At GRICEY, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

When you interact with our store, we may collect the following personal data:

Name

Billing and shipping address

Email address

Phone number (if provided)

Payment information (processed securely by third-party payment providers — we do not store your full payment details)

Website usage information (via cookies and analytics tools)

2. How We Use Your Information

We use your personal data for the following purposes:

To process and deliver your orders

To communicate with you about your purchases or account

To send marketing emails (only if you have given consent)

To improve our products, services, and website functionality

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on:

Contract: To fulfil orders and provide customer service

Consent: For marketing communications (you can withdraw at any time)

Legal obligation: To comply with tax and accounting requirements

Legitimate interests: To improve our services and prevent fraud

4. Sharing of Information

We do not sell or rent your personal data to third parties.

We may share data only with:

Trusted service providers (e.g., payment processors, shipping companies)

Legal authorities if required to comply with the law

5. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access.

7. Cookies

Our website uses cookies to enhance your experience, analyse site usage, and improve our services. You can manage or disable cookies through your browser settings.

8. Your Rights (UK GDPR)

You have the following rights regarding your personal data:

Right of access – Request a copy of the data we hold about you

Right to rectification – Request corrections to inaccurate data

Right to erasure – Request deletion of your data (where applicable)

Right to restrict processing – Request limits on how we use your data

Right to data portability – Request transfer of your data to another service

Right to object – Object to processing (e.g., marketing communications)

Right to withdraw consent – Withdraw consent at any time where processing is based on consent

To exercise your rights, please contact us at the details below.

9. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

GRICEY

Email: Michael.w@gricey.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.