Privacy Policy
Last updated: 09/04/2025
Non-contractual notice. This policy is for transparency and does not create contractual obligations beyond those in our Terms of Service. If there is a conflict, the Terms of Service control.
This Privacy Policy explains how PSS LLC, doing business as URNORY, collects, uses, discloses, and protects personal information. We operate in the United States. By using our site or services, you consent to this Policy.
1. Who We Are and Scope
PSS LLC, doing business as URNORY, is a Brooklyn, New York–based manufacturer and retailer of cremation urns and related services.
This Policy applies to:
- Our websites
- White-label storefronts we host for funeral home partners
- Customer support by email, SMS, or WhatsApp
- In-person communications
It does not cover sites we do not control.
Role of parties.
- For the main URNORY site and storefronts we host, PSS is an independent controller of personal information.
- For partner-owned sites, the partner is the controller for data they collect on their properties.
- Upon request we will provide a data processing addendum for processor engagements.
2. Personal Information We Collect
2.1 You provide it
- Account and checkout details: name, email, phone, shipping and billing addresses.
- Order content, inscriptions, uploaded images or logos, design notes, memorial text.
- Messages and recordings you send to support channels, including SMS and WhatsApp.
- Reviews and user-generated content you post on our sites.
2.2 Collected automatically
- Device and usage data (IP address, browser type, pages viewed, time on page, referring URLs).
- Cookie and similar data, session identifiers, and analytics events.
- Approximate location based on IP address.
2.3 From third parties
- Payment processors for fraud checks and payment authorization results.
- Shipping carriers for delivery status and tracking.
- Funeral home partners when you purchase through a white-label storefront.
3. How We Use Personal Information
- To provide and personalize products, including design proofing, production, and shipping.
- To communicate about orders, support requests, and service updates.
- To process payments, detect fraud, and secure our services.
- To operate white-label storefronts, including partner reporting and settlements.
- To improve our products and sites, including analytics and quality control.
- To comply with law, tax, and accounting obligations.
- With consent where required, for marketing by email, SMS, or WhatsApp. Message and data rates may apply. Reply STOP to opt out; HELP for help.
- For safety, security, and integrity, including preventing, detecting, and investigating malicious or illegal activity.
Data minimization and purpose limitation. We collect only the personal information reasonably necessary for the purposes described and do not use it for materially different purposes without notice or a new legal basis.
Aggregated and de-identified data. We may use or share aggregated or de-identified information that cannot reasonably be used to identify you, and we commit not to re-identify such data.
4. Legal Bases for Processing (EEA and UK)
Where the GDPR applies, we process personal information on these bases:
- Performance of a contract
- Legitimate interests (e.g., service improvement, fraud prevention)
- Consent (e.g., marketing)
- Legal obligation (e.g., tax, accounting)
4.1 Automated decisions
No solely automated decisions that produce legal or similarly significant effects about you.
5. Cookies and Similar Technologies
We use:
- Required cookies to run the site
- Functional cookies to remember preferences
- Analytics cookies to understand usage
- Advertising cookies for cross-context advertising only where permitted
You can manage non-required cookies in the site banner and your browser settings.
We honor Global Privacy Control (GPC) signals for opt-out of sale or sharing where applicable, and we recognize Colorado’s universal opt-out mechanism (UOOM) signals where required by law. A link to Privacy Choices is provided in the footer to manage cookie and advertising preferences.
6. Disclosure of Personal Information
We share personal information with:
- Service providers under contract (payment processors, shipping carriers, cloud hosting, analytics, communications tools). Service providers must use personal information only to provide services to us, must follow our instructions, must keep information confidential, and may not sell or share personal information.
- Funeral home partners when you purchase through their white-label storefront so they can support you.
- Authorities to comply with law or protect rights.
In a merger, acquisition, or asset sale, information may be transferred as part of the transaction subject to this Policy.
Law enforcement requests. We disclose personal information to law enforcement or regulators only when legally required or to protect rights and safety. We require valid legal process unless an emergency exception applies.
7. Sale or Sharing for Targeted Advertising
We do not sell personal information for money. We may share limited identifiers and device data with advertising or analytics partners to show ads or measure performance. Where state privacy laws define this as a “sale” or “sharing,” you can opt out at Privacy Choices or by emailing legal@pssart.com.
We honor Global Privacy Control signals and, in Colorado, recognized universal opt-out signals where applicable.
Opt-out preference signals. When we detect a valid signal, we apply it to the browser or device and, if you are logged in, to your account.
Nevada residents. We do not sell covered information as defined by Nevada law (SB 220). Opt-out requests: legal@pssart.com.
8. Sensitive Information
You may provide names, dates, religious symbols, or other sensitive content in inscriptions. You choose what to provide. Do not upload health information or government identifiers. We are not a HIPAA covered entity or business associate and our services are not designed for protected health information. We treat uploaded content as confidential and use it only to fulfill your order and provide support, consistent with our Terms of Service.
Minors. We do not knowingly sell or share personal information of consumers under 16, and we do not serve targeted advertising to known minors.
Limit use of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require a “limit use” choice under applicable law. If that changes, we will provide a method to limit such use.
9. Children’s Privacy
Our services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child under 13 provided information, contact us to delete it.
10. Data Retention
- Order and payment records: up to 7 years (tax and accounting).
- Design files and uploaded content: up to 18 months after fulfillment (support/remakes), then deleted or anonymized, except where law requires longer retention.
- Support messages: up to 24 months.
- Cookie and analytics data: per tool settings, typically 13–26 months.
You may request deletion as described below. We will retain limited records as required for fraud prevention, security, litigation holds, and legal obligations.
11. Security
We use reasonable administrative, technical, and physical safeguards. No method of transmission or storage is fully secure; we cannot guarantee absolute security.
Vulnerability disclosure. Report issues to security@urnory.co. Do not access or modify data that does not belong to you.
Security incident notice. If a data breach affects your personal information, we will notify you as required by law and will cooperate with partners and authorities.
12. Your Privacy Rights
12.1 United States state privacy rights
Depending on your state, you may have rights to access, correct, delete, receive a portable copy, and opt out of sale or sharing for targeted advertising.
Submit a request at Privacy Choices or email privacy@urnory.co with your name, email, and request type. We will verify your request and may deny requests we cannot verify.
- Verification. We verify using two or three data points depending on sensitivity. If we cannot verify after reasonable steps, we will deny the request and explain why.
- Authorized agents. Permitted with written permission and identity verification.
- Response timelines and appeals. We typically respond within 45 days, with a 45-day extension where reasonably necessary. If we deny your request, you may appeal within 30 days by replying to our decision or emailing appeals@urnory.co. We will respond to appeals within 45 days.
- Non-discrimination. We will not discriminate against you for exercising your privacy rights.
- Financial incentives. We do not offer programs that provide discounts or benefits in exchange for personal information. If we introduce one, we will provide a separate notice and opt-in.
12.2 California disclosures
We provide the following categories of personal information to service providers for business purposes: identifiers; customer records; internet or device activity; geolocation by IP; commercial information; and inferences from usage. We do not use or disclose sensitive personal information to infer characteristics. We honor GPC as a request to opt out of sale or sharing.
12.3 EEA and UK rights
If the GDPR applies, you have rights to access, rectify, erase, restrict, object, and data portability. You may withdraw consent at any time. You may lodge a complaint with a supervisory authority. Contact: privacy@urnory.co.
12.4 State-specific notices
- California notice at collection. The categories we collect, the purposes, and retention periods are described in Sections 2, 3, and 10 and in Appendix A. Opt out of sale/sharing at Privacy Choices or privacy@urnory.co. We honor GPC.
-
- California “Shine the Light.” We do not share personal information with third parties for their direct marketing purposes. If this changes, we will provide a method to opt out.
- Virginia, Colorado, Connecticut, Utah. Residents may have rights to opt out of targeted advertising and sale of personal data, and to appeal denied requests. Exercise these rights at Privacy Choices or legal@pssart.com. Appeals as described in Section 12.1.
13. Do Not Track
Some browsers send Do Not Track signals. We do not respond to DNT signals. We honor Global Privacy Control and, where required by law, recognized universal opt-out signals for state privacy opt-outs.
14. International Transfers
We operate in the United States. If you are outside the United States, you consent to transferring your information to the United States. Where required, we use appropriate safeguards such as the European Commission’s standard contractual clauses.
15. White-Label Storefronts
For white-label storefronts we host for funeral home partners:
- PSS is the controller for data collected on storefront pages we operate.
- The partner is the controller for data collected on its own site.
- We share limited order information with the partner to support you. The partner’s privacy policy also applies.
16. Communications, SMS, and WhatsApp
We send transactional messages about your order. With consent where required, we may send marketing by email, SMS, or WhatsApp. Message and data rates may apply. Message frequency varies. Reply STOP to opt out; HELP for help. These preferences do not limit service messages necessary to complete your order.
Call recording. We may record or monitor calls for quality assurance and training, where permitted by law.
17. Your Choices
- Opt out of marketing emails via unsubscribe in any email.
- Opt out of sale or sharing at Privacy Choices or legal@pssart.com.
- Manage cookies in our banner and in your browser (blocking may affect functionality).
- Disable analytics or advertising cookies in Privacy Choices. We honor GPC and recognized universal opt-out signals where required by law.
Third-party links. Our site may include links to third-party websites or services. Their privacy practices are governed by their own policies, not ours.
18. Changes to This Policy
We may update this Policy from time to time. We will post the new effective date. Material changes will apply prospectively.
19. Contact Us
For privacy requests: legal@pssart.com
General privacy contact: privacy@urnory.co
Appendix A — Summary Data Map
Categories collected: identifiers; customer records; commercial information; internet or device activity; geolocation by IP; user-generated content; inferences from usage.
Sources: you; your devices; partners; service providers.
Purposes: order fulfillment; personalization; support; fraud prevention; analytics; marketing with consent; legal compliance.
Disclosures: service providers under contract; partners when you buy through their storefront; legal authorities when required by law.
Sale or sharing: limited device and analytics data may be considered a sale or sharing under state law; opt-out available.
Retention: as stated in Section 10.
Sensitive personal information: not used to infer characteristics and not sold or shared.