What's your GDPR compliance?

Inspire Uplift is committed to GDPR compliance and protecting the privacy rights of all our customers, including those in the European Economic Area (EEA), United Kingdom, and Switzerland. We collect only the data necessary to process your orders and provide customer support, we never sell your personal information, and we give you full control over your data. Here's a detailed look at how we handle your privacy rights under GDPR.

What Is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law enacted by the European Union that governs how companies collect, use, store, and protect personal data of individuals in the EEA. It gives individuals specific rights over their personal information and places strict obligations on companies that handle that data.

Even though Inspire Uplift is a US-based company headquartered in Miami, Florida, GDPR applies to us because we serve customers in the EEA and UK. We take these obligations seriously and extend strong privacy protections to all of our customers worldwide, not just those covered by GDPR.

Your Rights Under GDPR

As an Inspire Uplift customer, you have the following rights regarding your personal data:

Right to Access You can request a complete copy of all personal data we hold about you. This includes your account information, order history, shipping addresses, communication records, and any other data associated with your account. We'll provide this in a clear, readable format.

Right to Rectification If any personal information we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update most information directly through your account settings, or contact us and we'll make corrections on your behalf.

Right to Erasure (Right to Be Forgotten) You can request that we delete your personal data. We'll honor this request and remove your information from our systems, with some exceptions — we may need to retain certain data for legal, tax, or regulatory compliance (such as order records required for tax purposes). We'll clearly explain what can and cannot be deleted when you make a request.

Right to Data Portability You can request your personal data in a structured, commonly used, machine-readable format so you can transfer it to another service. This allows you to take your data with you if you choose to stop using our platform.

Right to Restriction of Processing You can request that we limit how we use your data in certain circumstances — for example, while a dispute about data accuracy is being resolved. During restriction, we'll store your data but not actively process it.

Right to Object You can object to certain types of data processing, including direct marketing. When you object to marketing communications, we'll stop sending them immediately. You can also object to processing based on our legitimate interests, and we'll review your request.

Right to Withdraw Consent Where we process data based on your consent (such as marketing emails), you can withdraw that consent at any time. Withdrawal doesn't affect the lawfulness of processing that occurred before you withdrew consent.

Right Not to Be Subject to Automated Decision-Making You have the right not to be subject to decisions made solely by automated processing that significantly affect you. If we use automated systems in any decision-making process that affects you, you can request human review.

What Data We Collect and Why

We collect only what's necessary to operate our marketplace and serve you. Here's what we collect and the legal basis for processing:

Account Information — Name, email address, password (encrypted). Collected when you create an account. Used to manage your account, authenticate your identity, and communicate with you about your orders. Legal basis: Contract performance.

Order Information — Items purchased, order dates, order amounts, payment method type (we never store full card numbers). Collected when you place an order. Used to process and fulfill your orders. Legal basis: Contract performance.

Shipping Information — Shipping addresses, phone number. Collected at checkout. Used to deliver your orders and for carriers to contact you about delivery if needed. Legal basis: Contract performance.

Communication Records — Emails, chat transcripts, phone call records with our support team. Collected when you contact us. Used to provide customer support and resolve issues. Legal basis: Contract performance and legitimate interest.

Technical Data — IP address, browser type, device information, cookies. Collected automatically when you visit our website. Used to ensure website functionality, security, and to improve your browsing experience. Legal basis: Legitimate interest.

Marketing Preferences — Email subscription status, communication preferences. Collected when you subscribe to marketing or adjust preferences. Used to send promotional content you've opted into. Legal basis: Consent.

What We Don't Do With Your Data

We never sell your personal data to third parties, data brokers, advertisers, or anyone else. Period.

We never share your email address with sellers for their own marketing purposes. Sellers only receive the information needed to fulfill your order — your name and shipping address.

We never use your data for purposes beyond what's described above without informing you and obtaining appropriate consent.

We never retain data longer than necessary. We keep your data only for as long as needed to fulfill the purposes described above, plus any additional retention required by law (such as tax records).

How We Protect Your Data

Your personal information is protected by multiple layers of security:

Encryption — All data transmitted between your device and our servers is encrypted using SSL/TLS (HTTPS). Your connection to Inspire Uplift is always secure.

Payment Security — Payment information is handled by our certified payment processors, which hold PCI-DSS Level 1 compliance, SOC 2 Type II certification, and ISO 27001 certification. Full payment details never touch our servers.

Access Controls — Access to customer data within our organization is restricted to personnel who need it to perform their duties. We follow the principle of least privilege.

Security Audits — We conduct annual third-party security audits to identify and address potential vulnerabilities.

Encrypted Storage — Sensitive data like passwords is stored using one-way hashing — even we can't see your password.

Third Parties and Data Sharing

We share limited data with specific third parties only as necessary to operate our marketplace:

Payment Processors — Receive payment information to process your transactions. They are PCI-DSS compliant and operate under their own strict privacy policies.

Shipping Carriers — Receive your name, shipping address, and phone number to deliver your orders. This is the minimum information needed for delivery.

Sellers — Receive your name and shipping address to fulfill your order. They do not receive your email address, payment information, or any other account details.

Service Providers — We use trusted service providers for website hosting, email delivery, customer support tools, and analytics. All service providers are bound by data processing agreements that require them to protect your data.

We do not share data with any parties beyond what's listed above without your explicit consent or a legal requirement to do so.

CCPA Compliance (California Residents)

In addition to GDPR, we comply with the California Consumer Privacy Act (CCPA), which provides similar rights to California residents. If you're a California resident, you have the right to know what personal information we collect and how it's used, request deletion of your personal information, opt out of the sale of personal information (we don't sell data, so this is already the default), and not be discriminated against for exercising your privacy rights.

How to Exercise Your Rights

For any privacy or data-related request, contact our data protection team:

Email: data@inspireuplift.com

Include your full name, the email address associated with your account, and a clear description of what you're requesting. We respond to all data requests within 30 days as required by GDPR. Complex requests may take slightly longer, but we'll keep you informed of progress.

What we'll need to verify your identity: To protect your privacy, we verify your identity before processing data requests. This typically involves confirming your email address and matching account details. We'll never ask for sensitive information like passwords, full card numbers, or government ID numbers for routine data requests.

International Data Transfers

As a US-based company, your data may be transferred to and stored in the United States. We ensure that international data transfers comply with GDPR requirements through appropriate safeguards, including standard contractual clauses and equivalent protections. Your data receives the same level of protection regardless of where it's processed.

Children's Privacy

Inspire Uplift does not knowingly collect personal data from children under 16 (or under 13 in the US). If we become aware that we've collected data from a child, we'll delete it promptly. If you believe a child has provided us with personal information, contact us immediately at data@inspireuplift.com.

Updates to Our Privacy Practices

If we make significant changes to how we handle your personal data, we'll notify you through email, a notice on our website, or other appropriate means before the changes take effect. You'll always have the opportunity to review changes and exercise your rights.

Frequently Asked Questions

Q: Do I need to be in Europe for GDPR rights to apply? A: GDPR specifically protects individuals in the EEA and UK. However, we extend strong privacy protections to all customers worldwide. California residents have similar rights under CCPA. Regardless of where you live, you can contact us about your personal data and we'll work with you.

Q: How do I delete my account and all my data? A: Email data@inspireuplift.com with a request to delete your account and personal data. We'll process the request within 30 days. Some data (like order records) may need to be retained for legal and tax compliance, but all personal profile data, preferences, and account information will be removed.

Q: How do I stop receiving marketing emails? A: Click "Unsubscribe" at the bottom of any marketing email for instant removal. You can also update your email preferences in Account Settings. You'll still receive essential emails like order confirmations and shipping updates, as these are necessary for order fulfillment.

Q: Can I request data deletion for orders I placed as a guest? A: Yes. Contact data@inspireuplift.com with the email address you used for guest checkout and we'll process your request. Guest order data is subject to the same retention requirements as account orders for legal and tax purposes.

Q: Does Inspire Uplift use cookies? A: Yes. We use cookies for website functionality (keeping you logged in, saving your cart), security, and analytics. You can manage cookie preferences through your browser settings. Essential cookies are necessary for the website to function, while analytics cookies can be disabled. See our full Cookie Policy for details.

Q: Who is your Data Protection Officer? A: Our data protection team handles all privacy and data protection matters. For any data-related requests, questions, or concerns, contact data@inspireuplift.com.

Q: How long do you keep my data? A: We retain personal data only as long as necessary for the purpose it was collected. Account data is kept while your account is active. Order records are retained for the period required by tax and legal regulations (typically 5-7 years). Marketing preferences are kept until you unsubscribe. You can request deletion at any time, subject to legal retention requirements.

Q: Has Inspire Uplift ever had a data breach? A: We maintain security monitoring systems designed to detect and prevent breaches. In the unlikely event of a security incident, we would immediately investigate and contain the issue, notify affected customers promptly as required by GDPR (within 72 hours), coordinate with relevant authorities, and provide credit monitoring assistance if payment data were involved.

Questions About Your Privacy?

For any privacy or data protection request, our dedicated team is ready to help:

📧 Data requests: data@inspireuplift.com 📧 General support: contact@inspireuplift.com 💬 Live chat: www.inspireuplift.com/contact?chat (24/7) 📞 Phone: 1-877-780-2973 (Monday-Friday 9am-10pm EST | Weekends 11am-8pm EST, limited availability | After-hours AI assistant available 24/7) 📱 Text: Text "Help" to 1-877-780-2973

Your privacy matters to us. If you have any concerns about how your data is handled, don't hesitate to reach out.