Privacy Policy

1. Who we are

AllPoint Sp. z o.o. (trading as "Puur Modulair", "we", "us", "our") is the data controller responsible for your personal data. We are registered in Poland (REGON: 221597538, NIP: 5851463808) with our registered office at Aleja "Solidarnosci" 155/6, 00-877 Warszawa, Poland.

Contact for data protection enquiries: privacy@puurmodulair.com

2. What data we collect

We collect and process the following categories of personal data:

• Contact information: Name, email address, phone number, company name — when you submit a quote request or contact form.
• Specification download data: Email address — when you download a specification template (email-gated content).
• Technical data: IP address, browser type, device information, pages visited, time on site — collected automatically via server logs and analytics.
• Cookie data: Preferences and session identifiers — see our Cookie Policy for details.

3. How we use your data

We process your personal data for the following purposes:

• Quote requests: To respond to your enquiry and provide a tailored timber quotation (legal basis: contract performance / legitimate interest).
• Template downloads: To deliver the requested specification template and, if you opt in, send relevant technical updates (legal basis: consent).
• Website analytics: To understand how visitors use our site and improve our content (legal basis: legitimate interest).
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal basis for processing (GDPR)

Under the EU General Data Protection Regulation (GDPR) and UK GDPR, we rely on the following legal bases:

• Consent (Art. 6(1)(a)): For marketing communications and specification template downloads.
• Contract (Art. 6(1)(b)): For processing quote requests and fulfilling orders.
• Legitimate interest (Art. 6(1)(f)): For website analytics, fraud prevention, and improving our services.
• Legal obligation (Art. 6(1)(c)): For tax, accounting, and regulatory compliance.

5. Data sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting (Hostinger), email delivery, analytics — all bound by data processing agreements.
• Professional advisors: Accountants, lawyers — where required for business operations.
• Legal authorities: Where required by law or to protect our legal rights.

All third-party processors are located within the EU/EEA or provide adequate safeguards (Standard Contractual Clauses) for international transfers.

6. Data retention

• Quote request data: 3 years from last contact, or until you request deletion.
• Template download emails: 2 years, or until you unsubscribe.
• Analytics data: 26 months (anonymised after this period).
• Financial records: 7 years (Dutch tax law requirement).

7. Your rights

Under GDPR and UK GDPR, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: At any time, without affecting prior processing.

To exercise any right, email privacy@puurmodulair.com. We respond within 30 days.

8. International transfers

Your data may be transferred to processors outside the EU/EEA. Where this occurs, we ensure adequate protection through EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

9. Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, access controls, and regular security reviews. No system is 100% secure — if you suspect a data breach, contact us immediately.

10. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with:

• Poland: Urzad Ochrony Danych Osobowych (UODO) — uodo.gov.pl
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk

11. Changes to this policy

We may update this policy periodically. The "Last updated" date at the top reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.