currently respond to browser “Do Not Track” signals because no uniform industry standard exists. Where required by applicable state law, we recognize Global Privacy Control (“GPC”) signals as a request to opt out of sale, sharing, or targeted advertising for the browser sending the signal.

Part B — Programmatic Advertising Services

6. Our Role in Advertising Operations

PurePlay plans, activates, optimizes, and measures programmatic advertising campaigns for customers. The customer selects the audience, geography, channel, and campaign objective, while PurePlay carries out media buying and measurement through demand-side platforms (“DSPs”) such as Beeswax and, when applicable, Google Display & Video 360.

Campaign operations may also involve supply-side platforms (“SSPs”), ad exchanges, data management platforms (“DMPs”), measurement providers, and identity or data-clean-room services selected by PurePlay or the customer.

In this context, PurePlay generally acts as a processor or service provider, while the advertiser or agency customer acts as the business or controller. Our processing is limited by the customer’s instructions, written agreements, and the purposes described in this Policy.

Customers must maintain an appropriate legal basis, notices, and opt-out mechanisms for data they direct PurePlay to process. They must not provide sensitive personal information unless expressly authorized by a separate written agreement, and they must not instruct PurePlay to engage in processing that we reasonably believe violates applicable U.S. privacy law.

‍

7. Pseudonymous Identifiers and Signals We Process for Advertising

To deliver and measure campaigns, we process device-, browser-, and household-level identifiers and signals (“Advertising Identifiers”). These identifiers do not ordinarily identify a person by name, but U.S. privacy laws may still treat them as personal information.

Mobile advertising identifiers, including Apple IDFA and Google AAID, when the user has not disabled or restricted tracking.
Connected-TV identifiers, including IFA and platform identifiers such as Roku RIDA, Samsung TIFA, or Vizio VIDA, when available and not opted out.
Cookie identifiers and similar browser-level IDs issued by DSPs, SSPs, or exchanges.
IP addresses, which we treat as personal identifiers under applicable U.S. law.
Coarse location inferred from IP or device signals, such as designated market area, city, state, or partial postal code—not precise GPS location.
Bid-request signals, including publisher domain or application, content category, page URL, device type, operating system, display dimensions, language, and connection type.
One-way hashed match keys, such as SHA-256 hashed email addresses or telephone numbers, supplied by customers for privacy-preserving audience matching.

8. Our Core Privacy Commitments for Advertising

No directly identifying information in the advertising stack. We do not request or accept names, raw email addresses, raw telephone numbers, postal addresses, government identifiers, payment-card information, or similar direct identifiers into DSP, bid-stream, audience, or campaign-measurement systems.
Hashed match keys. When a customer activates a first-party audience, identifiers must be normalized and irreversibly hashed by the customer or a clean-room provider before PurePlay receives them.
No re-identification. We do not attempt to connect a pseudonymous Advertising Identifier to a named individual, and our relevant service providers and advertising partners are contractually restricted from doing so.
Separation from CRM data. Advertising Identifiers are not combined with directly identifying records maintained in our sales, CRM, or marketing systems.
No identity-linked cross-context profile. We do not create a persistent cross-site, cross-application, or cross-device profile tied to a known individual.
No sensitive-category targeting. We do not knowingly create or target audiences based on health conditions, medical treatment, race, ethnicity, religion, sexual orientation, gender identity, citizenship, immigration status, union membership, precise location, biometric information, or the contents of private communications.
No eligibility decisioning. Advertising Identifiers are not used to decide eligibility for credit, housing, employment, insurance, or financial services.
No children. We do not knowingly process Advertising Identifiers of users known to be under 16 or target inventory identified as child-directed under COPPA.
Opt-out recognition. We honor supported browser, device, and bid-stream opt-out signals and applicable consumer privacy requests.
Data minimization. We process the minimum identifiers and signals needed for a customer campaign and do not use them to enrich unrelated third-party data products.

‍

9. How We Use Advertising Identifiers

Advertising Identifiers are used on behalf of customers for:

Targeting: bidding on inventory that matches campaign criteria.
Frequency management: limiting repeated exposure to the same advertisement.
Brand safety and fraud prevention: detecting bots, invalid traffic, and unsafe content environments, including through independent verification providers.
Measurement and reporting: counting impressions, clicks, video events, viewability, completion, and permitted post-exposure outcomes, generally in aggregated form.
Audience construction: creating or refining campaign audiences for the same engagement or for the customer that supplied the underlying data.
Operations, billing, and audit: administering the service, reconciling spend, supporting customer audits, and keeping legally required records.

We do not use Advertising Identifiers for decisions that create legal or similarly significant effects for an individual, including decisions about credit, employment, insurance, housing, education, or criminal justice. They are not used for price discrimination or to deny goods or services.

‍

10. Sources of Advertising Identifiers

Publishers and bid streams: SSPs may send eligible bid requests to DSPs when a user opens advertising-supported digital content.
Customers: customers may provide properly noticed and consented first-party audiences, hashed match keys, conversion events, or campaign inputs.
Licensed data providers: this may include location-intelligence or demographic-modeling providers operating under their own consent frameworks and contracts.
Measurement and verification providers: these parties may supply attribution, conversion, outcome, brand-safety, viewability, or invalid-traffic data.

‍

11. Third Parties That Receive Advertising Identifiers

Advertising Identifiers may be disclosed to the following categories of recipients for limited campaign purposes:

DSPs, including services such as Beeswax or Google Display & Video 360;
SSPs, ad exchanges, and publishers involved in the programmatic transaction;
DMPs and audience platforms used to organize and activate campaign data;
identity and clean-room providers used for privacy-preserving matching;
measurement, attribution, viewability, brand-safety, and fraud-prevention providers;
cloud hosting, storage, and analytics providers, such as AWS or Snowflake;
customers receiving aggregated campaign-delivery and outcome reports or segment definitions derived from their own data; and
legal authorities, regulators, or transaction successors when applicable.

Relevant recipients are contractually required to process information only for specified purposes, maintain reasonable security, avoid unauthorized sale or onward disclosure, and refrain from attempting to re-identify pseudonymous identifiers.

‍

12. Audience Matching and Data Clean Rooms

Customers may ask PurePlay to compare a first-party audience with publisher, platform, or measurement-provider records so advertising can reach an intended audience or campaign outcomes can be measured.

The customer or its clean-room provider must hash match keys before the information reaches PurePlay. Raw email addresses, telephone numbers, and postal addresses are not accepted into the advertising stack.
Where practical, matching occurs inside a data clean room—such as Google Ads Data Hub, Amazon Marketing Cloud, an independent clean-room service, or a customer-controlled environment—so PurePlay receives only audience size, match rate, or aggregated outputs.
When matching occurs through a DSP’s native audience tool rather than a clean room, hashed identifiers are limited to the applicable campaign, retained only for the campaign and a reasonable wind-down period, and kept separate from PurePlay first-party data and other customers’ data.
PurePlay does not decrypt, reverse-engineer, or attempt to recover the original personal information represented by a hash, and requires vendors handling match keys to follow the same rule.
We do not use one customer’s data to perform identity linkage for another customer and do not sell or license customer-provided audiences to third parties.

‍

13. Sensitive Personal Information

PurePlay does not knowingly collect, infer, or process sensitive personal information through the Website or Advertising Services for the purpose of inferring personal characteristics.

The public Website is not designed to collect government identifiers, financial-account or payment-card information, account credentials, precise geolocation, race or ethnicity, religion or philosophical beliefs, union membership, genetic or biometric data, health information, or information about sex life or sexual orientation.

Sensitive health, financial-eligibility, and similar categories are excluded from standard audience targeting and construction. An exception may apply only when a customer establishes a lawful basis in writing—such as a required authorization, explicit consent, or applicable contractual framework—and enters into an additional written agreement with PurePlay.

Because PurePlay does not use sensitive personal information to infer characteristics, the CCPA right to limit such use generally does not apply to our standard practices.

Healthcare and life-sciences engagements

For certain healthcare or life-sciences customers, PurePlay may process additional contractually authorized information, such as hashed or de-identified healthcare- professional identifiers or hashed National Provider Identifier lists.

This information is processed only within the permitted-use restrictions, retention periods, and audit requirements imposed by the originating provider and the customer. It is not combined with public-Website personal information or another customer’s data and is not used to train AI or machine-learning models.

AI-assisted creative variants intended for pharmaceutical or other regulated campaigns are subject to the customer’s medical, legal, and regulatory review before activation.

‍

14. Industry Frameworks and Self-Regulatory Programs

Our Advertising Services are designed with reference to recognized U.S. advertising and privacy standards, including:

Digital Advertising Alliance principles for online behavioral advertising and mobile environments;
Network Advertising Initiative Code of Conduct;
IAB Tech Lab Global Privacy Platform, including U.S. National and state-specific consent and opt-out strings;
IAB CCPA Compliance Framework and successor state-privacy frameworks; and
Trustworthy Accountability Group anti-fraud, brand-safety, and transparency programs.

When a customer requires an additional industry or sector-specific framework, PurePlay will work in good faith to address the applicable requirements.

‍

15. Advertising Opt-Outs We Honor

Global Privacy Control: a supported GPC signal is treated as an opt-out of sale, sharing, or targeted advertising where required by applicable state law.
IAB Global Privacy Platform: we honor applicable U.S. National and state-specific signals transmitted in bid requests.
Limit Ad Tracking and App Tracking Transparency: when a mobile advertising ID is absent, reset, or restricted, we do not use it as a personal advertising identifier.
Device controls: users may reset or limit advertising identifiers through iOS, Android, Roku, Samsung, Vizio, and other device privacy settings.
Industry tools: users may use DAA WebChoices, DAA AppChoices, and the NAI consumer opt-out.
Direct requests: users may contact privacy@pureplay.ai to request an opt-out of sale, sharing, or targeted advertising, or use the Website’s “Do Not Sell or Share My Personal Information” tool when available.

‍

Shared Sections

16. Data Retention

We retain personal information only for the period reasonably necessary to provide requested services, administer marketing and business relationships, meet legal or contractual duties, resolve disputes, and enforce agreements.

Lead forms and CRM records: generally retained during the active business relationship and for a reasonable period afterward, typically no longer than seven years after the most recent activity.
Third-party analytics: retained by the analytics provider under its configured settings, commonly for up to 26 months in identifiable form before aggregation.
Hosting access logs: generally retained for days or a few weeks under provider defaults and not routinely copied into PurePlay analytics systems.
Applicant information: typically retained for one to three years after an application closes, or longer if required by employment law.
Marketing information: deleted or anonymized after an unsubscribe, when no longer useful, or when required by law.
Authenticated platform records: retained for the customer-contract term and a reasonable legal or audit period afterward.
Bid-stream and impression logs: retained in identifiable form for up to 13 months, after which they are aggregated, hashed, or deleted.
Audience segments: retained during the campaign and a reasonable wind-down period. Customer-provided hashed match keys are deleted or returned as required by the customer agreement.
Privacy-request records: generally retained for the legally required period, commonly 24 months, to document compliance.

When information is no longer needed, we delete or anonymize it. If immediate deletion is not feasible, such as information contained in a backup, we isolate it from further use until deletion becomes possible.

‍

17. Vendor and Service-Provider Management

PurePlay performs reasonable diligence on vendors that process information for us, including advertising platforms, audience providers, measurement vendors, cloud providers, and marketing-technology services.

Our agreements generally require:

processing only for the services PurePlay requested;
no unauthorized sale, sharing, or onward disclosure;
no combination with unrelated information except as needed to perform the service;
reasonable administrative, technical, and physical safeguards;
prompt notice of actual or reasonably suspected security incidents;
assistance with valid consumer privacy requests; and
deletion or return of personal information at the end of the engagement.

‍

18. Data Security

We maintain administrative, technical, and physical safeguards designed to reduce the risk of unauthorized access, disclosure, alteration, loss, or destruction. Depending on the system and risk, safeguards may include:

TLS encryption in transit and encryption at rest for sensitive systems;
role-based access controls, single sign-on, and multi-factor authentication;
network segmentation, endpoint protection, vulnerability scanning, and security logging;
vendor-security reviews and least-privilege access;
privacy and security training for authorized personnel; and
incident-response procedures and legally required breach notifications.

No internet transmission or electronic-storage method is completely secure. We therefore cannot guarantee absolute security. Users should maintain strong, unique passwords for any PurePlay account and promptly report suspected compromise.

‍

19. Your U.S. Privacy Rights

Depending on your state of residence, you may have rights concerning personal information PurePlay holds about you. Even where a state law does not require a particular right, we may honor reasonable requests at our discretion.

California residents

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”).

During the preceding 12 months, Website activities may have involved the following CCPA categories:

Category A — Identifiers: name, business email, telephone number, IP address, and online identifiers;
Category B — Customer-record information: name, address, or telephone number;
Category F — Internet activity: Website browsing and interaction data;
Category G — Geolocation: approximate location inferred from IP, not precise GPS;
Category I — Professional information: company, title, or employment information; and
Category K — Inferences: such as inferred interest in PurePlay services.

Advertising Services may additionally involve Category A pseudonymous identifiers—such as mobile, connected-TV, cookie, IP, and hashed match identifiers—and Category F campaign-event or impression activity, processed on behalf of customers.

We do not collect or use sensitive personal information to infer characteristics. Sources, business purposes, recipients, and retention practices are described throughout this Policy.

We do not sell personal information for monetary payment. Nonetheless, some retargeting, analytics, cross-context behavioral advertising, or programmatic bid-stream activities may be considered a “sale” or “sharing” under the CCPA. The categories potentially involved are identifiers, internet activity, approximate geolocation, and inferences. We do not knowingly sell or share personal information of consumers under 16.

Subject to legal exceptions, California residents may request:

the categories and specific pieces of personal information collected;
a portable copy of personal information;
correction of inaccurate personal information;
deletion of personal information collected from the requester;
an opt-out of sale or sharing; and
freedom from discrimination for exercising CCPA rights.

Requests may be sent to privacy@pureplay.ai. California residents may also use a Website preference center or “Do Not Sell or Share My Personal Information” link when available, or send a valid GPC signal. Identity verification may be required, and an authorized agent may submit a request where permitted.

California’s “Shine the Light” law permits certain requests concerning disclosures for third-party direct marketing. PurePlay does not disclose personal information to third parties for their own direct-marketing use within the meaning of that law. Requests may be directed to privacy@pureplay.ai.

Residents of other U.S. states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Rhode Island, or Tennessee may have rights under comprehensive state privacy laws, subject to each law’s effective date and applicability.

Depending on the state, available rights may include:

confirming whether personal information is processed and obtaining access;
correcting inaccurate information;
requesting deletion;
obtaining a portable copy of information provided by the consumer;
opting out of targeted advertising, sale, or qualifying profiling that produces legal or similarly significant effects;
limiting certain uses of sensitive personal information; and
appealing a decision made on a privacy request.

Some Website advertising and analytics activities and some Advertising-Service bid-stream transfers may be considered targeted advertising or a sale under state law. You may opt out by emailing privacy@pureplay.ai, using an available preference center, or sending a recognized GPC signal.

To appeal a privacy-request decision, reply to our decision or email privacy@pureplay.ai with “Appeal” in the subject line. We will respond within the legally required period. If an appeal is denied, you may contact the attorney general of your state.

Nevada residents

Nevada law permits residents to direct certain website operators not to sell defined categories of covered information. PurePlay does not engage in sales as defined by NRS 603A, but requests sent to privacy@pureplay.ai will be treated as an opt-out request.

Industry opt-out tools

Digital Advertising Alliance WebChoices
Digital Advertising Alliance AppChoices
Network Advertising Initiative
Mobile devices: reset or limit the advertising ID in device privacy settings.
Connected TV: use the platform’s interest-based advertising or tracking controls.

‍

20. How to Exercise Your Rights

To request access, correction, deletion, or portability; opt out of sale, sharing, targeted advertising, or qualifying profiling; limit eligible sensitive-data uses; or withdraw consent, email privacy@pureplay.ai or write to the postal address below.

Include enough information for us to understand the request and locate relevant records. Verification may be required for access, deletion, or correction requests. We do not charge a fee unless a request is manifestly unfounded, repetitive, or excessive and a fee is permitted by law.

Where legally permitted, an authorized agent may act for you. We may ask the agent for proof of authorization and may also ask you to confirm your identity directly.

We respond within the periods required by applicable law, generally within 45 days, with one permitted extension when reasonably necessary. If a request cannot be fulfilled, we will explain the reason.

When a request relates to a customer’s campaign, we may refer it to that customer, which acts as the business or controller, and assist the customer with its response.

Marketing emails include an unsubscribe link. You may also unsubscribe by emailing privacy@pureplay.ai. Unsubscribing does not prevent transactional or relationship communications, including responses to an inquiry or operational messages concerning a requested service.

21. Notification of Security Incidents

If we determine that a security incident affecting personal information is likely to create a legally recognized risk, we will notify affected individuals and regulators as required by U.S. law. A notice may describe the incident, the categories of information involved, the response steps being taken, and actions individuals can consider.

‍

22. Children’s Privacy

The Website is intended for businesses and professionals, not children. We do not knowingly collect personal information from children under 16, including children under 13 covered by the Children’s Online Privacy Protection Act.

We do not knowingly process Advertising Identifiers belonging to users known to be under 16 and exclude inventory identified as child-directed from targeting and audience creation.

If you believe a child submitted personal information, contact privacy@pureplay.ai so we can take appropriate steps to remove it.

23. Third-Party Links and Services

The Website may link to or embed third-party websites, services, videos, social-media tools, or research resources. PurePlay does not control those third parties and is not responsible for their privacy practices. Review the applicable third-party privacy notice before submitting information or interacting with the service.

24. Changes to This Policy

We may revise this Policy to reflect changes in our Website, services, practices, or legal obligations. The revised Policy will be posted on this page with an updated effective date. For material changes, we may provide additional notice through the Website or by email when appropriate. We encourage periodic review of this Policy.

25. Contact Us

Questions, comments, complaints, or privacy requests may be sent to:

PurePlay LLC
‍Attn: Privacy
4840 El Secreto
Rancho Santa Fe, CA 92067
United States
Email: privacy@pureplay.ai