Privacy Policy

1. Who we are

INTERNATIONAL UNATTENDED RETAIL ASSOCIATION (“IURA”, “we”, “us”) is a nonprofit organized under the laws of Washington State, United States.

Our mailing address is:

9407 NE Vancouver Mall Dr, Ste 104 #5636
Vancouver, WA 98662
United States

For privacy questions or requests, email legal@iuras.org.

This policy explains how we handle personal information in connection with IURA’s website, membership and related services.

2. Information we collect

Depending on which services you use, we collect information you provide when you create an account, maintain a business profile, buy membership or other services, submit a listing or quote request, participate in discussions, send messages, upload material or contact us.

This may include your name, email address, business details, location, contact information, account identifiers, contributions, communications and notification preferences.

We also handle membership and transaction records, including subscription and payment-status information. Payments are processed through Stripe; information you provide directly to a payment provider is also subject to that provider’s privacy notice.

Our website and service providers may collect technical information associated with visits and service use, such as browser information, network information, cookies and activity records.

Where we obtain business or contact information from a source other than you, including a directory import, we will provide information about the source and use where required by applicable law. You can contact us to ask about the source of information relating to you.

3. How we use information

We use information to:

• Create and administer accounts and memberships.
• Provide directories, listings, discussions, resources and other requested features.
• Process payments and maintain transaction records.
• Route quote requests and facilitate communications.
• Provide support and service-related notices.
• Moderate contributions, prevent misuse and protect the service.
• Comply with applicable legal obligations and handle complaints or disputes.

Optional marketing, analytics and advertising are separate from the information processing needed to provide core services. We will obtain consent where required and honour applicable objections and opt-outs.

Where data-protection law requires a legal basis, we process information as necessary to provide contracted services, comply with legal obligations, pursue permitted legitimate interests, or act on consent, as appropriate to the activity. Our legitimate interests include maintaining a secure service, preventing fraud and administering our professional community, subject to the rights and interests of affected people.

Consent can be withdrawn for future processing that relies on it. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

4. Public profiles and communications

Information published in public profiles, listings, discussions and reviews may be available to visitors and search engines. Do not include personal information in public contributions unless you intend to make it public and have authority to do so.

Account administration and billing information are not intended to be published as part of your public profile.

When you submit a quote request or communicate through a service feature, the information needed to handle that request or communication may be shared with its intended recipients. Check the information you include before sending.

Recipients may retain copies, and search engines or other third parties may retain previously public material outside IURA’s control.

5. Providers and disclosures

We use service providers for hosting, authentication, payments, file storage, email delivery and related operational functions. The application uses Clerk for authentication, Stripe for payments, Replit infrastructure and Postal email functionality.

Google Analytics and Meta Pixel load only after you accept optional tracking. If accepted, they may collect usage information and identifiers for analytics or advertising purposes and disclose them to Google or Meta.

Emails we send may use tracking technologies to record opens and clicks, along with associated IP addresses and user-agent information. Contact us about available choices for optional communications.

We may disclose information to comply with lawful requirements, address legal claims, investigate misuse or protect rights and safety, subject to applicable law.

6. Cookies and tracking choices

Cookies and similar technologies may support sign-in, service functionality, analytics and advertising.

Google Analytics and Meta Pixel are off by default. Choose Accept optional or Reject optional when prompted. Use Privacy choices in the website footer to change your choice or withdraw acceptance at any time. Withdrawing prevents future tracking on this site by these scripts after the page reloads; it does not erase data already sent or remove cookies set by third parties.

You can manage cookies through your browser. Blocking certain technologies may affect site functionality. Browser cookie settings do not necessarily stop every form of tracking or replace consent controls required by law. Contact legal@iuras.org with questions or requests concerning analytics, advertising or the use of your information.

7. Retention and deletion

We retain information for as long as reasonably necessary for the purposes described in this policy, considering the nature of the information, whether your account or request remains active, applicable recordkeeping requirements, security needs and unresolved disputes.

You can request account closure or deletion of personal information at legal@iuras.org. We will assess the request under applicable law. Some records may need to be retained for legal obligations, transaction records, dispute resolution or security. Public contributions and information held by other users may require separate consideration.

We do not promise a single retention period for all categories of information.

We assess retention separately for each category involved in a request and document the reason and a deletion or review date. Hiding or closing a profile is not the same as erasing all associated information. Messages, public contributions, transaction records and information held by service providers may require separate action or justified retention. We may retain limited suppression information to honor an objection to further outreach. Backup copies require separate handling, including restrictions on use and arrangements to reapply approved deletion if a backup is restored.

8. International processing

IURA is based in the United States and serves a worldwide community. Information may be processed in the United States and other countries where relevant providers operate. Privacy protections may differ between countries.

Where applicable law requires safeguards for international transfers, those safeguards must be in place. Contact legal@iuras.org for information about the arrangements relevant to your personal information.

9. Your rights and choices

Depending on the law that applies to you, you may have rights to access, correct, delete or obtain a copy of personal information; restrict or object to processing; withdraw consent; or exercise rights relating to targeted advertising or other regulated disclosures.

Send requests to legal@iuras.org. We may ask for information reasonably needed to verify your identity or authority. We will respond as required by applicable law and explain any applicable limitations.

You may also have the right to complain to your local data-protection or privacy regulator.

Use available notification preferences or unsubscribe controls to manage optional communications. Necessary account, security and transaction notices may still be sent.

10. Security

We are responsible for applying reasonable safeguards appropriate to the information we handle. No internet service or transmission method is entirely secure.

Protect your account credentials and report suspected misuse to us.

11. Intended audience

IURA is intended for people acting as self-service business operators or suppliers. It is not directed to children. If you believe a child has provided personal information inappropriately, contact legal@iuras.org so we can investigate and take appropriate action.

12. Policy updates

We may update this policy as services, practices or legal requirements change. The effective date identifies the current version. We will provide additional notice of material changes where required by law.