Privacy policy

Grace & Oliver runs this website and store, along with all related content, tools, features, and services, to provide you with a curated shopping experience (the "Services"). Our store operates on Shopify's platform, which allows us to deliver these Services to you. This Privacy Policy explains how we gather, use, and share your personal information whenever you browse our site, make a purchase, or otherwise get in touch with us. Where any conflict exists between our Terms of Service and this Privacy Policy, this Privacy Policy takes precedence on matters of personal information collection, use, and disclosure.

Please take the time to read this policy in full. By accessing or using our Services, you confirm that you have read and understood how your information is collected, used, and shared as set out below.

Personal Information We Collect

"Personal information" refers to any data that identifies you, or could reasonably be linked back to you. It does not include information that has been anonymized or de-identified in a way that prevents it from being tied to you. Depending on how you use our Services, where you're located, and what the law requires, we may collect the following types of information (including conclusions drawn from it):

• Contact details — name, billing and shipping addresses, phone number, email address.
• Payment information — card numbers, financial account details, transaction records, payment method, and confirmation details.
• Account details — username, password, security questions, saved preferences and settings.
• Order activity — products you browse, add to your cart or wishlist, purchase, return, exchange, or cancel, plus your order history.
• Support communications — anything you share with us, such as when you contact customer service.
• Device data — details about the device, browser, and network you use, including your IP address and other identifiers.
• Site activity — how you browse and interact with our Services over time.

Where This Information Comes From

We gather personal information through:

• You directly — when you set up an account, browse or shop with us, reach out to us, or otherwise share your details.
• Automated collection — data gathered from your device as you use our Services, including through cookies and comparable tracking tools.
• Our service providers — partners we rely on for technology, who may collect or process data for us.
• Other partners or third parties.

How We Use This Information

We may use your personal information for the following purposes, depending on how you engage with us:

• Running, personalizing, and improving the Services. This covers fulfilling our agreement with you — processing payments, completing orders, remembering your preferences, sending account-related updates, managing returns and exchanges, letting you leave reviews, and shaping product recommendations based on your activity. We also use this data to refine and enhance the Services generally.
• Marketing and promotions. We may send marketing emails, texts, or mail, and display ads for our products elsewhere online, sometimes based on your past purchases, cart activity, or other engagement with us.
• Keeping accounts secure and preventing fraud. We use your data to verify your identity, protect transactions, spot and investigate suspicious or unlawful activity, and keep our Services safe. Keeping your login credentials private is your responsibility — please don't share them with anyone.
• Customer support. We use your details to respond to inquiries, provide assistance, and maintain our relationship with you.
• Meeting legal obligations. This includes complying with the law, responding to formal legal requests from courts or government bodies, participating in legal proceedings, and enforcing our own policies.

When We Share Personal Information

We may disclose your information to third parties under certain circumstances, always in line with this policy:

• Service providers (including Shopify) who support our operations — for example IT, payments, analytics, customer support, storage, and order fulfillment.
• Marketing partners, to help deliver and personalize advertising. Shopify enables personalized ads based on your activity across different merchants, and our partners handle your data under their own privacy policies. Depending on your location, you may be able to opt out of this kind of targeted advertising — details on how to do so are below.
• At your request or with your consent — for example, to arrange shipping, or when you use social login or sharing tools.
• Within our corporate family, including affiliated companies.
• During business changes, such as a merger, sale, or bankruptcy — as well as to meet legal requirements, respond to subpoenas or similar orders, enforce our policies, or protect our business and our customers.

Our Relationship With Shopify

Our store is hosted through Shopify, which processes data related to your use of our Services in order to help us run and improve them. Anything you submit through our Services is shared with Shopify and, in some cases, third parties located outside your home country, so that the Services can function and improve. We also use certain Shopify features that draw on aggregated data from interactions across our store and other Shopify merchants. For these specific features, Shopify itself is responsible for handling your data and any related requests. You can read more about how Shopify manages personal information, and what rights you may have, via Shopify's own Consumer Privacy Policy, and — depending on where you live — through the Shopify Privacy Portal.

Links to Other Websites

Our Services may contain links to external sites we don't control. If you visit one of these, we encourage you to review their own privacy practices — we can't vouch for the security or accuracy of third-party sites. Anything you post in public spaces, including on third-party social platforms, may be visible to others and used beyond our control. Linking to a third-party site doesn't mean we endorse it or its operators, unless we say so directly.

Children's Privacy

Our Services aren't designed for children, and we don't knowingly gather personal data from anyone under the legal age of majority where they live. If you're a parent or guardian and believe your child has shared personal information with us, contact us using the details below and we'll remove it. As far as we're aware, we do not "sell" or "share" (as legally defined) personal data belonging to anyone under 16.

Keeping Your Data Safe

No system is completely secure, and we can't promise perfect protection for any information you send us — especially while it's in transit. Avoid sending sensitive details through channels that aren't secure.

How long we hold onto your information depends on things like whether we still need it to service your account, meet legal duties, resolve disputes, or enforce our agreements and policies.

Your Rights

Depending on where you live, you may have some or all of these rights regarding your personal information, though they aren't unlimited and may not apply in every situation:

• Access — request to see what personal data we hold about you.
• Deletion — ask us to erase personal data we have on file.
• Correction — ask us to fix inaccurate information.
• Portability — request a copy of your data, or ask us to send it to another provider, subject to certain conditions.
• Opting out of targeted advertising or data "sale." Depending on your location, you may be able to opt out of having your data used to "sell," "share," or serve you targeted ads. If you browse our site with a Global Privacy Control signal turned on, we'll treat that as an opt-out request for that browser and device where required by law — and, if we can match it to a Shopify account, we'll apply it there too. Learn more about GPC at globalprivacycontrol.org. We don't currently act on other "Do Not Track" browser signals.
• Managing marketing preferences. You can unsubscribe from promotional emails anytime using the link in those emails. You'll still receive non-promotional messages, like order or account updates.

To exercise any of these rights, use the options provided on our site or contact us directly using the details below. For more on how Shopify handles your data and your related rights, visit Shopify's privacy page at privacy.shopify.com/en.

We won't treat you differently for exercising these rights. We may ask you to verify your identity before acting on a request, as the law allows. You're also permitted to appoint someone to submit a request on your behalf, though we may still need proof of that authorization and confirmation of your identity. We'll respond within the timeframe required by applicable law.

Complaints

If you're unhappy with how we've handled your personal information, reach out using the contact details below. Depending on where you live, you may also be able to appeal our response or file a complaint with your local data protection authority.

Transferring Data Internationally

We may store and process your information in countries other than the one you live in. When transferring data out of the European Economic Area or UK, we rely on approved mechanisms such as the European Commission's Standard Contractual Clauses (or UK equivalents), unless the destination country is already recognized as offering adequate protection.

Updates to This Policy

We may revise this Privacy Policy periodically to reflect changes in our practices or for legal, regulatory, or operational reasons. Updates will be posted here with a refreshed "last updated" date, along with any additional notice required by law.

Contact Us

Questions about our privacy practices, or want to exercise any of your rights? Email us at info@grace-and-oliver.com.