How Pura handles information
PURA SUPPORT LTD, 2a Crescent West, Thornton-Cleveleys, England, FY5 1AD, provides Pura Business Compliance Check. This notice explains how we use information submitted through the service.
Information used
We process business name, business description, workforce size, answers, report reference, payment status, technical event data, contact details you choose to provide, selected service or ISO interest, customer-service email correspondence, email threading identifiers, and documents you choose to upload or attach. SumUp handles payment entry; A001 does not receive or store raw card numbers or CVV.
Why we use it
We use information to generate and display your requested assessment, verify payment, answer and retain customer-service correspondence, recover reports, route enquiries, prevent abuse, preserve document/remediation context, maintain security, and meet accounting or legal obligations. Routine requests may be handled using controlled rules and approved templates; uncertain, complaint, refund and legal matters are escalated for human review. Correspondence is not used for unrelated marketing profiling. Marketing consent is separate. Transactional emails are sent and received through Resend using isolated Pura subdomains.
Uploaded and emailed documents
Uploaded and inbound-email files are held in assessment-isolated storage outside the public website. New files are quarantined and are never executed. Access is limited to the assessment service and authorised review. Supported files must pass type, size and signature checks and a local malware scan before bounded text extraction. We retain the original, an extracted representation and processing provenance where extraction is safe. Image-only or uncertain evidence remains subject to controlled review. Suspicious and failed scans remain quarantined and are not analysed.
Retention and rights
Assessment, transaction, correspondence, uploaded-document metadata and support records have an operational target of 24 months unless a longer period is required for legal, accounting, fraud-prevention or dispute purposes. We minimise retained email headers to those needed for threading, security and loop prevention. You may ask for access, correction, deletion or other rights available under UK data-protection law.
Contact and complaints
Contact PURA SUPPORT LTD at compliance@pura-support.com or write to 2a Crescent West, Thornton-Cleveleys, England, FY5 1AD. We will consider complaints about our handling of information; you can also contact the ICO.