This Privacy Policy ("Policy") describes how Spur and its subsidiaries and affiliates ("we", "us", "our") collect, use, disclose, and safeguard personal information when you visit spurnow.com (the "Website") or use our products and services. We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation ("GDPR") and the UK GDPR, to the extent each applies to you.
For the purposes of the GDPR, the data controller responsible for your personal information is Spur, with operations based in India. If you have any questions about this Policy, our data practices, or wish to exercise any of your rights, you can reach us at support@spurnow.com.
We collect personal information in three ways: information you provide directly, information we collect automatically when you use our Website, and information we receive from third parties.
a. Information you provide directly. This includes name, email address, phone number, company name, account credentials, billing details, the content of messages you send us through forms or live chat, and any other information you choose to share when you sign up, contact us, request a demo, subscribe to our newsletter, or opt in to receive SMS/RCS messages.
b. Information collected automatically. When you visit the Website, we and the third-party services we use may automatically collect: your IP address and approximate geographic location derived from it; browser type and version, operating system, device type, and screen resolution; pages visited, time spent on pages, referring URL and exit URL; clicks, scroll depth, and other interaction events; date and time of access; a coupon code cookie set when you arrive via a promotional link with a coupon_code query parameter (retained for 24 hours); and a language preference cookie storing your selected display language (retained for up to 1 year).
c. Information from third parties. We may receive information about you from identity providers (such as Google or Meta) if you sign in with them, payment processors that handle your transactions, visitor identification services that infer the company associated with your visit, and affiliate or referral partners.
Under the GDPR, we may only process your personal data when we have a lawful basis for doing so. We rely on the following legal bases for the purposes described below.
Performance of a contract (Art. 6(1)(b)): to provide and maintain the Website and our services, manage your account, process payments, and respond to service-related requests.
Consent (Art. 6(1)(a)): to send marketing communications by email, SMS, or RCS; to set non-essential cookies for analytics, marketing, and functional purposes; to load third-party tracking technologies; and to identify B2B visitors for sales outreach.
Legitimate interests (Art. 6(1)(f)): to respond to your inquiries and provide customer support; to keep our Website secure and prevent fraud; to understand and improve our products; and to communicate with existing customers about products and services similar to those they already use. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms, and you have the right to object at any time.
Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, regulatory, and other legal requirements applicable to our business.
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
We use cookies, pixels, local storage, and similar technologies (collectively, "cookies") to operate and improve our Website. In line with the GDPR and ePrivacy rules, we obtain your consent through a cookie banner before setting any non-essential cookies. The categories below mirror the choices available in our Cookie Preferences center.
Strictly necessary cookies. Required for the Website to function and cannot be disabled. They do not store personally identifiable information about you. Examples include: a language preference cookie (up to 1 year), a coupon code cookie set when you arrive via a promotional link (24 hours), and a cookie consent record stored in your browser's local storage so that we do not ask you again.
Analytics cookies. Help us understand how visitors use the Website so we can improve it. They are loaded only after you give consent. Providers: Google Analytics 4 and Ahrefs Analytics.
Marketing cookies. Used to deliver personalized advertising, measure ad performance, attribute referrals, and identify B2B visitors. They are loaded only after you give consent. Providers: Meta Pixel (Facebook), RB2B, and FirstPromoter.
Functional cookies. Enable enhanced features such as live chat support. They are loaded only after you give consent. Providers: the Spur Live Chat Widget.
You can review and change your cookie preferences at any time by visiting our Cookie Preferences page. You can also block or delete cookies through your browser settings, although doing so may affect how the Website works for you.
When you consent to non-essential cookies, the following third-party service providers may receive personal data through our Website. Each provider operates under its own privacy policy, which we encourage you to review.
Google LLC — Google Analytics 4 (Analytics). Provides website usage analytics. Categories of data: IP address, device and browser information, page views, and interaction events. Location: United States. Privacy policy: policies.google.com/privacy.
Ahrefs Pte. Ltd. — Ahrefs Analytics (Analytics). Provides SEO and traffic measurement. Categories of data: page views, referrers, device and browser information. Location: Singapore. Privacy policy: ahrefs.com/legal/privacy-policy.
Meta Platforms, Inc. — Meta Pixel (Marketing). Provides ad targeting, retargeting, and conversion tracking. Categories of data: IP address, device information, page views, and custom events; combined with Meta account data if you are signed in to Facebook or Instagram. Location: United States. Privacy policy: facebook.com/privacy/policy.
RB2B Inc. — RB2B (Marketing). Provides B2B visitor identification by inferring the company associated with a visit. Categories of data: IP address and derived company information. Location: United States. Privacy policy: rb2b.com/privacy-policy.
First Promoter SRL — FirstPromoter (Marketing). Provides affiliate and referral attribution. Categories of data: referral tracking identifiers and click events. Location: Romania (EU). Privacy policy: firstpromoter.com/privacy.
Spur — Spur Live Chat Widget (Functional). Provides real-time customer support directly through our Website. Categories of data: messages you send, contact information you choose to share, and the page on which the chat was initiated. This service is operated by us and is governed by this Policy.
We do not control the privacy practices of third parties listed above. Where these providers act as independent controllers, they determine the purposes and means of their own processing and you should review their privacy policies for full details.
Spur is established in India, and personal data we collect is processed and stored there. Several of our service providers are based in the United States or other jurisdictions outside the European Economic Area ("EEA"), the United Kingdom, or Switzerland.
When personal data is transferred from the EEA, the UK, or Switzerland to a country that has not been recognized as providing an adequate level of data protection, we rely on appropriate safeguards permitted under Articles 45 and 46 of the GDPR. These may include the European Commission's Standard Contractual Clauses (SCCs), the recipient's adherence to the EU–US Data Privacy Framework where applicable, or other lawful transfer mechanisms. You can request further information about the safeguards we rely on by emailing support@spurnow.com.
We retain personal data only for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by law. Account data is retained for the duration of your account plus a reasonable period after account closure for legal, accounting, and dispute-resolution purposes. Billing and transaction records are retained for the period required by applicable tax and accounting laws (typically up to seven years). Marketing contact data is retained until you withdraw consent or unsubscribe. Analytics data is retained according to the configured retention of the underlying tool (for example, Google Analytics 4 defaults to up to 14 months). Your cookie consent record is stored in your browser until you reset it. Live chat transcripts are retained for a reasonable period to support follow-up and quality review. Server and security logs are retained for a short period for security monitoring and incident response. When personal data is no longer required, we securely delete or anonymize it.
Spur does not sell or rent your personal data. We disclose personal data only in the following circumstances:
To service providers (data processors) who process data on our behalf to operate the Website and deliver our services. These providers are bound by contractual obligations to safeguard your data and use it only for the purposes we specify. The third parties listed in Section 5 are the primary recipients.
To advertising and analytics partners, but only after you have given consent through our cookie banner.
For legal reasons, when we believe in good faith that disclosure is necessary to comply with a legal obligation, court order, or government request, to enforce our terms, to protect the rights or property of Spur, or to protect the safety of users or the public.
In connection with a corporate transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, in which case personal data may be transferred as part of the transaction subject to appropriate confidentiality and protection obligations.
With your consent for any other purpose disclosed at the time of collection.
If you are located in the EEA, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data, subject to the conditions set out in the GDPR:
Right of access (Art. 15) — to obtain confirmation of whether we process your personal data and to receive a copy.
Right to rectification (Art. 16) — to have inaccurate or incomplete personal data corrected without undue delay.
Right to erasure / right to be forgotten (Art. 17) — to have your personal data deleted when one of the conditions set out in the GDPR applies.
Right to restriction of processing (Art. 18) — to limit how we use your data in certain circumstances.
Right to data portability (Art. 20) — to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to object (Art. 21) — to object to processing based on legitimate interests, including profiling and direct marketing.
Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw your consent at any time without affecting prior lawful processing.
Right not to be subject to automated decision-making (Art. 22) — including profiling that produces legal effects concerning you or similarly significantly affects you.
Right to lodge a complaint (Art. 77) — with your local data protection supervisory authority if you believe we have infringed your rights under the GDPR.
To exercise any of these rights, please email support@spurnow.com. We will respond within one month of receiving a verifiable request, as required by Article 12 of the GDPR. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests. We may need to verify your identity before fulfilling your request to protect your information from unauthorized disclosure.
Some of the third-party tools we use, notably Meta Pixel and RB2B, perform automated profiling to infer interests, demographics, or company affiliations. This profiling is used for advertising and B2B prospecting and is loaded only after you give marketing consent. You can opt out of profiling at any time by rejecting marketing cookies in our Cookie Preferences center. We do not make automated decisions that produce legal effects concerning you or that significantly affect you in a similar manner.
Our Website and services are not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us at support@spurnow.com and we will take steps to delete such information.
When you provide your mobile phone number and opt in through our website or platform, you consent to receive recurring automated marketing and promotional text messages (SMS and RCS) from Spur. These messages may include abandoned cart reminders, product updates, promotional offers, and account notifications.
Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply depending on your mobile carrier and plan.
You can opt out of receiving text messages at any time by replying STOP to any message. After opting out, you will receive a one-time confirmation message and no further marketing messages will be sent. For help, reply HELP to any message or email us at support@spurnow.com.
We do not sell, rent, or share your phone number with third parties for their marketing purposes. Your phone number is used solely to deliver the messages you have consented to receive.
Wireless carriers are not liable for delayed or undelivered messages.
For more details about our SMS program, please see our SMS Terms & Conditions.
We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by Articles 33 and 34 of the GDPR.
You may request access to, correction of, or deletion of your account information by sending an email to support@spurnow.com. Please note that some identification, billing, and contact information may need to be retained on our records for legal, accounting, or dispute-resolution purposes for the periods described in Section 7.
We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the Effective Date at the top of this Policy and, where appropriate, notify you through our Website, by email, or through other reasonable means. Your continued use of the Website after such updates constitutes your acknowledgment of the revised Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@spurnow.com. For more information about how we comply with the GDPR, please also see our GDPR Compliance page and our Data Processing Agreement.